Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/044e45-bd14-4e0c-b4ad-b067b13402e5/1/FWA-I1HJTJyR7zdsZyLkbm37YFI.roa
File:                     FWA-I1HJTJyR7zdsZyLkbm37YFI.roa (download)
Hash identifier:          zU4069f5fV3BROpTASedUNKH6NpKYJx4nDkxxgXgbmc=
Subject key identifier:   15:60:3E:23:51:C9:4C:9C:91:EF:37:6C:67:22:E4:6E:6D:FB:60:52
Certificate issuer:       /CN=1ed9bcc69ab6cf4cc61a4f4470120bcdbf355951
Certificate serial:       01023EB5
Authority key identifier: 1E:D9:BC:C6:9A:B6:CF:4C:C6:1A:4F:44:70:12:0B:CD:BF:35:59:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Htm8xpq2z0zGGk9EcBILzb81WVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/044e45-bd14-4e0c-b4ad-b067b13402e5/1/FWA-I1HJTJyR7zdsZyLkbm37YFI.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 146.19.160.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16924341 (0x1023eb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed9bcc69ab6cf4cc61a4f4470120bcdbf355951
        Validity
            Not Before: Mar  7 17:31:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15603e2351c94c9c91ef376c6722e46e6dfb6052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:29:e0:19:b7:18:8d:72:7a:7f:ab:02:d5:c0:
                    d0:60:ae:57:6d:7d:e6:80:45:72:75:46:d5:4a:be:
                    bb:a8:6e:2e:59:0c:f5:e9:1c:fc:af:dd:ad:73:bf:
                    25:2a:bc:b8:0d:62:3c:f4:cb:68:66:38:0c:c0:1e:
                    8e:12:7c:77:21:63:30:cd:68:79:e3:98:32:bf:6b:
                    42:3c:49:66:b2:20:73:36:b7:75:cb:a1:55:10:f0:
                    11:b1:3a:93:77:6e:70:77:08:e6:b4:98:56:ef:4b:
                    14:43:bc:27:4c:04:e3:3a:42:35:35:d3:66:5c:d0:
                    34:72:c7:da:47:be:d5:8c:7a:56:b4:61:b5:25:93:
                    ca:a1:36:41:0c:28:b3:65:fa:20:11:74:cd:49:61:
                    e6:77:5f:63:aa:a0:95:d7:77:1e:e6:46:e1:65:2f:
                    f5:8b:23:91:ca:7c:eb:7e:2e:e7:0d:01:12:f0:78:
                    cb:b1:23:15:61:1a:9e:2c:83:2e:fb:8f:e1:fb:dc:
                    41:a9:6f:69:b7:09:c3:f3:9f:a0:34:c9:0b:10:f4:
                    18:d9:6b:28:43:b4:2e:b3:0f:a4:84:9c:23:6d:fe:
                    56:fc:81:b4:0a:71:b2:db:fa:e4:3b:24:3c:6f:46:
                    6b:85:2b:4d:5c:cf:49:1c:6f:f1:45:b7:5e:fa:c6:
                    84:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                15:60:3E:23:51:C9:4C:9C:91:EF:37:6C:67:22:E4:6E:6D:FB:60:52
            X509v3 Authority Key Identifier: 
                keyid:1E:D9:BC:C6:9A:B6:CF:4C:C6:1A:4F:44:70:12:0B:CD:BF:35:59:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Htm8xpq2z0zGGk9EcBILzb81WVE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/044e45-bd14-4e0c-b4ad-b067b13402e5/1/FWA-I1HJTJyR7zdsZyLkbm37YFI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/044e45-bd14-4e0c-b4ad-b067b13402e5/1/Htm8xpq2z0zGGk9EcBILzb81WVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:e4:37:3d:74:6a:58:ed:71:1f:db:2b:32:5c:3e:92:fc:da:
         17:eb:4c:cd:e4:1b:98:fb:81:e0:f7:f8:28:dc:a2:7d:a8:81:
         88:d0:07:24:ed:2a:f0:7d:bd:b2:11:35:21:48:3e:7a:ff:5c:
         fd:d5:c5:ae:22:5f:6c:d5:b3:27:8f:b5:69:3e:6a:9f:02:3d:
         b5:7a:2e:a4:11:3e:2f:6c:c8:f7:b1:30:17:fd:b3:37:9a:e2:
         08:da:a4:5e:6f:c7:96:35:3e:93:d0:7e:ba:77:9d:d5:52:69:
         4f:06:29:f1:d5:fc:0c:ce:99:a6:4b:df:05:b8:65:2f:f6:6d:
         46:13:26:3d:da:3a:d7:10:7e:97:51:ad:0d:0f:17:75:b3:65:
         f8:25:c8:9d:af:60:f3:17:68:ca:8a:04:8a:bc:5b:a7:4c:d4:
         a5:31:06:00:f2:02:aa:d8:5f:bb:03:a3:52:b7:25:e3:79:d3:
         f6:ef:67:d9:22:c9:8d:70:e4:ed:6b:24:58:77:5d:24:68:a1:
         7b:71:12:01:6c:75:7a:45:c7:1b:31:bf:57:73:5e:77:96:64:
         4c:3f:11:ab:c4:0c:a4:e4:f3:20:a9:e9:46:54:bf:de:5e:40:
         99:d2:bf:4c:26:de:21:5e:e8:26:90:62:58:2a:14:d1:35:c1:
         fc:5a:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 09:17:21 2022 by rpki-client.