Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3eef64-90c5-4a2e-bc1e-3633dcd4c9dc/1/7wX4sxV0nTVxA3WdqqiDiLJKPto.roa
File:                     7wX4sxV0nTVxA3WdqqiDiLJKPto.roa (download)
Hash identifier:          OZu2YXjKpAc16E3B+UUBmOt+81qQcuOKEQsWArQtMEo=
Subject key identifier:   EF:05:F8:B3:15:74:9D:35:71:03:75:9D:AA:A8:83:88:B2:4A:3E:DA
Certificate issuer:       /CN=b473166566a08d032053ccace23068e1953f4eb2
Certificate serial:       013AB8DB
Authority key identifier: B4:73:16:65:66:A0:8D:03:20:53:CC:AC:E2:30:68:E1:95:3F:4E:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHMWZWagjQMgU8ys4jBo4ZU_TrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/3eef64-90c5-4a2e-bc1e-3633dcd4c9dc/1/7wX4sxV0nTVxA3WdqqiDiLJKPto.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 185.138.165.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20625627 (0x13ab8db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b473166566a08d032053ccace23068e1953f4eb2
        Validity
            Not Before: Jan  1 07:56:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef05f8b315749d357103759daaa88388b24a3eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d3:43:81:c8:69:0b:8b:e6:b8:19:23:b7:df:
                    85:53:89:6c:5a:54:72:e7:6a:6d:a1:5b:f5:ea:5d:
                    b3:77:96:e4:16:d4:6d:70:d9:5f:0c:34:fe:23:72:
                    90:13:bc:22:97:cc:5e:97:b8:2e:bc:e4:c0:8e:cf:
                    b1:3f:98:4f:6a:5f:10:ac:ff:d5:96:d4:11:2a:9f:
                    c0:3f:f8:c8:68:a0:21:44:12:d0:74:29:d4:3a:9d:
                    88:61:5a:9d:04:51:6b:ce:16:5b:0f:30:23:e9:6a:
                    40:c7:c2:ad:96:11:65:cb:09:9f:fb:14:ea:4c:3b:
                    7d:75:bc:5e:00:1f:9f:10:0d:2c:43:a4:b1:28:88:
                    ae:ba:1d:e0:4d:3a:c5:1a:e9:e6:a5:11:8a:b5:1b:
                    9b:bc:76:85:2c:dc:82:97:54:ef:1d:7a:e3:a9:45:
                    76:70:ab:82:2a:bc:4c:c7:da:3a:fd:95:d7:eb:52:
                    8d:a1:80:aa:58:c4:81:36:ef:cf:e6:0c:69:32:51:
                    2f:2d:b1:1b:18:4f:50:55:08:49:44:c3:fd:bf:43:
                    db:cc:bb:49:3e:2a:46:94:3c:7d:5e:f9:e9:55:8a:
                    a7:bb:57:07:83:6f:d6:45:59:83:4b:a5:76:c2:15:
                    25:a6:b3:27:75:f0:c0:0d:12:c0:c8:30:fa:86:79:
                    e6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EF:05:F8:B3:15:74:9D:35:71:03:75:9D:AA:A8:83:88:B2:4A:3E:DA
            X509v3 Authority Key Identifier: 
                keyid:B4:73:16:65:66:A0:8D:03:20:53:CC:AC:E2:30:68:E1:95:3F:4E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWZWagjQMgU8ys4jBo4ZU_TrI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3eef64-90c5-4a2e-bc1e-3633dcd4c9dc/1/7wX4sxV0nTVxA3WdqqiDiLJKPto.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3eef64-90c5-4a2e-bc1e-3633dcd4c9dc/1/tHMWZWagjQMgU8ys4jBo4ZU_TrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.138.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:64:8b:e6:93:f0:70:d2:e9:09:18:a1:df:b0:9c:8f:10:39:
         b6:05:62:c9:d1:36:5a:1e:0d:cc:b5:21:e0:53:e1:15:01:f5:
         5d:c7:29:a9:03:05:fd:cc:b6:32:8f:cf:f6:bd:ec:d3:64:03:
         ad:fe:d3:94:db:30:af:16:37:20:9b:98:61:09:5c:7c:aa:14:
         dc:9c:f5:40:c1:7e:73:0d:7b:64:a5:84:21:07:fa:4e:0b:14:
         95:99:bd:0c:67:f2:43:2c:c5:c3:a5:49:53:17:46:c7:64:ca:
         68:9f:fb:9e:84:fc:53:35:f9:b5:86:1d:5f:32:89:b3:a8:bb:
         5c:7a:5a:20:31:ed:b4:57:cf:80:d2:bc:4a:f4:d5:ad:66:2d:
         44:de:4b:9c:c9:3e:04:de:8f:0a:10:2b:e5:cb:7a:dc:53:e9:
         b6:db:74:70:5e:f0:5c:c0:b1:d1:38:2a:01:c5:ad:0f:8a:a8:
         a8:85:a5:c5:ef:94:a9:2c:b3:10:33:5f:a3:74:dd:bf:95:92:
         d6:a9:1b:e2:f8:ae:25:fe:e9:d5:19:06:f1:0b:17:e5:f4:30:
         58:ab:1c:7a:b1:f9:a2:2d:0a:d5:e7:9f:fe:f0:c7:d2:31:46:
         a3:b0:a1:0d:71:e4:6f:56:aa:11:9c:2c:06:2c:a6:58:fc:d2:
         08:8d:af:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 09:55:48 2022 by rpki-client.