Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/Kk6c3UQuC2JgYCLQcHPCVJzyWEI.roa
File:                     Kk6c3UQuC2JgYCLQcHPCVJzyWEI.roa (download)
Hash identifier:          twgOSwOymNbqh16661B3Fomn2gnWQ9naWZqdE/wdgTk=
Subject key identifier:   2A:4E:9C:DD:44:2E:0B:62:60:60:22:D0:70:73:C2:54:9C:F2:58:42
Certificate issuer:       /CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
Certificate serial:       030BC334
Authority key identifier: 6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/Kk6c3UQuC2JgYCLQcHPCVJzyWEI.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     20473
IP address blocks:
    1: 185.223.161.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51102516 (0x30bc334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
        Validity
            Not Before: Jan  1 12:56:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2a4e9cdd442e0b62606022d07073c2549cf25842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f4:96:0e:4b:10:e1:b3:13:c2:ed:bd:ca:bd:
                    07:11:46:9d:02:66:b4:d5:e3:bf:9c:70:94:e6:29:
                    bc:5f:83:93:72:ff:16:1a:fd:68:af:77:3d:09:ea:
                    8d:56:88:05:5e:5b:e9:d9:9b:c3:b4:ad:18:22:ec:
                    78:3b:41:e9:1d:86:f5:20:08:e0:e4:c4:5c:24:6a:
                    f5:ba:01:4c:ab:5a:56:6f:3d:1c:f2:a6:e9:60:2d:
                    e6:03:4b:31:ae:f8:e1:10:51:0b:09:08:99:ed:12:
                    36:3d:94:c9:7d:34:3c:2b:83:d4:f6:67:26:3d:1b:
                    b4:03:19:00:73:8b:eb:f2:91:f6:14:b0:e4:c3:e4:
                    96:3b:3a:fc:b8:3d:bf:ea:b2:c5:03:10:22:0b:db:
                    e9:83:2a:28:14:c7:60:fb:b8:bd:f0:1f:06:c0:d0:
                    dc:8c:33:34:ca:91:19:e9:b5:ca:28:f0:9a:ae:79:
                    95:27:9f:9e:df:86:28:bd:a4:12:62:cd:99:b3:7f:
                    1a:d6:ab:82:d4:94:db:22:aa:cf:03:d0:d2:1e:8e:
                    4b:c2:69:07:d7:cd:bb:cb:1c:68:41:a5:7d:b3:27:
                    04:1f:6b:aa:9b:df:0d:ae:cd:73:c9:44:60:41:e2:
                    0e:ed:60:6c:46:94:4a:4e:f9:81:b9:6b:32:ad:41:
                    ff:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2A:4E:9C:DD:44:2E:0B:62:60:60:22:D0:70:73:C2:54:9C:F2:58:42
            X509v3 Authority Key Identifier: 
                keyid:6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/Kk6c3UQuC2JgYCLQcHPCVJzyWEI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.223.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:c1:a9:80:bd:c1:c7:4a:50:ca:de:4c:65:d2:58:e9:89:96:
         39:a5:29:53:db:c4:83:b8:bd:27:97:1a:de:5b:ea:d0:d0:85:
         e4:a1:1f:22:fa:c5:8c:8a:02:5e:6f:89:fc:19:c0:fc:76:6d:
         1f:36:67:27:d1:32:8f:ee:97:57:1d:c1:35:cf:39:b1:ea:4d:
         89:c6:a5:ed:5a:30:5d:ea:26:54:9f:93:31:93:5a:5e:fb:44:
         ac:c8:42:a6:90:e8:f0:00:d4:d9:7a:bc:a6:89:49:19:c4:2f:
         76:2b:a0:be:39:81:02:06:7c:b2:52:29:8c:a5:21:f1:2e:eb:
         17:1f:74:2f:72:9b:4b:4c:7f:19:98:46:60:31:4b:5f:eb:9f:
         4d:bd:9f:39:e3:33:14:ff:59:4b:95:52:9f:cf:69:0e:10:d4:
         b4:6b:a4:4f:34:3c:08:bb:48:eb:34:59:22:3e:89:bc:b1:07:
         44:33:76:be:76:99:5e:3e:b3:f7:f7:a0:c1:bf:af:37:94:5e:
         27:71:30:c0:39:f7:ef:49:48:d3:73:6b:60:e7:9d:f4:ca:ed:
         34:b6:2a:39:23:1f:80:17:16:96:15:9a:3e:53:df:32:b5:b4:
         5b:59:81:d2:96:08:a8:db:90:5e:db:59:f7:65:13:59:7a:3c:
         51:4d:02:5f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAwvDNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YWI3NTkyOWU3MzVjZTY1YTY2YmQ4MmRjYThiNjUxZDk4NTZjZDJjMB4XDTIyMDEw
MTEyNTYyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmE0ZTljZGQ0NDJl
MGI2MjYwNjAyMmQwNzA3M2MyNTQ5Y2YyNTg0MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIj0lg5LEOGzE8Ltvcq9BxFGnQJmtNXjv5xwlOYpvF+Dk3L/
Fhr9aK93PQnqjVaIBV5b6dmbw7StGCLseDtB6R2G9SAI4OTEXCRq9boBTKtaVm89
HPKm6WAt5gNLMa744RBRCwkIme0SNj2UyX00PCuD1PZnJj0btAMZAHOL6/KR9hSw
5MPkljs6/Lg9v+qyxQMQIgvb6YMqKBTHYPu4vfAfBsDQ3IwzNMqRGem1yijwmq55
lSefnt+GKL2kEmLNmbN/GtargtSU2yKqzwPQ0h6OS8JpB9fNu8scaEGlfbMnBB9r
qpvfDa7Nc8lEYEHiDu1gbEaUSk75gblrMq1B/7cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQqTpzdRC4LYmBgItBwc8JUnPJYQjAfBgNVHSMEGDAWgBRqt1kp5zXOZaZr
2C3Ki2UdmFbNLDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FyZFpLZWMxem1XbWE5Z3R5b3RsSFpoV3pTdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjkvOWQxYzhmLWM2MzQtNDZhYS1hZmY4LTdjMmIyMWZmNmNlYi8x
L0trNmMzVVF1QzJKZ1lDTFFjSFBDVkp6eVdFSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkv
OWQxYzhmLWM2MzQtNDZhYS1hZmY4LTdjMmIyMWZmNmNlYi8xL2FyZFpLZWMxem1X
bWE5Z3R5b3RsSFpoV3pTdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnfoTANBgkqhkiG9w0BAQsFAAOC
AQEAi8GpgL3Bx0pQyt5MZdJY6YmWOaUpU9vEg7i9J5ca3lvq0NCF5KEfIvrFjIoC
Xm+J/BnA/HZtHzZnJ9Eyj+6XVx3BNc85sepNical7VowXeomVJ+TMZNaXvtErMhC
ppDo8ADU2Xq8polJGcQvdiugvjmBAgZ8slIpjKUh8S7rFx90L3KbS0x/GZhGYDFL
X+ufTb2fOeMzFP9ZS5VSn89pDhDUtGukTzQ8CLtI6zRZIj6JvLEHRDN2vnaZXj6z
9/egwb+vN5ReJ3EwwDn370lI03NrYOed9MrtNLYqOSMfgBcWlhWaPlPfMrW0W1mB
0pYIqNuQXttZ92UTWXo8UU0CXw==
-----END CERTIFICATE-----
Generated at Fri Dec 9 01:40:07 2022 by rpki-client.