Route Origin Authorization

$ cd rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/

$ rpki-client -vvf nxbZRK9cz9v6Ehm-eEEtJLswCxA.roa
File:                     nxbZRK9cz9v6Ehm-eEEtJLswCxA.roa (download)
Hash identifier:          u+Zt6RfmNkUaP17otOR6TUPdpWkrmNzRIC8e6Joqvvg=
Subject key identifier:   9F:16:D9:44:AF:5C:CF:DB:FA:12:19:BE:78:41:2D:24:BB:30:0B:10
Certificate issuer:       /CN=8da152983240e90495f7605c442547d90283e1e0
Certificate serial:       824A86
Authority key identifier: 8D:A1:52:98:32:40:E9:04:95:F7:60:5C:44:25:47:D9:02:83:E1:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaFSmDJA6QSV92BcRCVH2QKD4eA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/nxbZRK9cz9v6Ehm-eEEtJLswCxA.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 212.52.12.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8538758 (0x824a86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da152983240e90495f7605c442547d90283e1e0
        Validity
            Not Before: Jan  1 02:55:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9f16d944af5ccfdbfa1219be78412d24bb300b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:d6:7f:28:bd:ac:14:0e:b5:7e:fc:57:ce:
                    81:d3:42:38:2c:cf:40:c9:c3:fd:7d:1c:0c:e6:7a:
                    c9:8a:66:79:a1:04:b6:d0:f2:68:a5:a8:a1:8a:ee:
                    1c:49:a4:0c:c5:43:fd:9f:40:65:fe:f9:77:5e:08:
                    23:3e:85:c6:c8:96:4b:32:14:e7:62:56:40:a1:51:
                    37:ce:b5:70:d3:e1:e0:ae:4b:04:12:ba:c3:f6:4f:
                    08:0d:46:3a:6a:74:22:76:8f:a4:94:80:9e:a6:dd:
                    f6:b1:31:6f:09:75:0d:88:c0:8b:4a:82:8f:7a:8d:
                    e9:c6:d4:86:ad:d5:11:a3:97:b8:da:2f:f1:84:3c:
                    81:64:f6:cf:13:b4:ba:f8:8b:65:19:c0:dd:01:db:
                    b5:6b:ea:21:c2:69:ef:df:7f:52:b9:95:bf:51:f3:
                    a6:28:3a:cd:bd:56:0e:41:75:47:24:e2:fe:03:e9:
                    39:76:ca:2e:64:14:af:3b:b5:42:a1:b5:ee:3b:99:
                    4b:8f:38:a0:42:b4:4a:d3:82:4d:d5:d2:9f:6d:10:
                    34:75:f7:13:1b:bf:9d:fa:53:ff:36:b9:87:c7:a4:
                    4d:8e:05:7c:58:de:16:c6:e4:52:59:4a:1a:7e:0a:
                    3e:73:19:5d:d5:69:e2:7a:f6:54:7c:29:c7:31:18:
                    9b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9F:16:D9:44:AF:5C:CF:DB:FA:12:19:BE:78:41:2D:24:BB:30:0B:10
            X509v3 Authority Key Identifier: 
                keyid:8D:A1:52:98:32:40:E9:04:95:F7:60:5C:44:25:47:D9:02:83:E1:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaFSmDJA6QSV92BcRCVH2QKD4eA.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/nxbZRK9cz9v6Ehm-eEEtJLswCxA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/jaFSmDJA6QSV92BcRCVH2QKD4eA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.52.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:4b:45:c4:3f:6e:b2:c2:09:74:da:f2:64:14:dd:0a:d0:5c:
