Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/IyUoQ_svjjntJ1J6-_J6WTPwXyU.roa
File:                     IyUoQ_svjjntJ1J6-_J6WTPwXyU.roa (download)
Hash identifier:          JGg8xt6/OClKk019oHrmNnk3SYmfOypvCnHFlpTvCAg=
Subject key identifier:   23:25:28:43:FB:2F:8E:39:ED:27:52:7A:FB:F2:7A:59:33:F0:5F:25
Certificate issuer:       /CN=b760d60d705eeedf3f54c02fd11e7c18de904d2f
Certificate serial:       01064721
Authority key identifier: B7:60:D6:0D:70:5E:EE:DF:3F:54:C0:2F:D1:1E:7C:18:DE:90:4D:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t2DWDXBe7t8_VMAv0R58GN6QTS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/IyUoQ_svjjntJ1J6-_J6WTPwXyU.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 146.19.159.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17188641 (0x1064721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b760d60d705eeedf3f54c02fd11e7c18de904d2f
        Validity
            Not Before: Mar  7 17:31:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=23252843fb2f8e39ed27527afbf27a5933f05f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:23:8c:d2:74:05:ef:10:c7:19:3b:bd:7c:
                    56:71:97:a4:a1:d7:9e:ad:ac:83:e2:e3:f3:65:6e:
                    74:75:ce:88:cb:69:86:bc:7a:54:45:9c:ee:da:54:
                    39:12:23:97:2d:09:bc:49:cf:02:68:87:0d:44:02:
                    68:00:8a:66:77:ef:69:5c:3a:ca:e5:5e:30:f5:0a:
                    b7:ec:6e:4a:f5:7e:ae:f5:54:62:71:8f:32:e9:66:
                    6a:fd:72:16:9e:d1:91:8b:a2:aa:7b:79:f8:9f:71:
                    06:57:31:f5:8d:bd:28:4c:83:5a:d4:de:17:c1:d4:
                    19:cd:54:43:17:29:15:97:03:34:5f:be:2c:71:c3:
                    92:d8:54:d5:c5:0f:46:9a:0f:cf:cb:42:06:58:9e:
                    6f:3c:2d:56:95:75:07:74:74:df:c1:1a:fd:06:24:
                    9b:7b:27:af:11:37:bf:05:05:b3:f6:da:f7:32:8e:
                    20:b2:ca:e6:a6:42:d1:eb:9e:1c:5b:86:e9:55:d9:
                    87:60:53:bb:64:8c:62:46:1b:6b:1e:13:49:93:7a:
                    b8:10:b0:2e:87:0f:59:7d:aa:9d:03:2f:62:7f:30:
                    74:e5:3d:57:d7:2c:4d:2d:bb:1f:a1:fc:be:37:c0:
                    3b:d3:c4:da:fb:68:12:66:20:79:6d:b4:aa:bd:6b:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                23:25:28:43:FB:2F:8E:39:ED:27:52:7A:FB:F2:7A:59:33:F0:5F:25
            X509v3 Authority Key Identifier: 
                keyid:B7:60:D6:0D:70:5E:EE:DF:3F:54:C0:2F:D1:1E:7C:18:DE:90:4D:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DWDXBe7t8_VMAv0R58GN6QTS8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/IyUoQ_svjjntJ1J6-_J6WTPwXyU.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/t2DWDXBe7t8_VMAv0R58GN6QTS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:b5:d4:70:92:3c:49:f8:a7:10:f8:42:c9:b7:af:3b:07:29:
         e0:06:31:e8:f1:9c:08:58:80:71:7e:09:2c:56:be:13:2b:34:
         5e:3f:40:ca:a1:5e:3a:54:1a:2d:c9:f1:17:e9:fe:14:43:b4:
         48:87:62:50:fd:4e:1e:1c:54:71:3d:d7:d0:f6:42:a0:1e:4f:
         5c:6b:d4:80:e0:7f:06:52:6e:49:c3:c0:a2:72:46:08:1a:54:
         31:89:cf:b7:3d:16:3d:b9:6f:e8:3d:f1:1e:5b:62:43:fe:20:
         31:f3:b4:48:b4:49:7d:28:47:ff:08:7d:ed:42:82:e9:77:56:
         82:06:bf:8b:13:a9:c5:46:f8:c5:8d:41:db:d6:7e:d1:c2:0d:
         86:02:ee:9a:b9:5f:9a:f2:24:3a:54:45:d9:61:8d:09:1d:1c:
         02:d2:fd:bf:60:e9:04:e8:b7:7d:c8:a3:fb:26:35:e6:69:b4:
         0e:01:6f:a9:26:f3:4e:07:36:e7:c2:f5:e9:11:e4:2f:d9:0b:
         ed:e1:a2:76:7d:36:75:09:a4:95:89:e7:48:1d:2d:a8:7c:69:
         c3:b0:1a:93:72:3b:e6:6b:60:f5:61:88:f4:bb:5c:29:27:61:
         96:6a:b5:39:86:7c:41:54:e2:c7:c4:be:c1:72:55:0f:5b:80:
         7b:60:29:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 18:48:41 2022 by rpki-client.