Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/23b1c6-4add-4b62-80f3-3d4c6b64f986/1/FnS8iA2ZaDNlpwkQsAnAPeZn9Hg.roa
File:                     FnS8iA2ZaDNlpwkQsAnAPeZn9Hg.roa (download)
Hash identifier:          9UodcU5suxG9bZtnKRTlGiRl84VkZKD1tH2nzCxYpbo=
Subject key identifier:   16:74:BC:88:0D:99:68:33:65:A7:09:10:B0:09:C0:3D:E6:67:F4:78
Certificate issuer:       /CN=e6ba46c142abba78fe19257a874aa33a0884d69a
Certificate serial:       B691DE
Authority key identifier: E6:BA:46:C1:42:AB:BA:78:FE:19:25:7A:87:4A:A3:3A:08:84:D6:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5rpGwUKrunj-GSV6h0qjOgiE1po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/23b1c6-4add-4b62-80f3-3d4c6b64f986/1/FnS8iA2ZaDNlpwkQsAnAPeZn9Hg.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 213.109.149.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11964894 (0xb691de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ba46c142abba78fe19257a874aa33a0884d69a
        Validity
            Not Before: Jan  1 07:02:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1674bc880d99683365a70910b009c03de667f478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b5:da:8e:64:29:44:65:6d:4a:b3:08:16:72:
                    19:b6:21:24:86:bc:83:1e:92:eb:32:05:18:b2:f6:
                    51:5f:af:5e:3a:13:32:37:dc:de:b7:a5:b0:33:a7:
                    6c:0a:e0:b0:1a:6a:48:cd:a9:49:61:41:35:b7:7a:
                    3c:bb:15:ce:e3:2a:19:30:80:f8:06:25:63:f3:82:
                    49:10:c2:d4:bb:01:cb:f7:9d:ad:a1:4f:2c:11:1a:
                    c9:52:75:5a:37:d9:bf:42:10:e4:40:c7:45:0b:7e:
                    50:2c:00:87:d1:cd:84:6e:ed:d0:14:cf:23:a1:2f:
                    1d:fd:80:de:1e:49:b1:ad:cc:2b:f7:b5:76:58:68:
                    17:0f:70:8d:ab:01:e4:00:47:34:03:67:d8:27:37:
                    6c:ad:e1:52:32:64:e6:58:1b:c5:42:58:ad:c8:17:
                    e9:3a:c6:0f:4e:b6:b6:07:c0:13:a4:22:d4:02:53:
                    40:54:d3:1c:7c:34:26:4f:5e:c4:0c:25:58:fc:82:
                    c1:47:17:38:39:ef:57:b2:31:e8:7b:a1:2e:8e:08:
                    35:f5:19:5a:02:4d:aa:e7:f3:21:9c:1f:9d:ca:86:
                    a7:c1:76:66:68:94:03:68:6d:37:1b:67:46:5a:c6:
                    58:d5:9e:09:40:fe:c8:bd:08:a7:cd:b7:54:18:a5:
                    c2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                16:74:BC:88:0D:99:68:33:65:A7:09:10:B0:09:C0:3D:E6:67:F4:78
            X509v3 Authority Key Identifier: 
                keyid:E6:BA:46:C1:42:AB:BA:78:FE:19:25:7A:87:4A:A3:3A:08:84:D6:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rpGwUKrunj-GSV6h0qjOgiE1po.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/23b1c6-4add-4b62-80f3-3d4c6b64f986/1/FnS8iA2ZaDNlpwkQsAnAPeZn9Hg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/23b1c6-4add-4b62-80f3-3d4c6b64f986/1/5rpGwUKrunj-GSV6h0qjOgiE1po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:f1:26:b8:d1:af:8b:d3:28:19:f9:5f:8e:a2:4f:4a:dc:69:
