Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/J7skXYpvBRIHw6ZxYogcHln-c78.roa
File:                     J7skXYpvBRIHw6ZxYogcHln-c78.roa (download)
Hash identifier:          Qimr8LwhVuOF6rj6vBoaA1gEYdPlRIil79m9ICT8GRI=
Subject key identifier:   27:BB:24:5D:8A:6F:05:12:07:C3:A6:71:62:88:1C:1E:59:FE:73:BF
Certificate issuer:       /CN=3c7d334181cc6a3553f758b7b70e370f2d8b1c0a
Certificate serial:       50F405
Authority key identifier: 3C:7D:33:41:81:CC:6A:35:53:F7:58:B7:B7:0E:37:0F:2D:8B:1C:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PH0zQYHMajVT91i3tw43Dy2LHAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/J7skXYpvBRIHw6ZxYogcHln-c78.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 193.203.127.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5305349 (0x50f405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7d334181cc6a3553f758b7b70e370f2d8b1c0a
        Validity
            Not Before: Apr 28 10:16:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=27bb245d8a6f051207c3a67162881c1e59fe73bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:8f:e7:15:bc:fd:5e:31:05:a3:f2:50:70:
                    56:10:03:86:b8:c4:a6:b8:bb:80:36:ce:f3:62:b5:
                    8b:a0:34:b9:1e:13:cd:0d:5e:79:45:aa:22:23:77:
                    ad:8f:0b:cf:87:c4:e4:0d:ee:31:2b:08:6c:45:65:
                    dc:6a:94:5a:58:c4:02:94:e6:23:ec:54:71:18:e5:
                    eb:f5:7f:85:b4:42:4b:15:c1:ee:87:ad:45:b7:df:
                    26:d2:6a:08:dd:20:62:68:b1:7d:5c:7a:bd:2e:7d:
                    0e:8e:84:5b:2e:cd:23:64:20:cc:7f:a0:f9:d0:30:
                    6a:c7:bb:fb:5c:a0:b5:cd:00:55:c5:46:27:7e:7b:
                    90:66:08:7e:0f:7f:6c:2e:92:aa:3b:06:32:ad:27:
                    9b:02:2e:eb:29:5a:de:0a:43:c5:8b:b2:8a:e9:78:
                    cf:71:19:3e:98:c9:b7:87:01:21:ee:00:80:d7:d8:
                    39:26:7f:e4:c9:04:13:0d:ca:a0:52:5d:47:6f:51:
                    0b:7a:d0:e4:92:fa:03:33:e5:d9:f4:d9:11:e3:e1:
                    af:76:af:bc:60:39:5d:66:f4:69:73:53:f2:e8:31:
                    47:1a:58:43:26:7d:6f:77:4d:d0:84:07:05:85:28:
                    77:37:f7:fe:2a:f4:aa:af:31:e1:8c:6f:86:e0:b1:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                27:BB:24:5D:8A:6F:05:12:07:C3:A6:71:62:88:1C:1E:59:FE:73:BF
            X509v3 Authority Key Identifier: 
                keyid:3C:7D:33:41:81:CC:6A:35:53:F7:58:B7:B7:0E:37:0F:2D:8B:1C:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH0zQYHMajVT91i3tw43Dy2LHAo.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/J7skXYpvBRIHw6ZxYogcHln-c78.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/PH0zQYHMajVT91i3tw43Dy2LHAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:d5:19:17:1b:aa:a7:eb:58:c1:6e:e3:8f:92:97:0c:f2:d9:
         ba:fc:ca:bb:59:61:0c:ea:44:d9:50:e4:26:c6:b6:6c:ae:4d:
         87:2d:56:1a:ee:1d:c5:63:1f:01:77:f7:3e:f6:d6:3e:78:58:
         5e:b0:0d:e0:dd:62:93:e2:82:2d:da:2a:98:c9:d1:b1:f2:84:
         91:2c:c5:b0:7b:82:4d:6a:8f:b7:d9:b0:f1:4b:31:8c:05:fc:
         c1:2f:57:d3:67:ae:52:bf:d8:94:cc:a0:f0:22:6e:df:64:10:
         80:d0:15:2d:9b:75:6d:1c:d8:42:f2:4f:a2:b6:96:e4:27:a3:
         89:31:da:17:0f:6a:d5:6e:4f:f3:8d:d5:04:28:3b:f1:fb:01:
         d0:d2:95:a4:a0:47:13:d4:2f:c7:27:e8:07:5f:e3:d2:9a:37:
         72:45:de:1a:32:9b:60:f1:cc:14:39:1e:0b:88:8a:0b:dd:2d:
         ad:2c:01:17:64:63:36:fe:be:34:80:bb:67:96:7a:1b:3c:0c:
         da:77:e3:c4:37:21:ef:50:91:14:12:e1:5b:df:32:2c:63:6f:
         f1:75:92:cb:dd:5a:15:1d:9c:e2:d6:45:d1:46:3c:65:00:84:
         f5:a9:6f:fb:fa:d5:d5:44:37:aa:2b:35:fe:20:ff:c8:65:df:
         3b:8d:ec:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 08:36:48 2022 by rpki-client.