Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/irJOAdCymcXEL_I5y5HMwxGgPrw.roa
File:                     irJOAdCymcXEL_I5y5HMwxGgPrw.roa (download)
Hash identifier:          1u78e0l1zhijOk1qOPwMDQ9v7+FYwc9/h+G9W83H08s=
Subject key identifier:   8A:B2:4E:01:D0:B2:99:C5:C4:2F:F2:39:CB:91:CC:C3:11:A0:3E:BC
Certificate issuer:       /CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
Certificate serial:       038FF6FA
Authority key identifier: FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/irJOAdCymcXEL_I5y5HMwxGgPrw.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     400040
IP address blocks:
    1: 185.138.232.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59766522 (0x38ff6fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
        Validity
            Not Before: Jan  1 11:04:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8ab24e01d0b299c5c42ff239cb91ccc311a03ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:2c:9f:d6:80:58:46:23:4f:dd:a7:6b:77:
                    a4:d6:3f:b4:c7:79:10:49:21:a2:82:ac:ca:d4:e4:
                    96:4a:d0:49:7e:64:07:6e:8b:aa:d0:ff:e7:97:cc:
                    1d:e8:0f:5e:9a:fa:ee:2c:27:d9:84:bd:85:aa:c5:
                    ef:2b:f2:53:ed:a2:71:a8:3c:4a:b6:e4:06:2f:4b:
                    be:b9:5b:86:37:6b:62:2a:61:4a:32:0d:59:5c:58:
                    21:f5:8a:26:a4:06:77:32:44:a5:d2:a1:55:1e:ad:
                    7c:c4:ba:43:6c:e9:0c:45:98:be:bf:ad:da:d6:1d:
                    61:e8:47:42:f0:d9:18:44:5f:bb:aa:26:d6:88:93:
                    50:33:8a:17:9c:43:52:77:07:a1:6e:2b:98:bd:f5:
                    29:71:78:28:d7:9e:b8:59:ee:07:2e:25:be:c8:a6:
                    f2:8e:07:5c:c0:a8:90:64:dd:43:e8:b6:d1:0c:d6:
                    9e:42:60:3c:4c:d9:c8:a1:85:b0:57:60:b8:c1:0b:
                    42:08:c2:54:3b:4a:5d:0b:ae:62:bf:48:a8:fb:cd:
                    26:d4:21:f6:7d:c0:a4:fd:9c:9c:57:59:7e:a6:89:
                    b3:01:c0:00:5e:f1:61:01:71:7c:66:70:33:64:74:
                    34:a5:3b:93:79:2b:21:03:6e:b7:ef:d9:f6:e8:ea:
                    e0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8A:B2:4E:01:D0:B2:99:C5:C4:2F:F2:39:CB:91:CC:C3:11:A0:3E:BC
            X509v3 Authority Key Identifier: 
                keyid:FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/irJOAdCymcXEL_I5y5HMwxGgPrw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.138.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:d1:e7:03:65:48:65:8d:36:ac:56:f4:19:f9:2d:e9:95:c8:
         9c:90:37:55:e7:b5:7d:af:34:f3:77:41:0c:3a:d1:61:ac:c2:
         75:c2:cd:57:fd:8c:6f:5d:61:65:01:0a:6e:73:82:6f:29:e1:
         c1:c0:a7:ad:5d:b4:21:a3:cc:d3:01:3d:83:67:fe:a0:85:63:
         c2:b5:3d:59:18:c9:33:7d:d9:a5:e2:73:e1:1c:fd:1a:85:41:
         73:27:d0:f4:d6:bc:dc:6c:8c:e6:0a:84:f5:5e:a2:fb:a2:18:
         60:d5:82:fe:61:a8:7d:24:50:00:d8:c2:3c:c2:6e:51:49:2c:
         15:6b:12:5a:47:46:1c:7e:ad:8c:fe:28:d6:d6:d7:b5:0e:59:
         b2:53:12:a3:23:33:ff:59:f6:61:c9:f2:db:ce:81:83:c0:e5:
         77:57:29:72:7b:c8:3e:ae:df:c1:db:1d:e1:6e:5c:1a:c1:3c:
         fc:d8:61:de:0c:1c:2a:62:52:f9:c0:48:d3:26:ab:cb:60:54:
         fa:61:e4:1b:ae:f6:ec:8d:0c:12:fc:6f:d5:93:f7:20:ac:37:
         9c:19:72:0e:29:05:53:77:85:50:4f:50:1d:3b:dd:1a:e7:cd:
         9f:d1:2f:c7:54:83:e4:56:f7:94:1d:e2:b3:cd:47:41:3b:fb:
         92:a0:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 02:35:57 2022 by rpki-client.