         01:61:cb:a0:c8:03:e1:02:31:b3:5d:51:7a:62:70:0d:00:e7:
         b7:56:9c:21:b8:1d:43:dc:f3:9b:fd:be:28:ce:0c:bf:78:f8:
         08:be:fd:03:25:23:9d:4d:59:10:8d:e3:58:16:c1:e8:2c:9c:
         bd:d8:0d:7b:eb:b0:34:8c:be:08:e3:93:0c:25:93:6a:ea:63:
         37:07:62:a9:b5:9e:83:70:15:a5:65:66:a8:08:bb:d1:db:bf:
         11:f5:a6:7e:57:da:99:15:94:fe:62:39:97:eb:87:77:6f:dc:
         b9:d6:f6:59:82:bb:0e:3f:c4:a3:f6:69:79:2b:b6:d3:5b:34:
         8a:ee:3e:ac:c2:7c:7c:17:0d:9a:b9:d4:10:7b:af:9d:97:33:
         31:e1:98:9d:29:03:ac:d5:5a:1e:9a:a5:b5:16:84:77:d0:0c:
         60:ce:44:0a:13:24:23:3e:36:ea:35:ad:56:87:3b:fb:fa:1a:
         f4:d6:a4:fa:5f:bd:1d:eb:a2:86:55:93:b3:a4:cf:69:58:32:
         47:95:ab:34:fd:f8:75:2c:0c:c2:d2:df:a9:c3:84:e9:14:95:
         00:63:a1:a4:04:43:e4:80:da:1a:ec:6b:69:4d:70:b4:28:e0:
         d3:a2:d0:29
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAIJKhjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZGExNTI5ODMyNDBlOTA0OTVmNzYwNWM0NDI1NDdkOTAyODNlMWUwMB4XDTIyMDEw
MTAyNTUxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWYxNmQ5NDRhZjVj
Y2ZkYmZhMTIxOWJlNzg0MTJkMjRiYjMwMGIxMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALJp1n8ovawUDrV+/FfOgdNCOCzPQMnD/X0cDOZ6yYpmeaEE
ttDyaKWooYruHEmkDMVD/Z9AZf75d14IIz6FxsiWSzIU52JWQKFRN861cNPh4K5L
BBK6w/ZPCA1GOmp0InaPpJSAnqbd9rExbwl1DYjAi0qCj3qN6cbUhq3VEaOXuNov
8YQ8gWT2zxO0uviLZRnA3QHbtWvqIcJp799/UrmVv1Hzpig6zb1WDkF1RyTi/gPp
OXbKLmQUrzu1QqG17juZS484oEK0StOCTdXSn20QNHX3Exu/nfpT/za5h8ekTY4F
fFjeFsbkUllKGn4KPnMZXdVp4nr2VHwpxzEYm0sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSfFtlEr1zP2/oSGb54QS0kuzALEDAfBgNVHSMEGDAWgBSNoVKYMkDpBJX3
YFxEJUfZAoPh4DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2phRlNtREpBNlFTVjkyQmNSQ1ZIMlFLRDRlQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvOWIxMjgxLTAwYjUtNGZmZC1hMGJjLWRkYTczNTAyZDEzMS8x
L254YlpSSzljejl2NkVobS1lRUV0Skxzd0N4QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
OWIxMjgxLTAwYjUtNGZmZC1hMGJjLWRkYTczNTAyZDEzMS8xL2phRlNtREpBNlFT
VjkyQmNSQ1ZIMlFLRDRlQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQ0DDANBgkqhkiG9w0BAQsFAAOC
AQEAaktFxD9ussIJdNryZBTdCtBcAWHLoMgD4QIxs11RemJwDQDnt1acIbgdQ9zz
m/2+KM4Mv3j4CL79AyUjnU1ZEI3jWBbB6CycvdgNe+uwNIy+COOTDCWTaupjNwdi
qbWeg3AVpWVmqAi70du/EfWmflfamRWU/mI5l+uHd2/cudb2WYK7Dj/Eo/ZpeSu2
01s0iu4+rMJ8fBcNmrnUEHuvnZczMeGYnSkDrNVaHpqltRaEd9AMYM5EChMkIz42
6jWtVoc7+/oa9Nak+l+9HeuihlWTs6TPaVgyR5WrNP34dSwMwtLfqcOE6RSVAGOh
pARD5IDaGuxraU1wtCjg06LQKQ==
-----END CERTIFICATE-----
Generated at Fri Dec 2 13:01:56 2022 by rpki-client.