Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/yJzkdGQlukFfBreVN_GGL6sNX20.roa
File:                     yJzkdGQlukFfBreVN_GGL6sNX20.roa (download)
Hash identifier:          O/AJDLh9MHC01Gj4TTVONYq+YwYjwabijlKfJn+NX3Q=
Subject key identifier:   C8:9C:E4:74:64:25:BA:41:5F:06:B7:95:37:F1:86:2F:AB:0D:5F:6D
Certificate issuer:       /CN=3d9b6b7cc780ab030191c19690aff70fe1beef45
Certificate serial:       BE617A
Authority key identifier: 3D:9B:6B:7C:C7:80:AB:03:01:91:C1:96:90:AF:F7:0F:E1:BE:EF:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PZtrfMeAqwMBkcGWkK_3D-G-70U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/yJzkdGQlukFfBreVN_GGL6sNX20.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 31.222.252.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12476794 (0xbe617a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9b6b7cc780ab030191c19690aff70fe1beef45
        Validity
            Not Before: Jan  1 06:57:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c89ce4746425ba415f06b79537f1862fab0d5f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:aa:22:14:f0:d9:5f:e8:df:9b:78:95:70:
                    60:44:c8:76:04:7d:2a:9a:2a:1d:59:a0:02:b2:f7:
                    5f:4a:a5:a6:77:0c:97:75:ca:81:60:34:14:a9:12:
                    e9:8b:99:63:e5:79:60:67:87:1f:d9:8b:e4:23:6c:
                    fe:26:b3:fc:3d:7b:c4:56:f7:3e:8d:ec:e0:e4:7a:
                    df:68:24:b3:df:25:bb:b1:fe:20:3e:b8:66:4d:e3:
                    91:53:4f:00:d7:f2:f3:f1:d8:cc:4b:90:cb:b5:4c:
                    d5:83:15:33:39:b6:eb:44:da:6e:5f:5f:91:8c:b2:
                    21:24:81:06:a8:06:f3:95:7e:c6:45:28:1d:36:b1:
                    e7:06:1a:25:9b:f8:1e:63:fc:33:b6:33:bf:96:21:
                    bc:ca:79:a9:c5:d2:09:ef:0c:76:81:c9:5f:b4:dd:
                    bc:aa:90:0b:90:60:f3:69:71:41:2c:a3:07:4d:1b:
                    e2:6d:f1:2a:86:e9:16:bd:a8:bb:d7:75:58:d3:dc:
                    c9:b0:ec:ac:a1:6d:fd:33:53:01:27:92:3a:53:95:
                    1e:75:a0:e7:22:72:fb:64:36:c3:5d:62:c9:1d:0a:
                    5d:87:a0:75:11:5b:12:86:5e:81:a3:e4:7c:c6:ec:
                    c8:2c:40:cf:34:f7:89:9f:6e:ca:f4:d1:6c:0d:e6:
                    61:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C8:9C:E4:74:64:25:BA:41:5F:06:B7:95:37:F1:86:2F:AB:0D:5F:6D
            X509v3 Authority Key Identifier: 
                keyid:3D:9B:6B:7C:C7:80:AB:03:01:91:C1:96:90:AF:F7:0F:E1:BE:EF:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZtrfMeAqwMBkcGWkK_3D-G-70U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/yJzkdGQlukFfBreVN_GGL6sNX20.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/PZtrfMeAqwMBkcGWkK_3D-G-70U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.222.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:86:3c:4a:6d:59:9c:3a:be:a6:64:f3:f3:84:06:8d:3d:74:
