Route Origin Authorization

$ cd rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/

$ rpki-client -vvf OYW_nNvQZXH0LlD6DB84T6F7r28.roa
File:                     OYW_nNvQZXH0LlD6DB84T6F7r28.roa (download)
Hash identifier:          63r+1ldeuN/ukQCfZ/kWTyl/Rcai0ofaBy9GqP63DlU=
Subject key identifier:   39:85:BF:9C:DB:D0:65:71:F4:2E:50:FA:0C:1F:38:4F:A1:7B:AF:6F
Certificate issuer:       /CN=b6ae61814f7150c9b8117f498cab94db72a8339c
Certificate serial:       9272
Authority key identifier: B6:AE:61:81:4F:71:50:C9:B8:11:7F:49:8C:AB:94:DB:72:A8:33:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tq5hgU9xUMm4EX9JjKuU23KoM5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/OYW_nNvQZXH0LlD6DB84T6F7r28.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 185.214.166.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37490 (0x9272)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6ae61814f7150c9b8117f498cab94db72a8339c
        Validity
            Not Before: Apr 26 16:02:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3985bf9cdbd06571f42e50fa0c1f384fa17baf6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:a4:cb:31:b5:13:fe:dc:09:7f:17:24:ff:
                    fd:a5:55:f8:7b:9b:db:67:c9:bd:29:05:d4:b7:7d:
                    da:60:1c:77:39:9c:b3:97:7b:7c:ea:e5:f4:8f:1d:
                    6e:4e:50:3b:94:2c:24:50:62:69:01:4a:29:95:70:
                    0b:ec:9f:10:9f:f5:e3:81:4e:4c:50:a2:59:54:55:
                    3f:6b:fc:55:41:2a:04:aa:e4:a2:90:f8:29:87:a8:
                    59:70:32:7e:78:8c:27:b2:8e:30:31:66:98:8e:54:
                    ce:be:c5:a4:9c:29:b2:58:7a:e3:56:d7:41:38:0a:
                    31:ca:7b:ec:cb:ea:7f:bb:05:af:2f:19:61:85:ab:
                    f0:86:d4:3d:6b:90:03:7a:ae:b5:1d:12:d7:cc:f3:
                    14:d8:d6:eb:b4:83:23:78:79:c9:1b:2d:5a:88:b1:
                    c1:37:f5:4f:e8:eb:3b:bf:9b:67:91:55:97:f3:75:
                    07:e6:31:97:7e:8f:56:9a:06:c7:bf:18:95:52:fc:
                    8e:b1:97:b0:bc:80:75:62:e6:40:e6:aa:89:05:9f:
                    ee:ae:cd:ef:5c:2b:c0:22:41:b6:7d:01:1c:b8:80:
                    bb:51:ec:34:c4:03:3f:1e:45:71:e8:bb:ea:92:d2:
                    89:40:8f:a8:be:1d:3e:1e:8f:86:c1:50:6b:0f:d9:
                    e8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                39:85:BF:9C:DB:D0:65:71:F4:2E:50:FA:0C:1F:38:4F:A1:7B:AF:6F
            X509v3 Authority Key Identifier: 
                keyid:B6:AE:61:81:4F:71:50:C9:B8:11:7F:49:8C:AB:94:DB:72:A8:33:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tq5hgU9xUMm4EX9JjKuU23KoM5w.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/OYW_nNvQZXH0LlD6DB84T6F7r28.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/tq5hgU9xUMm4EX9JjKuU23KoM5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:04:db:47:b1:86:77:c2:ec:ca:59:af:b8:f4:27:07:71:3a:
         7a:db:8d:45:ba:c8:84:6d:6e:b6:2c:0b:2e:49:47:1a:9b:79:
         75:43:c9:55:ee:a0:cc:72:b2:b7:ad:1b:96:6a:59:0f:ea:1b:
         1a:a8:e2:cf:03:d8:f8:3a:66:0a:a7:b0:1c:86:c8:a6:e2:b0:
         51:fc:19:e3:3b:ca:4b:c6:ee:e7:09:65:ee:b6:d9:f5:ad:50:
         20:47:2b:e9:95:a3:b3:63:7b:b0:c5:b6:dd:9c:a5:5c:5a:7e:
         34:39:6d:de:d2:99:5c:09:20:c7:74:08:f4:32:3d:99:cf:7b:
         51:40:16:94:ca:d6:eb:58:c4:0f:56:de:a6:6f:08:7c:06:48:
         13:70:b7:43:06:10:2d:c9:85:55:a2:47:0b:eb:71:9e:21:28:
         36:27:16:cf:3b:47:cd:11:3f:a1:86:93:9e:60:1e:d1:11:a6:
         b4:e6:bd:ff:33:72:a0:74:f5:ae:76:9c:7a:01:58:d7:ad:fe:
         51:5e:33:bb:ac:9a:06:93:fc:56:01:82:32:01:d4:7b:02:75:
         a8:26:a5:71:e4:3f:eb:84:f6:77:ab:f5:37:0d:7f:9f:e7:5f:
         a0:dd:cb:33:8b:cf:44:7f:0a:49:5e:05:58:ce:3c:21:08:2d:
         69:e1:a9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 13:02:07 2022 by rpki-client.