Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/nGpFOcjWirP-fohytRFNxAllJ_M.roa
File:                     nGpFOcjWirP-fohytRFNxAllJ_M.roa (download)
Hash identifier:          H+Il4Ma1MbUoFQAwUyNexH2fygIr6C/z/fo5jOeRIIo=
Subject key identifier:   9C:6A:45:39:C8:D6:8A:B3:FE:7E:88:72:B5:11:4D:C4:09:65:27:F3
Certificate issuer:       /CN=db3f546b24b7dbb0984a09c62660a52bad287757
Certificate serial:       0137CAAC
Authority key identifier: DB:3F:54:6B:24:B7:DB:B0:98:4A:09:C6:26:60:A5:2B:AD:28:77:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2z9UayS327CYSgnGJmClK60od1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/nGpFOcjWirP-fohytRFNxAllJ_M.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 5.172.180.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20433580 (0x137caac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db3f546b24b7dbb0984a09c62660a52bad287757
        Validity
            Not Before: Jan  1 05:01:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9c6a4539c8d68ab3fe7e8872b5114dc4096527f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:ec:e5:5f:6a:65:88:e8:ac:e2:f1:d9:cc:
                    47:b7:75:06:ee:fa:3c:3f:7e:9a:47:2d:1f:fe:87:
                    54:1e:47:79:73:cd:d4:c5:16:1c:1c:0c:40:1c:42:
                    4c:3e:fa:9a:e6:af:e0:6c:4f:6b:0d:ec:30:3d:7a:
                    96:7c:b7:2e:23:b4:19:3f:e0:ac:88:75:22:ab:12:
                    54:29:de:20:5c:38:d4:f4:b3:ab:4f:aa:0d:1c:70:
                    e2:da:ca:7e:15:38:7c:61:80:f3:fe:53:47:3c:e7:
                    a2:b1:9e:88:02:b5:f4:29:d4:48:6c:a3:e7:72:20:
                    a5:d5:c1:ab:48:7d:b1:94:3f:cf:8a:a2:32:e1:0b:
                    96:e3:45:71:b7:2a:c7:a3:01:c1:c4:43:f4:83:6c:
                    11:20:51:fc:d3:88:6c:86:af:58:49:d8:6e:aa:46:
                    4b:74:20:38:2d:a5:ff:61:e4:bc:47:68:5b:36:51:
                    53:3d:54:0f:e4:af:c4:63:a3:a2:e5:95:0d:f2:94:
                    6a:da:b2:ff:29:78:be:6b:19:12:de:cb:29:c8:9c:
                    4d:60:75:7f:fd:53:22:2b:ba:da:ed:fe:1a:9c:4f:
                    62:97:e9:fd:7d:8e:24:5d:a6:22:2b:14:85:1e:ea:
                    42:de:2e:6a:d5:c2:d9:ed:22:e1:e9:32:fd:18:77:
                    eb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9C:6A:45:39:C8:D6:8A:B3:FE:7E:88:72:B5:11:4D:C4:09:65:27:F3
            X509v3 Authority Key Identifier: 
                keyid:DB:3F:54:6B:24:B7:DB:B0:98:4A:09:C6:26:60:A5:2B:AD:28:77:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2z9UayS327CYSgnGJmClK60od1c.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/nGpFOcjWirP-fohytRFNxAllJ_M.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/2z9UayS327CYSgnGJmClK60od1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.172.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:48:b8:36:d4:d6:09:f6:ea:9c:f5:3f:04:e1:5d:10:77:3b:
         43:ce:93:8d:00:dd:8e:66:b9:37:31:c4:dd:15:ed:21:30:d5:
         da:ad:dc:7f:c3:3f:45:5e:c7:db:c4:d6:b0:46:cc:4e:f0:16:
         7e:4e:b0:f8:a5:c4:a9:f7:6a:69:93:ee:a2:b0:f5:17:56:28:
         0a:40:96:96:32:0d:3a:7b:5e:66:24:cd:ab:f3:1f:50:42:1b:
         e4:bf:80:fe:9e:e5:7e:9b:df:c5:be:aa:e2:bc:0d:db:46:18:
         f7:ee:d5:2e:8e:1c:b5:0f:88:c6:11:54:74:4f:df:1c:4d:cb:
         a7:fb:a6:ad:6e:55:2e:f1:e6:e0:b3:03:d3:8a:18:b9:24:d3:
         69:e1:48:97:fd:e7:2d:25:24:8e:f3:3e:d6:51:b2:f2:35:be:
         28:2f:9d:9f:22:bd:6e:d0:a5:64:2e:b2:8a:3b:7f:58:b2:59:
         8e:fe:bc:e7:92:74:0b:0f:62:c4:34:72:03:1e:02:7d:bc:5e:
         24:56:58:72:16:e8:b4:ab:40:2f:c7:9d:d1:55:76:7f:17:0b:
         5a:af:6e:71:9a:61:52:52:26:4d:4f:e7:cc:d2:05:7e:c4:4d:
         4b:5b:fe:75:99:31:f4:77:1a:58:58:4b:c2:20:c9:1a:75:21:
         85:36:75:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 20:05:53 2022 by rpki-client.