Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/hpN5eUOxSk_bAfO0bFthSMIZuhA.roa
File:                     hpN5eUOxSk_bAfO0bFthSMIZuhA.roa (download)
Hash identifier:          kbADsn9uVJZcbKoFvfGlLlU77mIujNjZ7m9V33Cn7Kk=
Subject key identifier:   86:93:79:79:43:B1:4A:4F:DB:01:F3:B4:6C:5B:61:48:C2:19:BA:10
Certificate issuer:       /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial:       0C4E52D6
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/hpN5eUOxSk_bAfO0bFthSMIZuhA.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     20473
IP address blocks:
    1: 185.168.216.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206459606 (0xc4e52d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
        Validity
            Not Before: Jan  1 08:56:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8693797943b14a4fdb01f3b46c5b6148c219ba10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:01:e8:a0:42:06:a0:df:97:3e:37:59:e5:
                    d0:f7:49:a6:4d:f6:a0:0a:40:02:7d:ef:98:75:47:
                    1c:2c:c3:ac:27:40:bb:ec:8e:f7:0a:29:40:3e:4b:
                    79:c3:fe:eb:c7:91:29:1d:0c:0d:5f:ec:d2:8a:17:
                    be:10:fa:5d:56:fd:40:c4:90:92:f7:58:90:66:a9:
                    d2:b0:b4:22:0b:37:a5:bc:b1:c9:dd:8c:92:87:1a:
                    d9:84:49:3c:f9:e7:6b:14:0b:f2:45:b7:72:80:be:
                    15:ba:67:7d:bc:1c:a0:2b:23:65:bf:65:7f:a3:6e:
                    41:a2:09:81:ab:7b:1c:3f:19:0a:f4:7a:d7:5d:59:
                    3d:4d:2c:80:9e:98:11:0c:5c:9e:69:ac:9b:a3:d7:
                    ed:ce:3c:fd:76:6c:a1:57:6b:5f:f4:4c:e1:1a:aa:
                    de:30:b5:d7:b8:d4:16:12:46:15:22:49:92:db:fc:
                    1e:ce:40:65:3b:24:63:f9:4d:67:bd:c1:4a:07:cc:
                    15:c9:04:99:92:d7:0c:02:2c:f8:4a:d2:01:57:23:
                    03:d1:18:ae:79:e3:99:0a:d1:4b:e1:97:77:08:cc:
                    8e:a7:9a:b1:78:11:dd:8e:da:4e:cb:88:35:23:90:
                    f1:b5:41:76:43:d3:8f:1e:9f:e6:1e:6f:b7:8f:58:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                86:93:79:79:43:B1:4A:4F:DB:01:F3:B4:6C:5B:61:48:C2:19:BA:10
            X509v3 Authority Key Identifier: 
                keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/hpN5eUOxSk_bAfO0bFthSMIZuhA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.168.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:cf:22:de:8d:4c:7a:b6:48:60:35:e5:0f:c7:c2:c7:ff:99:
         ac:41:12:da:4d:c7:25:8c:f1:f6:d8:78:40:1f:b5:2d:ca:c5:
         40:66:a9:ee:ae:d2:04:ca:0b:3c:3b:6d:67:ba:9f:0d:83:59:
         ce:24:dd:db:40:a6:15:c3:21:d6:5b:e4:a5:2e:d4:51:04:93:
         e7:74:1c:6a:f8:e5:14:ab:ff:43:41:00:a2:19:4a:c1:c0:5c:
         ce:36:0e:07:e1:a5:22:50:5e:16:5d:b8:f1:b7:f9:1f:29:28:
         64:4e:c7:42:b1:8b:17:1d:b6:8d:6d:0b:25:59:40:76:5d:f1:
         f8:33:71:b8:f6:5c:7b:f1:2b:dd:50:97:bf:a1:1a:9d:89:50:
         20:95:7e:8d:b3:71:52:b0:22:81:45:bb:3b:d4:1e:95:0d:8d:
         7b:9a:51:64:bc:1f:14:10:67:4e:9b:e5:66:d0:c2:67:e9:75:
         e2:93:98:58:db:15:49:61:47:94:d8:b4:b9:5b:e6:e3:a3:3f:
         64:0b:0a:07:6a:4f:ba:41:52:62:17:69:21:8d:89:74:bb:3b:
         0d:ea:4f:90:f6:e0:93:8d:3d:29:4b:e8:aa:65:01:ff:ee:e4:
         3e:1b:f1:77:46:3f:5c:6d:d5:b6:26:9b:64:ac:22:3d:33:0a:
         90:65:2f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 01:38:58 2022 by rpki-client.