Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/RpAkwi18A26my30uQDgSdZerGEI.roa
File:                     RpAkwi18A26my30uQDgSdZerGEI.roa (download)
Hash identifier:          PZlQlfeEH7le+/LEhB0hT/y/x2nO4ba7F0KDdCt0kpY=
Subject key identifier:   46:90:24:C2:2D:7C:03:6E:A6:CB:7D:2E:40:38:12:75:97:AB:18:42
Certificate issuer:       /CN=26dc466e56225124ee805885441305662ceb1f23
Certificate serial:       BE51A8
Authority key identifier: 26:DC:46:6E:56:22:51:24:EE:80:58:85:44:13:05:66:2C:EB:1F:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtxGblYiUSTugFiFRBMFZizrHyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/RpAkwi18A26my30uQDgSdZerGEI.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 217.119.143.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12472744 (0xbe51a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26dc466e56225124ee805885441305662ceb1f23
        Validity
            Not Before: Jan  1 00:56:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=469024c22d7c036ea6cb7d2e4038127597ab1842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:57:47:65:e4:51:89:47:4c:fe:df:36:13:74:
                    65:6e:84:e1:5e:9a:d2:29:ab:45:cb:dc:e2:c1:b2:
                    50:0f:8d:52:93:26:96:66:18:9f:4f:e0:d2:5e:cf:
                    7a:a6:2f:d3:de:99:7c:ee:42:99:ab:f3:45:9c:8f:
                    2f:27:46:5e:4e:7e:35:5b:23:08:63:9e:ee:6d:20:
                    11:3f:ac:ec:63:d5:3e:97:fd:76:9a:8b:6e:8c:21:
                    6e:ef:d2:f8:07:b5:e4:a0:00:dc:c1:45:b5:9b:5c:
                    68:c3:ef:24:60:8e:df:26:76:8f:c0:a3:8f:bc:16:
                    a4:c2:2b:57:23:eb:7e:ef:dd:6d:e3:6e:96:d4:52:
                    1a:bb:5a:af:9d:8b:d7:db:7c:d1:fd:d1:c2:d9:67:
                    59:c6:13:81:3c:c9:cc:00:b7:42:07:9f:7c:85:6d:
                    28:47:64:e9:dc:aa:c4:e9:76:e7:da:6d:d7:e5:f3:
                    e3:d7:ec:9d:6a:43:6a:30:69:56:23:54:22:2e:cb:
                    0f:c4:ed:7e:d7:a9:06:a8:f5:dc:02:c9:20:38:4c:
                    04:1c:0f:b6:1d:08:7e:da:c2:e4:97:3f:f6:17:59:
                    b7:a9:2c:68:0c:1c:9d:d4:a2:e6:9a:ed:82:b6:80:
                    42:8c:99:94:2f:bd:7e:7d:5a:87:32:aa:66:10:49:
                    91:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                46:90:24:C2:2D:7C:03:6E:A6:CB:7D:2E:40:38:12:75:97:AB:18:42
            X509v3 Authority Key Identifier: 
                keyid:26:DC:46:6E:56:22:51:24:EE:80:58:85:44:13:05:66:2C:EB:1F:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtxGblYiUSTugFiFRBMFZizrHyM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/RpAkwi18A26my30uQDgSdZerGEI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/JtxGblYiUSTugFiFRBMFZizrHyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.119.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:6a:1c:51:ec:5f:16:81:7a:06:6d:83:f5:95:6e:fb:7a:f8:
         fd:c5:18:08:0e:7e:2a:ce:4c:aa:92:0c:3c:b3:de:b0:7b:0d:
         86:4e:26:e9:9b:b7:c2:d8:0b:2a:15:39:86:ff:c3:31:b8:ab:
         4d:2a:7c:57:75:8a:20:9c:21:a6:09:6f:a0:46:cc:ff:3b:87:
         1b:68:cb:9d:0c:37:c0:0e:90:9f:4a:8d:d3:0a:74:a5:02:91:
         8d:ff:6b:7b:dc:9d:4d:e3:20:7b:cf:30:61:f7:2e:92:10:66:
         e7:ad:96:f5:17:84:75:aa:c8:f6:91:22:b2:44:2c:4e:17:1e:
         bc:20:c6:be:74:e6:3b:ea:cd:4f:3e:cd:8b:e0:0e:97:d5:62:
         58:b0:5b:97:90:0b:42:c2:58:27:18:a9:c6:45:d3:78:44:18:
         06:7d:56:7e:8c:04:91:b4:f1:fd:f8:b0:8c:26:a0:41:d8:b4:
         7d:35:e9:08:cf:5e:f5:93:00:42:e8:c7:7d:5b:d9:5c:cc:64:
         4e:73:b7:c5:1d:ef:21:70:ab:7e:4b:39:5d:e6:02:1c:91:f1:
         a1:e5:6e:11:35:9d:ff:0d:02:87:7a:00:1f:19:02:a8:90:e4:
         ba:97:72:78:d9:3b:3a:3e:8e:b9:de:f2:30:b4:e5:f5:7f:50:
         05:01:a9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 08:36:38 2022 by rpki-client.