Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/5e91ef-a0e0-46c8-8ebb-c5f2ab047177/1/czHOmCSR84qSMu-pVJOt-HsZE78.roa
File:                     czHOmCSR84qSMu-pVJOt-HsZE78.roa (download)
Hash identifier:          TUkwLAB9fRmNIqRROqOiV8zR8bPdfa0QdwHDw+2NO8g=
Subject key identifier:   73:31:CE:98:24:91:F3:8A:92:32:EF:A9:54:93:AD:F8:7B:19:13:BF
Certificate issuer:       /CN=a2a65fafc2fd19f56e191e7b87d8079db45a229c
Certificate serial:       B5E58A
Authority key identifier: A2:A6:5F:AF:C2:FD:19:F5:6E:19:1E:7B:87:D8:07:9D:B4:5A:22:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oqZfr8L9GfVuGR57h9gHnbRaIpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/5e91ef-a0e0-46c8-8ebb-c5f2ab047177/1/czHOmCSR84qSMu-pVJOt-HsZE78.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 62.204.39.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11920778 (0xb5e58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2a65fafc2fd19f56e191e7b87d8079db45a229c
        Validity
            Not Before: Jan  1 05:06:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7331ce982491f38a9232efa95493adf87b1913bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:66:a1:78:03:a6:b8:5e:57:0e:63:f9:06:d7:
                    85:9c:8e:bb:50:fb:28:0c:df:8c:cb:ee:be:e0:82:
                    78:ac:55:97:de:92:c5:d9:8e:d1:f9:90:a6:64:e4:
                    fb:de:64:be:a2:b0:4c:50:d4:ef:ca:d5:1d:35:2c:
                    21:39:0c:41:aa:8b:75:1c:1f:27:a4:95:8d:75:76:
                    81:fc:8b:ca:25:d7:e5:a3:c7:56:05:92:db:16:d0:
                    85:a6:53:9a:ba:ef:71:f7:83:c3:aa:ec:e0:ae:6a:
                    07:62:fa:f1:a4:24:a8:8b:ec:48:db:1f:e5:3a:24:
                    19:41:df:4e:99:f2:78:06:0f:0c:8f:7a:6a:a0:34:
                    b7:fa:90:31:77:a9:28:22:f6:5f:0c:08:12:a8:80:
                    78:bf:19:64:8c:99:9f:2d:70:41:7b:b7:49:e3:37:
                    93:d3:95:a7:a9:ae:61:41:b6:58:d5:24:b6:b4:34:
                    da:4d:d0:1c:06:3f:e7:4e:c8:f0:21:04:16:4d:21:
                    da:97:c1:42:5b:51:3f:3f:3c:1d:a0:31:ff:12:79:
                    8e:fd:1f:5c:2e:20:d9:b7:11:c4:2a:53:9b:32:bd:
                    c6:5c:ff:30:81:97:cb:c6:5c:4c:bd:10:01:77:55:
                    13:50:dd:51:12:1f:b5:f3:18:ac:16:6f:7e:4d:01:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                73:31:CE:98:24:91:F3:8A:92:32:EF:A9:54:93:AD:F8:7B:19:13:BF
            X509v3 Authority Key Identifier: 
                keyid:A2:A6:5F:AF:C2:FD:19:F5:6E:19:1E:7B:87:D8:07:9D:B4:5A:22:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oqZfr8L9GfVuGR57h9gHnbRaIpw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5e91ef-a0e0-46c8-8ebb-c5f2ab047177/1/czHOmCSR84qSMu-pVJOt-HsZE78.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5e91ef-a0e0-46c8-8ebb-c5f2ab047177/1/oqZfr8L9GfVuGR57h9gHnbRaIpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:5d:a2:b3:56:64:ac:6d:83:17:4f:76:af:4e:16:e9:19:ac:
