Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/gxjKvPu1VqeTBECrPUnThzef9UM.roa
File:                     gxjKvPu1VqeTBECrPUnThzef9UM.roa (download)
Hash identifier:          /y/EPb44BskVrTV0LNYnSBte7cpUcFqtprfRG1XBZAk=
Subject key identifier:   83:18:CA:BC:FB:B5:56:A7:93:04:40:AB:3D:49:D3:87:37:9F:F5:43
Certificate issuer:       /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial:       0411240C
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/gxjKvPu1VqeTBECrPUnThzef9UM.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     400040
IP address blocks:
    1: 194.169.49.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68232204 (0x411240c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
        Validity
            Not Before: Jan  5 22:55:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8318cabcfbb556a7930440ab3d49d387379ff543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:31:37:d4:1b:c6:c9:80:78:56:29:18:8b:dc:
                    1e:a7:23:d5:f7:12:1e:98:9a:b5:c9:a2:73:d4:88:
                    84:7e:b0:a6:9f:a3:06:a3:fd:1b:c0:9f:26:41:2f:
                    1f:b1:88:7c:bc:87:ec:6a:bf:71:cb:1e:02:b8:7a:
                    d2:41:3f:8a:24:ea:df:9f:b4:c6:e7:1b:8b:ea:87:
                    ab:a2:52:49:3c:96:78:b2:08:f4:9b:90:c5:22:74:
                    d0:95:03:6b:78:02:06:f7:4c:62:f7:e8:10:3a:98:
                    49:72:11:75:ab:ad:a3:58:a1:fd:c5:f7:3a:83:c1:
                    56:f5:95:d5:fa:bd:67:c8:36:00:d4:7a:25:4d:87:
                    7e:43:48:38:72:eb:92:5d:c2:f3:38:62:67:a2:bf:
                    39:1f:fc:83:3e:e9:71:bf:36:d0:b1:a7:91:2c:5e:
                    45:bb:d3:5b:01:d8:a7:21:d4:45:0f:3c:98:d9:39:
                    55:e0:4a:da:d9:ee:b5:7c:62:ee:00:48:f3:1f:8c:
                    1d:76:63:d4:bf:8c:45:23:a0:f6:7b:35:f2:8c:0d:
                    36:cc:ac:48:a7:74:90:75:05:fd:b5:70:01:f5:9b:
                    bf:88:6a:c5:d3:dc:fc:1b:b3:65:f1:53:3b:46:ad:
                    c2:17:b5:e8:6a:c0:cc:ad:42:37:f9:da:01:bc:49:
                    f0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                83:18:CA:BC:FB:B5:56:A7:93:04:40:AB:3D:49:D3:87:37:9F:F5:43
            X509v3 Authority Key Identifier: 
                keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/gxjKvPu1VqeTBECrPUnThzef9UM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.169.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:6c:4a:0b:00:82:4f:47:09:fa:0a:cd:9a:3b:1b:07:cd:92:
         62:09:57:e4:c4:64:c6:44:c1:44:a2:f1:17:72:24:23:5a:65:
         e8:96:ab:a3:5b:04:75:78:cb:4a:ef:93:ad:98:42:6c:01:12:
         9c:a6:3e:15:ac:f6:d7:ee:86:84:81:52:41:41:0d:b8:98:6b:
         9c:94:37:41:6e:70:48:18:bc:b7:e2:b5:88:37:39:be:8e:ee:
         34:bb:94:cb:6e:ce:2d:ca:7e:d2:aa:75:4a:9c:58:53:91:40:
         60:40:8b:db:51:07:65:df:1b:20:97:31:15:55:66:22:db:3b:
         80:ee:f1:5b:11:8e:c2:80:56:8c:cc:d1:5e:cc:bd:10:11:57:
         cc:79:94:e3:ae:8f:88:d0:a6:08:63:12:99:31:56:9c:5d:a2:
         89:3b:2b:e0:06:c0:5d:01:db:6c:10:39:65:99:b4:d5:a9:45:
         6a:40:7d:79:db:e5:30:af:9e:73:69:d0:0f:d9:94:f6:a6:3b:
         49:c3:be:b4:5e:7f:b6:6f:89:77:2f:99:db:cc:e6:ed:a6:da:
         5d:f7:bb:48:57:7e:49:63:cc:dc:03:8c:af:3e:2b:15:c1:b2:
         a0:f3:4b:a5:9c:59:7e:37:5b:ed:77:95:0f:0b:ee:7c:08:73:
         22:41:05:19
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBBEkDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OTgyNDdkM2Y4MTQ3MmRiYmEwNmRiZWE5YmQxOWM3ODVkMThiYWJlMB4XDTIyMDEw
NTIyNTUzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODMxOGNhYmNmYmI1
NTZhNzkzMDQ0MGFiM2Q0OWQzODczNzlmZjU0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIkxN9QbxsmAeFYpGIvcHqcj1fcSHpiatcmic9SIhH6wpp+j
BqP9G8CfJkEvH7GIfLyH7Gq/ccseArh60kE/iiTq35+0xucbi+qHq6JSSTyWeLII
9JuQxSJ00JUDa3gCBvdMYvfoEDqYSXIRdauto1ih/cX3OoPBVvWV1fq9Z8g2ANR6
JU2HfkNIOHLrkl3C8zhiZ6K/OR/8gz7pcb820LGnkSxeRbvTWwHYpyHURQ88mNk5
VeBK2tnutXxi7gBI8x+MHXZj1L+MRSOg9ns18owNNsysSKd0kHUF/bVwAfWbv4hq
xdPc/BuzZfFTO0atwhe16GrAzK1CN/naAbxJ8F8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSDGMq8+7VWp5MEQKs9SdOHN5/1QzAfBgNVHSMEGDAWgBTZgkfT+BRy27oG
2+qb0Zx4XRi6vjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJZSkgwX2dVY3R1NkJ0dnFtOUdjZUYwWXVyNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjgvNmRiYzk5LWJmYTktNGVmNy1hNzk4LWEzMDMyNjE1NjYwYy8x
L2d4akt2UHUxVnFlVEJFQ3JQVW5UaHplZjlVTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgv
NmRiYzk5LWJmYTktNGVmNy1hNzk4LWEzMDMyNjE1NjYwYy8xLzJZSkgwX2dVY3R1
NkJ0dnFtOUdjZUYwWXVyNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMKpMTANBgkqhkiG9w0BAQsFAAOC
AQEAh2xKCwCCT0cJ+grNmjsbB82SYglX5MRkxkTBRKLxF3IkI1pl6Jaro1sEdXjL
Su+TrZhCbAESnKY+Faz21+6GhIFSQUENuJhrnJQ3QW5wSBi8t+K1iDc5vo7uNLuU
y27OLcp+0qp1SpxYU5FAYECL21EHZd8bIJcxFVVmIts7gO7xWxGOwoBWjMzRXsy9
EBFXzHmU466PiNCmCGMSmTFWnF2iiTsr4AbAXQHbbBA5ZZm01alFakB9edvlMK+e
c2nQD9mU9qY7ScO+tF5/tm+Jdy+Z28zm7abaXfe7SFd+SWPM3AOMrz4rFcGyoPNL
pZxZfjdb7XeVDwvufAhzIkEFGQ==
-----END CERTIFICATE-----
Generated at Wed Dec 7 02:35:51 2022 by rpki-client.