Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/BWWawtweWO4e1vsN4mbMqPGNk7k.roa
File:                     BWWawtweWO4e1vsN4mbMqPGNk7k.roa (download)
Hash identifier:          p3AL6zbP5eqgdV4aUkmBvTmyezC+WTwnsFVUtaxTcH0=
Subject key identifier:   05:65:9A:C2:DC:1E:58:EE:1E:D6:FB:0D:E2:66:CC:A8:F1:8D:93:B9
Certificate issuer:       /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial:       34A58E4B
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/BWWawtweWO4e1vsN4mbMqPGNk7k.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     20473
IP address blocks:
    1: 193.106.197.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883265099 (0x34a58e4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
        Validity
            Not Before: Apr 13 15:33:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05659ac2dc1e58ee1ed6fb0de266cca8f18d93b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:73:e3:18:95:c1:84:68:3f:d7:94:71:40:
                    e1:9d:b9:f7:f0:5b:40:e8:16:c8:b3:62:66:06:51:
                    98:d9:77:2a:67:ca:0e:74:93:ef:5a:73:e3:6d:28:
                    76:80:5d:ff:39:88:85:86:cb:ce:65:7a:ff:2a:24:
                    3f:98:a2:d0:25:b9:a8:29:23:e6:07:88:68:ac:b6:
                    09:0a:03:9f:a1:d1:ac:f8:40:98:84:43:84:67:c6:
                    07:12:79:33:22:c5:f5:d4:25:d1:b0:f8:f1:5d:aa:
                    0c:d5:73:3d:9c:97:7f:98:c2:14:3f:33:15:70:82:
                    93:45:38:ba:e3:12:97:5b:fc:e0:38:d9:8b:cf:61:
                    9c:e2:8f:12:3b:19:99:c1:e4:64:f1:8e:7e:24:ef:
                    7d:59:2b:78:95:5e:f6:73:13:c2:0b:ed:97:c2:3f:
                    71:b1:73:2d:02:56:b1:8d:ef:11:d0:b7:0a:77:c0:
                    87:f5:9e:d7:94:3e:ad:74:c6:24:bd:96:a6:e1:d1:
                    64:88:f4:03:ff:fb:2c:b5:29:99:9c:7f:b2:a6:dc:
                    3b:8a:94:9f:c1:46:5d:03:08:e8:e4:32:d2:f5:c2:
                    d1:7c:05:26:a6:18:fa:ad:ad:4a:56:d7:9a:32:79:
                    5f:c0:d8:4c:66:a7:6e:83:64:f0:c9:15:02:d6:90:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                05:65:9A:C2:DC:1E:58:EE:1E:D6:FB:0D:E2:66:CC:A8:F1:8D:93:B9
            X509v3 Authority Key Identifier: 
                keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/BWWawtweWO4e1vsN4mbMqPGNk7k.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.106.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:0e:fd:e8:b8:c3:f1:a9:7a:c4:ae:ed:9d:bc:2a:34:9e:19:
         2c:67:3e:65:45:c7:83:4f:0e:8c:c3:0c:61:fa:cd:1a:18:0d:
         9f:98:80:6c:6d:53:af:9b:d7:58:7a:01:3c:d9:8d:cc:34:8d:
         17:0b:ee:9d:7b:59:4d:87:8e:b5:db:94:0b:b0:7e:3a:b7:90:
         29:4a:5b:55:12:80:68:40:cb:1b:6f:b3:0e:11:c9:60:6b:e4:
         49:5c:5e:e6:80:23:61:f7:f7:e0:79:05:a4:74:e0:b4:86:46:
         6e:f4:98:37:25:ce:41:f0:c9:c8:cf:bd:c1:3f:5a:a5:d7:30:
         fa:82:81:af:25:e0:d0:8e:34:32:7e:42:ea:d1:1c:4b:e3:b2:
         1c:a1:c3:b5:22:2d:cf:fa:c0:6a:bb:12:c0:b5:37:5f:23:38:
         a2:d4:dc:48:4d:3a:7e:a5:97:82:e9:7e:05:23:8b:72:8f:26:
         8e:e2:6a:a2:b5:35:7e:78:06:f8:16:22:d4:ff:6f:6e:f9:f3:
         b1:35:7b:00:de:4c:7e:71:73:77:49:7f:17:fd:90:31:5c:1b:
         c5:aa:07:b7:ee:6d:21:ce:54:01:09:db:45:3b:52:7b:a6:2e:
         65:51:c7:20:fe:a4:51:69:be:09:00:d9:40:25:bc:51:ea:e1:
         65:50:38:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 01:39:00 2022 by rpki-client.