         f8:94:8a:6b:7e:15:df:24:36:3d:78:a9:29:cc:de:56:2b:5c:
         de:34:30:75:b8:27:71:be:86:0d:b7:c6:3c:a4:23:b9:e8:69:
         0c:8f:42:91:14:b2:b0:2a:ee:b2:24:78:c0:ad:a5:6c:fb:63:
         22:c5:16:2d:80:40:7a:47:89:62:6b:82:03:40:cc:7d:48:67:
         9f:f4:83:10:ee:b4:e7:4e:08:b1:e4:ea:15:0d:87:5e:7b:43:
         98:44:42:41:e6:a4:c0:0e:b4:78:c3:0d:df:8a:d3:d1:5b:14:
         00:50:96:bc:36:7e:46:4b:79:e3:79:ec:e7:e8:50:08:3c:7f:
         01:ad:14:06:5a:f1:b6:c3:ff:ca:bf:be:43:ea:6c:dc:6b:5a:
         82:a6:22:64:4b:a1:94:54:c5:bb:9d:51:37:df:88:0f:87:b0:
         ba:c6:a1:08:5b:b0:22:00:eb:49:49:30:1d:1e:c5:79:15:3c:
         02:e3:52:1e:72:73:4b:29:2a:8e:f1:a5:87:01:1f:6a:63:9c:
         f7:0a:d7:a3:2d:ae:b6:b5:fe:11:85:69:5a:95:be:18:d2:6a:
         4d:fd:c9:56:7d:78:2b:d5:42:d9:ca:67:5d:0c:db:61:c6:8e:
         93:ec:b7:9c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEALXlijANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MmE2NWZhZmMyZmQxOWY1NmUxOTFlN2I4N2Q4MDc5ZGI0NWEyMjljMB4XDTIyMDEw
MTA1MDYwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzMzMWNlOTgyNDkx
ZjM4YTkyMzJlZmE5NTQ5M2FkZjg3YjE5MTNiZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPJmoXgDprheVw5j+QbXhZyOu1D7KAzfjMvuvuCCeKxVl96S
xdmO0fmQpmTk+95kvqKwTFDU78rVHTUsITkMQaqLdRwfJ6SVjXV2gfyLyiXX5aPH
VgWS2xbQhaZTmrrvcfeDw6rs4K5qB2L68aQkqIvsSNsf5TokGUHfTpnyeAYPDI96
aqA0t/qQMXepKCL2XwwIEqiAeL8ZZIyZny1wQXu3SeM3k9OVp6muYUG2WNUktrQ0
2k3QHAY/507I8CEEFk0h2pfBQltRPz88HaAx/xJ5jv0fXC4g2bcRxCpTmzK9xlz/
MIGXy8ZcTL0QAXdVE1DdURIftfMYrBZvfk0B630CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRzMc6YJJHzipIy76lUk634exkTvzAfBgNVHSMEGDAWgBSipl+vwv0Z9W4Z
HnuH2AedtFoinDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29xWmZyOEw5R2ZWdUdSNTdoOWdIbmJSYUlwdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvNWU5MWVmLWEwZTAtNDZjOC04ZWJiLWM1ZjJhYjA0NzE3Ny8x
L2N6SE9tQ1NSODRxU011LXBWSk90LUhzWkU3OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
NWU5MWVmLWEwZTAtNDZjOC04ZWJiLWM1ZjJhYjA0NzE3Ny8xL29xWmZyOEw5R2ZW
dUdSNTdoOWdIbmJSYUlwdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7MJzANBgkqhkiG9w0BAQsFAAOC
AQEAa12is1ZkrG2DF092r04W6Rms+JSKa34V3yQ2PXipKczeVitc3jQwdbgncb6G
DbfGPKQjuehpDI9CkRSysCrusiR4wK2lbPtjIsUWLYBAekeJYmuCA0DMfUhnn/SD
EO60504IseTqFQ2HXntDmERCQeakwA60eMMN34rT0VsUAFCWvDZ+Rkt543ns5+hQ
CDx/Aa0UBlrxtsP/yr++Q+ps3GtagqYiZEuhlFTFu51RN9+ID4ewusahCFuwIgDr
SUkwHR7FeRU8AuNSHnJzSykqjvGlhwEfamOc9wrXoy2utrX+EYVpWpW+GNJqTf3J
Vn14K9VC2cpnXQzbYcaOk+y3nA==
-----END CERTIFICATE-----
Generated at Thu Dec 8 09:17:41 2022 by rpki-client.