         8b:82:90:8f:35:5d:20:e8:21:99:8c:4e:f2:99:38:ff:89:0f:
         9f:6f:70:f6:a2:5f:8f:97:2d:b4:e3:06:da:d3:ff:18:46:83:
         01:f3:5e:d6:95:4e:2d:1a:96:b3:82:56:99:31:4d:8e:3f:b5:
         27:51:b6:97:93:a0:c6:ad:18:00:6f:f9:dd:53:c6:ed:34:84:
         b6:67:71:e6:b1:0c:5f:b2:e8:32:02:5b:89:10:3c:36:21:3e:
         82:0e:14:e9:8d:e5:1d:72:12:3f:3d:ae:9c:73:e8:e4:76:49:
         14:60:74:28:13:a3:e6:30:20:6d:9d:e6:ae:fa:6e:22:40:11:
         55:9a:dd:b0:7a:a2:e2:1b:b4:27:99:9a:74:94:bb:66:9e:96:
         e6:f1:ff:a7:74:20:d6:87:cc:d4:96:bf:53:67:38:97:ce:1a:
         46:2d:24:3f:ec:df:26:ae:8f:85:ac:d2:2e:2e:16:f5:2f:af:
         15:5e:7f:99:ad:af:52:4e:f4:bb:c1:f7:24:db:2f:b0:2f:cc:
         c1:01:aa:ac:fa:cb:52:be:77:c4:43:50:b5:00:bb:07:93:bf:
         72:f9:14:3e:1e:86:0b:9e:87:50:f5:41:35:97:e0:e5:e8:cb:
         14:86:57:8b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEALaR3jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NmJhNDZjMTQyYWJiYTc4ZmUxOTI1N2E4NzRhYTMzYTA4ODRkNjlhMB4XDTIyMDEw
MTA3MDIxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTY3NGJjODgwZDk5
NjgzMzY1YTcwOTEwYjAwOWMwM2RlNjY3ZjQ3ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO612o5kKURlbUqzCBZyGbYhJIa8gx6S6zIFGLL2UV+vXjoT
Mjfc3relsDOnbArgsBpqSM2pSWFBNbd6PLsVzuMqGTCA+AYlY/OCSRDC1LsBy/ed
raFPLBEayVJ1WjfZv0IQ5EDHRQt+UCwAh9HNhG7t0BTPI6EvHf2A3h5Jsa3MK/e1
dlhoFw9wjasB5ABHNANn2Cc3bK3hUjJk5lgbxUJYrcgX6TrGD062tgfAE6Qi1AJT
QFTTHHw0Jk9exAwlWPyCwUcXODnvV7Ix6HuhLo4INfUZWgJNqufzIZwfncqGp8F2
ZmiUA2htNxtnRlrGWNWeCUD+yL0Ip823VBilwt8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQWdLyIDZloM2WnCRCwCcA95mf0eDAfBgNVHSMEGDAWgBTmukbBQqu6eP4Z
JXqHSqM6CITWmjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVycEd3VUtydW5qLUdTVjZoMHFqT2dpRTFwby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmQvMjNiMWM2LTRhZGQtNGI2Mi04MGYzLTNkNGM2YjY0Zjk4Ni8x
L0ZuUzhpQTJaYURObHB3a1FzQW5BUGVabjlIZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQv
MjNiMWM2LTRhZGQtNGI2Mi04MGYzLTNkNGM2YjY0Zjk4Ni8xLzVycEd3VUtydW5q
LUdTVjZoMHFqT2dpRTFwby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANVtlTANBgkqhkiG9w0BAQsFAAOC
AQEAEfEmuNGvi9MoGflfjqJPStxpi4KQjzVdIOghmYxO8pk4/4kPn29w9qJfj5ct
tOMG2tP/GEaDAfNe1pVOLRqWs4JWmTFNjj+1J1G2l5Ogxq0YAG/53VPG7TSEtmdx
5rEMX7LoMgJbiRA8NiE+gg4U6Y3lHXISPz2unHPo5HZJFGB0KBOj5jAgbZ3mrvpu
IkARVZrdsHqi4hu0J5madJS7Zp6W5vH/p3Qg1ofM1Ja/U2c4l84aRi0kP+zfJq6P
hazSLi4W9S+vFV5/ma2vUk70u8H3JNsvsC/MwQGqrPrLUr53xENQtQC7B5O/cvkU
Ph6GC56HUPVBNZfg5ejLFIZXiw==
-----END CERTIFICATE-----
Generated at Thu Dec 8 09:19:25 2022 by rpki-client.