Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4C2j2HECsLqVQMu0gavjmMtXSvE.roa
File:                     4C2j2HECsLqVQMu0gavjmMtXSvE.roa (download)
Hash identifier:          zvRx3YLLCLtEkOH35qlEJaTo5wrLfPL7KKNyOfy7bEk=
Subject key identifier:   E0:2D:A3:D8:71:02:B0:BA:95:40:CB:B4:81:AB:E3:98:CB:57:4A:F1
Certificate issuer:       /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial:       0CAB1154
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4C2j2HECsLqVQMu0gavjmMtXSvE.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     20473
IP address blocks:
    1: 193.218.34.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212537684 (0xcab1154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
        Validity
            Not Before: Jan  1 05:04:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e02da3d87102b0ba9540cbb481abe398cb574af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:91:65:3b:f6:c7:9e:e5:7b:31:52:46:cb:7b:
                    f7:0a:3a:57:f9:81:20:52:47:56:88:3e:8c:db:89:
                    1a:ce:3f:c3:91:f3:90:f0:b6:ad:17:71:63:c5:8e:
                    a9:b1:36:a5:01:b9:49:50:e3:ce:77:a5:d6:e8:9c:
                    c4:09:24:0b:54:16:68:3c:7a:58:e1:90:f0:cc:41:
                    fb:11:6b:c1:c6:f6:39:43:23:63:96:aa:ee:78:aa:
                    10:d3:09:ce:5f:67:66:45:6d:05:b9:d2:6f:e4:f2:
                    e8:94:5c:e8:1a:8e:28:ac:3c:89:53:7a:0e:21:27:
                    91:64:83:81:f1:32:17:cf:d3:b6:6f:0c:ab:f4:7d:
                    78:9a:28:3f:d2:28:f9:e8:ba:e1:d4:eb:41:c8:fd:
                    fe:59:76:4d:95:35:b8:3e:4b:50:ae:1a:b2:a4:1f:
                    97:d1:d5:7d:9b:8c:c3:bd:90:c6:75:a3:6f:f1:8f:
                    38:b8:0e:db:ab:36:71:9e:44:29:c2:9f:de:f4:59:
                    4a:ce:aa:6b:3e:2f:91:de:07:0d:cd:24:98:7f:d9:
                    4e:9d:fd:ce:b4:97:46:23:60:dc:95:38:29:f8:0d:
                    6d:85:31:f7:e9:7e:30:f8:4e:4a:3a:c6:91:46:02:
                    4f:0b:40:b7:71:1e:b1:88:81:88:14:4d:ee:02:e3:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E0:2D:A3:D8:71:02:B0:BA:95:40:CB:B4:81:AB:E3:98:CB:57:4A:F1
            X509v3 Authority Key Identifier: 
                keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4C2j2HECsLqVQMu0gavjmMtXSvE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.218.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:32:0f:22:c7:35:39:99:3f:c1:be:69:48:93:3e:a9:f7:15:
         3c:e4:ec:91:64:7b:43:51:5d:fd:5f:eb:9e:e4:08:6c:c3:fd:
         40:e7:72:70:67:4a:b8:a8:c5:9d:1b:a3:27:f8:76:b1:e7:f2:
         90:09:68:14:ca:f2:52:3a:ac:b0:c6:b5:bd:69:eb:cc:4c:f9:
         cb:a5:ec:33:19:b3:3e:78:1a:d3:b1:95:3b:1d:39:5b:f4:f3:
         f0:c7:37:5a:c8:da:57:3b:be:83:35:8d:1b:ea:77:ea:8d:37:
         99:15:95:81:c0:dd:a7:8a:96:83:69:54:7f:af:6b:0a:a2:b1:
         67:b7:e6:64:82:2f:af:44:76:ac:89:c1:4e:d6:7b:32:a5:25:
         12:b4:fb:e0:65:71:b4:ee:4d:b9:48:57:6d:e2:6b:8f:20:aa:
         a0:e3:fa:83:03:58:18:ff:af:8d:c8:a0:1c:19:b2:99:88:ee:
         35:94:7d:83:41:50:39:fc:55:b1:e9:f5:8d:90:bc:6e:b1:af:
         3e:03:fd:c3:41:43:aa:18:f8:2a:54:f0:ec:52:af:a4:48:59:
         e4:55:b9:1a:7e:a3:90:6a:aa:fe:7a:3c:b5:49:0d:cc:f6:28:
         9d:86:00:7f:e3:1c:bf:dc:bf:76:22:cd:70:14:af:2e:af:fb:
         ca:66:dc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 03:01:39 2022 by rpki-client.