         61:b5:bc:84:6c:3c:e7:86:74:24:c1:e7:b8:d4:9c:83:43:53:
         68:5c:03:fb:05:dc:f7:37:be:95:d0:74:26:4e:25:ed:12:ba:
         23:17:27:64:3a:97:ab:e8:98:f5:8f:e4:17:73:71:90:c1:78:
         29:bd:02:25:6f:4b:6a:97:d2:5d:9f:38:f6:0a:f0:92:89:8c:
         13:d8:59:ab:81:03:80:ee:39:84:de:bf:0f:f7:f9:e9:40:aa:
         09:7c:a5:c8:8a:fa:99:24:e6:d0:1a:ea:1e:e8:3a:be:b5:06:
         c4:21:ea:d8:60:db:7b:8f:3b:eb:6d:3f:ba:6e:f3:eb:d4:3c:
         e1:a5:2b:44:9f:2b:bd:5e:22:bc:ab:1c:ea:7e:64:3d:45:3e:
         fb:39:9a:9e:d3:cf:63:de:31:8f:19:89:ba:c5:ce:5a:d8:dd:
         da:e3:0b:ce:eb:04:72:eb:e7:c0:45:ab:1f:63:49:df:fa:29:
         67:ac:5f:98:4e:53:3b:59:78:b3:01:c9:20:99:93:94:89:49:
         ff:a8:a1:cd:8c:bc:f6:63:eb:1b:f7:87:1a:68:b1:a1:0f:c1:
         2f:46:ea:54:74:18:d1:02:06:fd:76:c6:3f:a6:24:40:5f:60:
         63:8c:cc:69
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAL5hejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZDliNmI3Y2M3ODBhYjAzMDE5MWMxOTY5MGFmZjcwZmUxYmVlZjQ1MB4XDTIyMDEw
MTA2NTc0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzg5Y2U0NzQ2NDI1
YmE0MTVmMDZiNzk1MzdmMTg2MmZhYjBkNWY2ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALJ5qiIU8Nlf6N+beJVwYETIdgR9KpoqHVmgArL3X0qlpncM
l3XKgWA0FKkS6YuZY+V5YGeHH9mL5CNs/iaz/D17xFb3Po3s4OR632gks98lu7H+
ID64Zk3jkVNPANfy8/HYzEuQy7VM1YMVMzm260Tabl9fkYyyISSBBqgG85V+xkUo
HTax5wYaJZv4HmP8M7Yzv5YhvMp5qcXSCe8MdoHJX7TdvKqQC5Bg82lxQSyjB00b
4m3xKobpFr2ou9d1WNPcybDsrKFt/TNTASeSOlOVHnWg5yJy+2Q2w11iyR0KXYeg
dRFbEoZegaPkfMbsyCxAzzT3iZ9uyvTRbA3mYQkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTInOR0ZCW6QV8Gt5U38YYvqw1fbTAfBgNVHSMEGDAWgBQ9m2t8x4CrAwGR
wZaQr/cP4b7vRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BadHJmTWVBcXdNQmtjR1drS18zRC1HLTcwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTQvMDRlOGY0LTA1ZGItNGVmZi05ZGRhLWYzMmNmYTA1OWUyZi8x
L3lKemtkR1FsdWtGZkJyZVZOX0dHTDZzTlgyMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQv
MDRlOGY0LTA1ZGItNGVmZi05ZGRhLWYzMmNmYTA1OWUyZi8xL1BadHJmTWVBcXdN
QmtjR1drS18zRC1HLTcwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB/e/DANBgkqhkiG9w0BAQsFAAOC
AQEAUYY8Sm1ZnDq+pmTz84QGjT10YbW8hGw854Z0JMHnuNScg0NTaFwD+wXc9ze+
ldB0Jk4l7RK6IxcnZDqXq+iY9Y/kF3NxkMF4Kb0CJW9LapfSXZ849grwkomME9hZ
q4EDgO45hN6/D/f56UCqCXylyIr6mSTm0BrqHug6vrUGxCHq2GDbe487620/um7z
69Q84aUrRJ8rvV4ivKsc6n5kPUU++zmantPPY94xjxmJusXOWtjd2uMLzusEcuvn
wEWrH2NJ3/opZ6xfmE5TO1l4swHJIJmTlIlJ/6ihzYy89mPrG/eHGmixoQ/BL0bq
VHQY0QIG/XbGP6YkQF9gY4zMaQ==
-----END CERTIFICATE-----
Generated at Thu Dec 8 08:40:38 2022 by rpki-client.