Route Origin Authorization

$ cd rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/

$ rpki-client -vvf AQKlhlNsLSKNwpS7CFArJ7wpSho.roa
File:                     AQKlhlNsLSKNwpS7CFArJ7wpSho.roa (download)
Hash identifier:          xJd10e9i5U+yn+smWUq52smYmqZ4p29hfUmBrnpga1U=
Subject key identifier:   01:02:A5:86:53:6C:2D:22:8D:C2:94:BB:08:50:2B:27:BC:29:4A:1A
Certificate issuer:       /CN=d860f6f2c318559e65959cd5f28d159a0842d72a
Certificate serial:       01041203
Authority key identifier: D8:60:F6:F2:C3:18:55:9E:65:95:9C:D5:F2:8D:15:9A:08:42:D7:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2GD28sMYVZ5llZzV8o0VmghC1yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/AQKlhlNsLSKNwpS7CFArJ7wpSho.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 185.234.12.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17043971 (0x1041203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d860f6f2c318559e65959cd5f28d159a0842d72a
        Validity
            Not Before: Jan  1 00:56:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0102a586536c2d228dc294bb08502b27bc294a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:5f:83:43:91:2e:68:ab:1f:c1:b6:3a:f8:
                    74:d5:7e:d0:85:ad:40:98:b8:3f:54:4e:93:b2:dc:
                    b3:f0:45:e7:2c:11:6b:3a:2c:c0:78:d0:2b:1e:55:
                    4a:16:47:a6:36:43:f6:24:21:ba:53:d7:64:02:20:
                    d6:39:f3:41:de:78:3b:51:25:dc:92:35:a7:55:4f:
                    d2:2b:aa:2a:94:32:c3:fe:ff:ad:43:2d:5e:40:03:
                    84:d2:70:04:b3:4e:61:74:6c:83:26:02:d8:ae:b9:
                    a1:f4:46:dc:4c:65:1b:fb:f3:61:bf:7f:22:89:3d:
                    ed:ee:94:08:6a:18:42:50:55:22:31:50:0f:73:b5:
                    46:8a:f7:99:03:cb:ee:72:dc:52:ef:7a:78:51:b9:
                    a4:a4:25:c6:ef:ce:80:34:35:f0:5f:5a:47:69:bc:
                    7b:3e:0e:e8:96:47:7f:e0:eb:f2:d1:e1:ec:b5:e2:
                    58:26:a9:1b:8f:fa:68:ba:6c:4b:f5:60:28:da:5e:
                    1a:26:1f:3a:9d:1b:0a:3e:1d:4a:25:d7:74:23:d8:
                    f7:1d:0b:1a:4b:2e:4a:a3:8d:ce:08:32:69:f4:42:
                    06:5b:bb:f7:53:90:d0:1f:40:98:1b:7c:49:52:7c:
                    96:a2:31:45:9b:ae:57:4d:12:d5:84:60:da:d5:24:
                    95:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                01:02:A5:86:53:6C:2D:22:8D:C2:94:BB:08:50:2B:27:BC:29:4A:1A
            X509v3 Authority Key Identifier: 
                keyid:D8:60:F6:F2:C3:18:55:9E:65:95:9C:D5:F2:8D:15:9A:08:42:D7:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GD28sMYVZ5llZzV8o0VmghC1yo.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/AQKlhlNsLSKNwpS7CFArJ7wpSho.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/2GD28sMYVZ5llZzV8o0VmghC1yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:bc:66:d5:e2:e6:d2:4b:fc:3c:2f:d3:f4:40:28:7a:e9:6a:
         6e:19:56:1a:b8:ac:ed:77:65:a6:dc:26:a3:28:f1:b7:5f:c5:
         bc:f9:6c:0d:92:95:fa:93:27:03:ab:3c:dd:df:ff:50:27:07:
         0d:33:95:a7:61:a7:e1:94:b0:08:ad:89:f3:45:42:da:5f:0e:
         a6:f5:b9:45:bb:f0:5b:1b:dd:22:d1:a0:56:61:27:93:23:f1:
         b0:4e:5d:d6:a8:4b:f8:0f:3c:7e:a4:8f:93:77:9e:18:12:a8:
         02:e5:71:6c:3c:84:5d:af:a5:a2:a9:07:17:4f:4f:9f:24:db:
         1f:0c:4c:ea:f3:ce:9d:cb:e3:00:46:bf:64:4d:ca:61:01:08:
         51:17:bd:db:a1:84:53:d5:ed:68:b3:6a:81:a7:56:1b:86:c8:
         02:71:a1:29:72:88:f6:79:89:53:09:c9:c7:e3:e1:08:38:8c:
         6a:01:6b:c8:60:b8:ae:f7:4a:e6:b1:34:d8:c0:c1:96:a7:f2:
         66:2e:29:ff:60:ab:07:a3:31:c5:d4:4d:6a:d3:59:b9:85:98:
         dc:6a:3c:d6:24:24:f7:01:64:4b:cd:5a:84:63:98:eb:9d:b5:
         4b:0c:ac:70:95:90:6f:57:6d:c2:eb:19:ba:23:a3:bc:a1:e3:
         8b:57:07:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 12:25:14 2022 by rpki-client.