Route Origin Authorization

$ cd rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/

$ rpki-client -vvf 1BgnRnfyGiBAUkQmdDWa8viIpxU.roa
File:                     1BgnRnfyGiBAUkQmdDWa8viIpxU.roa (download)
Hash identifier:          L8yJfXvnfDX4EXZxIcxSu1disOxHwV+JoNBcczzVbjU=
Subject key identifier:   D4:18:27:46:77:F2:1A:20:40:52:44:26:74:35:9A:F2:F8:88:A7:15
Certificate issuer:       /CN=8cef626d4dd21d587d607134cc0f29847aae2732
Certificate serial:       0104E9F1
Authority key identifier: 8C:EF:62:6D:4D:D2:1D:58:7D:60:71:34:CC:0F:29:84:7A:AE:27:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jO9ibU3SHVh9YHE0zA8phHquJzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/1BgnRnfyGiBAUkQmdDWa8viIpxU.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 37.140.222.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17099249 (0x104e9f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cef626d4dd21d587d607134cc0f29847aae2732
        Validity
            Not Before: Jan  1 12:05:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d418274677f21a204052442674359af2f888a715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9a:bf:cd:b5:62:94:82:c8:6f:4e:1d:94:4d:
                    2c:af:f7:d1:f4:a8:29:8f:70:9c:95:1a:85:45:44:
                    08:4c:72:7a:df:6a:ae:68:23:ae:f0:32:dd:05:17:
                    69:a8:51:26:45:85:5c:11:f9:11:c8:51:51:d1:2e:
                    09:3d:77:66:3a:c8:fc:d4:95:33:a2:ec:bb:cd:78:
                    c9:63:3f:72:ba:00:a3:51:53:ee:c8:41:a9:41:e6:
                    ca:cc:17:cc:8c:9a:af:af:f2:16:3a:8b:cf:ef:58:
                    6f:5b:f8:1d:8f:ca:71:35:ea:b4:a2:00:6b:e3:49:
                    53:17:8e:dc:0c:e5:af:ec:6e:97:02:65:92:a4:4d:
                    4b:1c:9d:7f:a1:3e:7d:21:e2:87:1f:65:87:2a:7d:
                    53:13:da:19:38:f2:d7:b9:c8:a3:be:bf:bc:3d:77:
                    5a:ad:2f:8f:f2:ed:a5:28:b9:e5:07:a9:f8:bc:6b:
                    0a:fb:c4:21:80:4e:7b:54:7f:21:59:23:5c:4a:7c:
                    ac:e4:70:66:cc:6d:43:2f:b9:71:19:38:66:59:f0:
                    53:3d:de:a8:08:e1:f1:60:76:f4:8c:f1:ba:cb:4a:
                    a2:22:71:7d:37:cd:39:a0:a4:d7:02:50:df:80:12:
                    07:d6:8c:64:5d:2d:1b:3e:c4:72:30:1e:13:e0:5c:
                    8d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D4:18:27:46:77:F2:1A:20:40:52:44:26:74:35:9A:F2:F8:88:A7:15
            X509v3 Authority Key Identifier: 
                keyid:8C:EF:62:6D:4D:D2:1D:58:7D:60:71:34:CC:0F:29:84:7A:AE:27:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO9ibU3SHVh9YHE0zA8phHquJzI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/1BgnRnfyGiBAUkQmdDWa8viIpxU.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/jO9ibU3SHVh9YHE0zA8phHquJzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.140.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:56:d7:0f:ed:81:59:71:3f:34:4b:84:ee:64:48:3a:93:2e:
         1f:79:2f:17:58:e0:d3:1f:03:ba:c1:41:89:1c:31:0f:72:ea:
         34:39:69:b9:5d:cc:d6:e7:8c:48:a8:25:64:a7:fd:a9:a6:9f:
         1e:61:79:e0:61:38:9f:32:17:cd:cf:20:93:d3:2d:0c:54:eb:
         c3:74:0a:d1:8d:cb:d4:74:91:1c:f2:3e:c5:fa:76:93:de:3d:
         88:c2:32:ff:2d:84:6d:8e:9d:4c:8d:2d:d6:bb:75:8c:be:2c:
         cf:a9:07:88:27:ca:a9:95:13:ec:32:26:02:56:75:9e:1d:46:
         86:60:62:b8:fc:57:f5:9f:03:43:af:f7:7a:44:b2:6f:58:2e:
         6a:4b:40:0d:b9:ba:e4:56:72:ad:1e:c3:65:61:57:6e:ed:0c:
         20:40:24:ab:e7:75:8e:c8:fe:94:a8:3f:58:b2:19:5d:16:53:
         22:5c:8d:12:53:4b:05:bc:69:76:a8:4b:f5:d2:53:26:30:5a:
         40:8f:a8:24:7f:7f:b1:34:b9:0a:d5:7c:ad:cc:96:a7:4d:4b:
         e8:e2:63:e4:3c:3d:1b:09:eb:b0:da:95:c3:79:22:24:71:d4:
         ca:53:57:c9:e9:22:94:70:48:1b:6a:63:08:91:0a:e5:f4:9c:
         d4:8b:76:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 12:22:54 2022 by rpki-client.