Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/5zNx-v-R0dhw658zRkRi1JgdCoA.roa
File:                     5zNx-v-R0dhw658zRkRi1JgdCoA.roa (download)
Hash identifier:          2nYuUlkjCaE2ERaLEMcHeyMbiesLr5/wiTcVNRBT4ZU=
Subject key identifier:   E7:33:71:FA:FF:91:D1:D8:70:EB:9F:33:46:44:62:D4:98:1D:0A:80
Certificate issuer:       /CN=823b669a87620faf0c422710e26ee3000c9a9a41
Certificate serial:       ED0240
Authority key identifier: 82:3B:66:9A:87:62:0F:AF:0C:42:27:10:E2:6E:E3:00:0C:9A:9A:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gjtmmodiD68MQicQ4m7jAAyamkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/5zNx-v-R0dhw658zRkRi1JgdCoA.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 193.243.186.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15532608 (0xed0240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823b669a87620faf0c422710e26ee3000c9a9a41
        Validity
            Not Before: Jan  1 10:56:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e73371faff91d1d870eb9f33464462d4981d0a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:a2:66:73:67:9d:2d:10:d4:fd:92:7f:ce:
                    c2:ea:68:22:3b:b8:83:0d:f2:be:16:99:a6:23:95:
                    69:0c:35:25:a7:5d:82:a4:f9:ac:bf:86:d0:3f:a2:
                    5d:ec:e6:2f:e0:54:2b:a7:71:99:24:0a:c2:37:dc:
                    bd:b2:58:d8:61:71:ab:2a:e5:08:47:0d:92:2d:fc:
                    10:97:f0:84:e2:15:6d:a1:04:07:71:ba:c1:9c:4b:
                    87:1b:a6:b7:a9:a4:70:bf:b4:ce:85:a9:a1:6a:8b:
                    89:3e:e8:18:a8:67:42:a2:84:58:70:27:18:bf:b0:
                    df:3a:87:90:7c:46:85:1e:da:da:49:e7:68:a4:d3:
                    f1:9d:3d:4f:f3:e3:30:da:ef:90:8c:43:8c:d9:44:
                    ce:21:cb:7f:7f:9e:2b:6f:df:0d:24:d2:3a:57:68:
                    b2:45:b3:98:04:8a:bf:e5:ed:23:c8:54:36:3b:73:
                    5a:e2:b5:0a:0c:dc:d1:c9:35:f8:86:cc:70:3f:9c:
                    86:3b:b5:e7:84:60:14:59:79:ff:a7:47:6e:19:c4:
                    5c:a3:62:32:ca:10:b3:65:1c:3a:99:a3:05:4b:36:
                    1d:16:c7:39:3b:b0:82:02:6b:3f:87:75:e0:61:82:
                    0f:75:60:6b:5b:a5:35:ff:ab:55:b0:6e:7f:0f:2f:
                    2d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E7:33:71:FA:FF:91:D1:D8:70:EB:9F:33:46:44:62:D4:98:1D:0A:80
            X509v3 Authority Key Identifier: 
                keyid:82:3B:66:9A:87:62:0F:AF:0C:42:27:10:E2:6E:E3:00:0C:9A:9A:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtmmodiD68MQicQ4m7jAAyamkE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/5zNx-v-R0dhw658zRkRi1JgdCoA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/gjtmmodiD68MQicQ4m7jAAyamkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.243.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:57:5c:17:25:1e:e3:6d:3a:cf:62:f0:7a:a8:0b:02:f3:77:
         4f:46:23:3c:54:ff:31:9f:a8:65:8f:5c:66:ca:14:bb:1f:b7:
         4e:f6:ea:e2:95:71:6e:36:ef:aa:b9:21:79:1e:83:02:8a:c4:
         fe:12:32:d4:26:57:1b:65:a9:f4:c0:f9:92:a6:4e:64:0d:fe:
         89:a1:39:93:60:e4:e5:6b:62:cb:e8:2b:ee:ac:76:cc:8e:41:
         07:ee:50:b8:78:76:3e:2a:57:0e:e6:a6:91:8c:1b:8a:d3:39:
         a6:34:d8:4b:42:f0:fb:36:61:c2:b0:02:10:14:90:9c:73:51:
         1d:55:b8:b5:9a:cc:f0:f8:00:84:20:f9:55:aa:c3:c7:7d:3a:
         04:bb:82:8b:2a:80:f6:62:08:16:be:e9:df:71:17:e8:07:8e:
         2b:8a:d7:86:7c:cf:5b:d0:22:76:f5:e1:8a:cf:dc:b0:b2:7b:
         f4:7e:96:0a:0c:42:cb:5b:a0:03:36:24:3f:be:f9:3e:d9:87:
         32:22:ff:4e:16:64:c1:40:5e:66:bc:6c:18:b6:72:26:a3:c6:
         36:9d:87:59:f5:15:bd:f2:d0:54:28:7b:5a:f0:b7:33:6f:18:
         39:69:fb:65:99:94:d0:15:1c:22:f6:58:39:87:20:77:1a:9d:
         d1:61:b0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 10:34:37 2022 by rpki-client.