Route Origin Authorization

$ cd rpki.ripe.net/repository/DEFAULT/be/eed8dd-d596-4e48-8356-4e67d713c79c/1/

$ rpki-client -vvf sHEfYJS-Y-0pu9YD7CwUgxN7CRU.roa
File:                     sHEfYJS-Y-0pu9YD7CwUgxN7CRU.roa (download)
Hash identifier:          5eFbj+Dzb32erxEILM7IJYL9kZTYZ/xNcxKvFJMXj+k=
Subject key identifier:   B0:71:1F:60:94:BE:63:ED:29:BB:D6:03:EC:2C:14:83:13:7B:09:15
Certificate issuer:       /CN=8d6ff72d9bbc5eef67360bc717c54b2ba1b0b3e4
Certificate serial:       B52F15
Authority key identifier: 8D:6F:F7:2D:9B:BC:5E:EF:67:36:0B:C7:17:C5:4B:2B:A1:B0:B3:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jW_3LZu8Xu9nNgvHF8VLK6Gws-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/eed8dd-d596-4e48-8356-4e67d713c79c/1/sHEfYJS-Y-0pu9YD7CwUgxN7CRU.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 62.106.89.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11874069 (0xb52f15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d6ff72d9bbc5eef67360bc717c54b2ba1b0b3e4
        Validity
            Not Before: Jan  1 06:57:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b0711f6094be63ed29bbd603ec2c1483137b0915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:ed:d8:c2:ea:aa:97:18:36:74:fa:98:de:
                    74:f0:68:54:32:bb:c3:2c:02:ef:28:21:4f:b0:45:
                    c3:2a:6c:82:ed:f0:84:3b:0c:68:fb:70:9f:aa:c7:
                    04:e7:f9:c0:00:c5:3f:19:2b:61:3d:75:50:23:4b:
                    0c:29:fd:f4:f5:f4:37:7a:8d:43:87:c7:69:f2:cf:
                    b5:f7:bb:f9:9e:3b:36:d5:76:49:dd:52:aa:4a:9d:
                    38:6b:90:e0:26:e1:f0:b8:be:c8:f5:5e:6d:c9:c7:
                    d0:52:01:04:d7:ae:89:c0:fb:e3:11:e8:c7:95:83:
                    8c:b6:68:4a:f9:e8:fc:ca:e9:2d:5a:65:01:4c:08:
                    15:5a:b2:82:1e:5c:4a:c4:f7:19:b8:6d:d3:8a:0f:
                    ff:2c:76:75:11:74:b9:db:a2:0c:34:c6:63:de:8a:
                    c3:d3:5c:4b:d8:27:d8:b4:f8:67:0e:51:7d:e7:e7:
                    88:90:b4:70:4d:d0:c7:38:15:11:af:e5:99:5d:f5:
                    f5:bb:04:97:7a:39:b9:13:07:b6:cc:0e:78:81:d8:
                    58:3a:34:d6:a5:63:0c:35:49:62:aa:e8:f2:98:5d:
                    d1:a6:e3:87:ba:4e:a8:8a:37:05:44:2d:b6:fb:0d:
                    f2:87:81:7b:40:d0:9b:79:cb:f2:fa:f7:6b:00:cf:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B0:71:1F:60:94:BE:63:ED:29:BB:D6:03:EC:2C:14:83:13:7B:09:15
            X509v3 Authority Key Identifier: 
                keyid:8D:6F:F7:2D:9B:BC:5E:EF:67:36:0B:C7:17:C5:4B:2B:A1:B0:B3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jW_3LZu8Xu9nNgvHF8VLK6Gws-Q.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/eed8dd-d596-4e48-8356-4e67d713c79c/1/sHEfYJS-Y-0pu9YD7CwUgxN7CRU.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/eed8dd-d596-4e48-8356-4e67d713c79c/1/jW_3LZu8Xu9nNgvHF8VLK6Gws-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:d2:36:e9:54:06:be:4f:8f:55:ed:c3:f4:b9:4e:55:d2:46:
         f7:5c:d4:c2:1a:55:4b:4e:5c:16:f0:74:ee:22:db:60:15:fc:
         c9:74:84:38:88:09:f6:4a:2a:27:ec:42:77:49:2b:00:43:09:
         55:7a:54:81:64:f3:a2:9b:21:0d:9d:7c:f4:3a:50:71:c9:55:
         2b:d0:30:8d:50:58:1a:7d:f4:b4:67:b8:8f:f9:3c:a1:51:1c:
         9e:bb:d7:55:19:1b:be:11:22:29:c6:e5:5f:43:fe:a1:5d:06:
         04:29:b7:99:76:a3:31:18:00:ba:1a:74:41:db:2d:47:9e:fd:
         33:ef:01:48:57:5d:f6:51:e0:8b:48:ba:de:ee:78:da:5d:87:
         f2:a3:dd:43:79:5c:94:d2:7c:6e:1c:cd:bb:c3:81:8b:64:93:
         1b:2d:b3:80:6b:85:2a:a6:06:1c:7c:f3:f5:ea:66:53:a0:cd:
         48:03:3f:ca:39:bb:77:04:49:dd:18:92:f5:cf:56:30:62:dc:
         a8:0f:e2:12:de:5d:31:50:2e:87:26:2c:7c:94:5f:85:d4:32:
         57:01:59:53:ae:1d:da:7c:ec:be:44:c3:8a:f7:61:5b:0e:01:
         9c:ad:25:f5:74:e9:f0:f5:2f:61:ad:ee:7c:a8:70:26:ce:d7:
         6d:9e:17:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 13:36:55 2022 by rpki-client.