Route Origin Authorization

$ cd rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/

$ rpki-client -vvf RSpSWHNwL0SCaYN80ktJ6KqNYvA.roa
File:                     RSpSWHNwL0SCaYN80ktJ6KqNYvA.roa (download)
Hash identifier:          nOnzXaBL/K/KVP6k/nhgFvW0qZO9dEvIfYMapoKVoz8=
Subject key identifier:   45:2A:52:58:73:70:2F:44:82:69:83:7C:D2:4B:49:E8:AA:8D:62:F0
Certificate issuer:       /CN=3fe8a73205d76710e7153fc7146f6a621ee7c2d5
Certificate serial:       0100AD5C
Authority key identifier: 3F:E8:A7:32:05:D7:67:10:E7:15:3F:C7:14:6F:6A:62:1E:E7:C2:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-inMgXXZxDnFT_HFG9qYh7nwtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/RSpSWHNwL0SCaYN80ktJ6KqNYvA.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 185.252.213.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16821596 (0x100ad5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fe8a73205d76710e7153fc7146f6a621ee7c2d5
        Validity
            Not Before: Jan  1 07:54:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=452a525873702f448269837cd24b49e8aa8d62f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:26:5a:6b:16:4f:35:f1:f4:17:bf:b5:40:
                    35:cb:37:1f:1d:eb:da:af:52:2e:39:f5:27:33:a8:
                    b1:6b:bb:87:1f:4e:45:cc:ba:4c:ab:dd:1f:c4:9e:
                    19:ef:94:ca:79:35:24:c8:7b:87:e9:1c:46:15:84:
                    2b:e4:bc:07:42:b0:96:a4:ee:28:93:fa:e7:07:f8:
                    66:01:6e:5a:94:23:20:bc:f2:ac:44:45:f9:ba:98:
                    75:c0:3e:99:8d:95:28:9d:dc:6a:3b:8e:70:6c:aa:
                    15:74:c2:b6:6b:e0:71:45:51:fe:5b:6d:e8:11:0a:
                    79:6f:b1:4b:f3:8e:71:56:c0:5f:fd:a2:1e:5a:02:
                    34:d8:36:46:39:69:9d:6a:2e:d0:c0:fd:2e:29:b4:
                    4f:a7:45:dd:83:88:1e:c6:31:e2:b6:86:b7:71:49:
                    49:a1:41:8f:dd:1c:96:27:b8:2b:95:7f:0e:15:25:
                    10:e2:fd:30:07:51:2e:e8:69:11:fb:f7:5c:e1:cf:
                    20:11:c8:34:57:9f:c4:ff:69:ce:92:01:e6:97:c9:
                    61:12:79:48:c6:4e:ee:92:c1:fc:08:b8:d8:db:2d:
                    3e:36:27:68:68:7b:92:1d:c9:02:35:fe:ae:ca:26:
                    30:1f:54:0c:ba:31:f2:bf:95:ab:a3:da:70:0f:b9:
                    1e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                45:2A:52:58:73:70:2F:44:82:69:83:7C:D2:4B:49:E8:AA:8D:62:F0
            X509v3 Authority Key Identifier: 
                keyid:3F:E8:A7:32:05:D7:67:10:E7:15:3F:C7:14:6F:6A:62:1E:E7:C2:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-inMgXXZxDnFT_HFG9qYh7nwtU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/RSpSWHNwL0SCaYN80ktJ6KqNYvA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/P-inMgXXZxDnFT_HFG9qYh7nwtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ba:2f:5a:8b:17:8e:1d:75:28:8a:1a:35:a9:7f:fe:05:a5:
         04:a4:ff:e5:46:f2:8e:6e:d8:d0:db:2b:f9:f7:f6:99:2f:bd:
         2e:cf:08:33:ba:c8:56:e3:23:bd:db:69:1f:22:85:b5:06:32:
         fb:9a:44:1e:0b:0a:35:fe:86:19:11:07:7c:a7:0d:2d:34:d9:
         7d:e1:6a:c2:dd:b4:da:df:f2:7e:eb:57:f7:6d:89:d0:c3:80:
         7a:f6:99:7b:87:0d:c3:7d:81:31:ce:02:a4:7e:ab:46:b3:b2:
         6d:5c:c4:91:5c:08:ad:98:45:df:47:b0:66:eb:fc:98:58:75:
         73:01:2a:33:ad:45:62:05:aa:21:81:a4:2b:8f:01:d1:70:8d:
         b5:0c:67:c6:28:ae:77:b5:92:4c:db:1b:95:85:97:fe:3e:b2:
         01:1f:de:ad:8c:68:a1:92:6c:f8:05:41:69:d5:44:06:fc:ac:
         3e:a6:43:0c:15:82:65:32:d7:4c:e4:03:73:38:4a:c7:90:35:
         90:44:1e:67:94:35:2f:de:81:26:dc:3b:7b:fc:ce:3a:c0:19:
         83:32:5b:fa:3e:9d:22:c1:7a:fb:80:3e:d8:9a:ac:eb:49:05:
         e2:ac:81:d2:3a:95:11:8a:26:3b:5b:9f:ed:10:6d:98:69:43:
         2d:71:24:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 13:34:38 2022 by rpki-client.