Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/BF-Y5IU9PSewUEaA9rTDB-vBIaU.roa
File:                     BF-Y5IU9PSewUEaA9rTDB-vBIaU.roa (download)
Hash identifier:          7Qph4kjdtMw2rEGKPP0EgZiZBYsPSnNFesohoDdW3S8=
Subject key identifier:   04:5F:98:E4:85:3D:3D:27:B0:50:46:80:F6:B4:C3:07:EB:C1:21:A5
Certificate issuer:       /CN=335e725cacf83c97f457a56762cf846d643117cd
Certificate serial:       08292B55
Authority key identifier: 33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/BF-Y5IU9PSewUEaA9rTDB-vBIaU.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     20473
IP address blocks:
    1: 46.231.121.0/24 maxlen: 24
    2: 46.231.120.0/24 maxlen: 24
    3: 185.192.223.0/24 maxlen: 24
    4: 185.192.220.0/24 maxlen: 24
    5: 185.192.221.0/24 maxlen: 24
    6: 185.192.222.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136915797 (0x8292b55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335e725cacf83c97f457a56762cf846d643117cd
        Validity
            Not Before: Jan  1 07:56:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=045f98e4853d3d27b0504680f6b4c307ebc121a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:27:51:db:68:62:f4:d2:a6:0b:79:7b:c2:
                    02:71:8f:1a:15:72:4a:7e:41:8c:ff:ec:2b:a9:b5:
                    69:5d:5b:5b:39:07:13:24:d6:aa:f9:b2:55:42:fe:
                    f0:4b:3c:5f:d1:db:3a:2b:ab:52:0e:a2:0b:43:5d:
                    c8:2b:73:76:f7:3b:86:7c:cc:5f:19:fb:90:0f:44:
                    9e:19:aa:fa:4e:7f:8c:3a:d8:c9:4b:50:99:54:67:
                    3b:f9:3c:40:6d:ce:3e:a5:cd:5b:b5:04:ac:d5:f7:
                    ae:62:cf:9e:1d:fe:e5:42:cc:c0:9e:a4:41:7d:67:
                    d3:f4:a2:59:1c:1e:69:a1:a0:ac:b0:b8:66:5e:bc:
                    46:6d:b2:b6:b8:da:04:99:99:d1:b8:ae:37:95:95:
                    20:50:88:0e:bd:b6:d1:25:62:d2:0a:ca:56:68:5c:
                    13:b9:1d:15:d4:6d:c4:86:15:c7:76:7f:a5:63:aa:
                    4e:06:30:13:b5:92:ae:b6:a5:8d:de:23:64:83:19:
                    2e:c6:fa:6c:32:33:12:68:57:4d:8d:d7:ec:48:4d:
                    45:6f:c2:be:68:ba:1c:65:27:7e:ff:c4:32:98:fa:
                    88:b7:08:3c:6a:53:3a:f4:4d:d7:86:0f:aa:08:b5:
                    ea:2d:bb:50:aa:c6:ab:9e:8e:8c:69:a1:22:24:7f:
                    32:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                04:5F:98:E4:85:3D:3D:27:B0:50:46:80:F6:B4:C3:07:EB:C1:21:A5
            X509v3 Authority Key Identifier: 
                keyid:33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/BF-Y5IU9PSewUEaA9rTDB-vBIaU.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.231.120.0/23
                  185.192.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:7a:a9:61:6b:0e:95:5c:38:b3:ad:99:e4:85:5e:c8:ca:37:
         75:ce:ad:ea:a2:05:ab:7a:7c:3c:40:eb:43:ff:17:86:1f:95:
         09:1c:b1:de:02:ef:95:93:69:9a:83:eb:f9:55:0d:98:25:f9:
         c2:be:8c:e7:bc:c2:37:ff:b1:20:6d:9e:2d:99:27:d2:66:72:
         34:aa:f8:3a:f8:8f:f8:67:c2:9e:6c:15:39:2d:af:3c:4c:02:
         83:11:9c:71:6a:bf:3a:6a:1c:f3:fd:68:19:1e:8d:09:a3:28:
         38:68:9a:54:ae:a7:fe:33:39:f8:7d:ad:2a:d9:f8:08:9a:c6:
         c9:4a:e4:21:0c:98:52:df:1e:59:1b:c1:6d:9a:13:95:81:0d:
         bb:41:73:9a:77:ee:11:33:19:e8:1c:bb:94:15:b8:c9:25:8a:
         3f:dc:9d:2f:5e:4b:a9:f7:8d:b8:44:ed:a1:ba:0c:fb:21:bb:
         3a:27:61:87:39:50:fa:ac:76:53:a4:c6:ed:d1:6c:71:4b:38:
         17:95:82:5b:8a:ec:43:3d:4c:c6:bf:49:d6:7d:43:59:29:27:
         61:b1:a2:37:99:b5:05:c8:2b:b1:ae:f3:59:9a:88:42:c5:c7:
         90:d0:b1:23:75:b6:16:f9:55:ec:d3:ba:4e:f0:3d:6b:80:22:
         b8:6b:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 01:38:57 2022 by rpki-client.