Route Origin Authorization

$ cd rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/

$ rpki-client -vvf S3j3ALbt_MoKZxtuH2Txanr8M0k.roa
File:                     S3j3ALbt_MoKZxtuH2Txanr8M0k.roa (download)
Hash identifier:          zpyjQYw695JUA54xl2DhZHTKt21C0i8cJ9VlLGgGCFk=
Subject key identifier:   4B:78:F7:00:B6:ED:FC:CA:0A:67:1B:6E:1F:64:F1:6A:7A:FC:33:49
Certificate issuer:       /CN=cd5aca299d355aadfe1ef939546280e588d249a3
Certificate serial:       01394533
Authority key identifier: CD:5A:CA:29:9D:35:5A:AD:FE:1E:F9:39:54:62:80:E5:88:D2:49:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/S3j3ALbt_MoKZxtuH2Txanr8M0k.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 5.172.176.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20530483 (0x1394533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5aca299d355aadfe1ef939546280e588d249a3
        Validity
            Not Before: Jan  1 13:55:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4b78f700b6edfcca0a671b6e1f64f16a7afc3349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:b7:10:6f:7a:1a:6d:e4:6b:ed:18:91:cd:
                    90:e6:36:62:c8:4b:d2:65:f1:0f:c6:14:42:1b:b8:
                    b8:8c:93:5e:6c:2e:22:ff:21:d4:25:9a:70:9b:8f:
                    a0:42:d1:e3:f9:97:35:08:f5:29:10:1f:2e:d5:68:
                    03:37:51:e5:40:0a:31:87:36:b6:6a:fb:4e:eb:7b:
                    05:e0:0a:15:f7:ee:7f:b5:f3:1c:77:cf:46:78:6f:
                    aa:13:b8:e5:d8:98:56:b0:54:c3:19:ed:af:d3:cd:
                    0e:ae:69:da:3f:24:27:32:7f:da:00:99:46:56:4c:
                    ad:54:f2:f8:40:be:05:70:9f:4d:c4:4c:17:5e:78:
                    0f:c2:c1:18:8f:2a:39:41:78:d9:a8:cd:19:21:b7:
                    8c:83:80:ca:4a:6a:09:9b:90:5c:5f:fe:ca:24:db:
                    31:63:06:3a:8d:a9:d5:22:26:ae:69:5c:c7:dd:1e:
                    6e:b7:ca:30:a0:bd:5f:23:e2:b0:c8:4b:4d:f6:9d:
                    5c:3b:51:67:39:34:c1:7d:68:57:f6:b1:73:9b:c2:
                    0f:1c:04:9e:e1:d0:19:5f:09:87:ff:8a:5e:6d:e2:
                    5e:c3:17:1e:31:05:ad:ca:fb:76:4a:9d:6b:03:93:
                    04:f0:0f:ef:a0:9b:06:18:7a:4b:71:14:22:45:00:
                    4a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4B:78:F7:00:B6:ED:FC:CA:0A:67:1B:6E:1F:64:F1:6A:7A:FC:33:49
            X509v3 Authority Key Identifier: 
                keyid:CD:5A:CA:29:9D:35:5A:AD:FE:1E:F9:39:54:62:80:E5:88:D2:49:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/S3j3ALbt_MoKZxtuH2Txanr8M0k.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.172.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:dd:4a:1c:36:9a:47:e1:6a:67:83:b3:14:35:c8:f6:f4:7b:
         f7:9f:94:ef:f1:a9:ee:e6:1e:d2:9e:73:68:97:87:72:f7:38:
         98:31:49:54:34:80:55:cb:06:20:56:7d:5a:ac:95:cd:18:29:
         40:e4:9b:15:ee:16:8b:c0:7e:11:0b:3a:dc:36:47:99:3f:47:
         26:31:89:fa:5f:54:62:94:2b:c9:44:20:42:07:b0:29:ef:6a:
         e1:45:23:a1:37:df:a4:3e:b1:0f:2d:81:45:e4:d0:b1:80:f2:
         d7:21:c8:16:e3:d3:e1:b7:6f:2d:ff:ae:91:6e:d2:32:47:b8:
         0d:c3:bb:9e:64:8a:d8:2d:c8:40:5d:e3:28:45:ad:d5:da:74:
         56:11:56:17:19:b6:32:7d:e3:4f:9a:65:14:b1:d6:19:87:97:
         35:fa:07:0d:05:b5:d4:fa:04:ff:9a:c3:d6:23:6c:cd:57:0b:
         7f:82:5a:11:7a:1b:79:b3:cb:4b:df:30:b6:2e:35:e8:d8:3a:
         57:45:61:d7:10:60:ac:81:77:e0:23:d4:dd:8d:b6:39:1a:32:
         9e:e7:d2:ef:99:91:9d:60:3f:fd:42:6c:b4:1f:57:06:2f:d1:
         cc:8b:eb:07:ee:53:f3:2b:9c:37:db:10:28:f6:8e:6d:cf:c2:
         b2:59:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 13:00:05 2022 by rpki-client.