Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/Lm270GLmTkvqC9gmi-wavIp2i-E.roa
File:                     Lm270GLmTkvqC9gmi-wavIp2i-E.roa (download)
Hash identifier:          Jdt0VxlWtCqkkt7DFz9T7mNSDXnIEQthVAadfFiWGug=
Subject key identifier:   2E:6D:BB:D0:62:E6:4E:4B:EA:0B:D8:26:8B:EC:1A:BC:8A:76:8B:E1
Certificate issuer:       /CN=f7ed6e066436e0a0b617474955a8a758e6e35d76
Certificate serial:       7C43D6
Authority key identifier: F7:ED:6E:06:64:36:E0:A0:B6:17:47:49:55:A8:A7:58:E6:E3:5D:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-1uBmQ24KC2F0dJVainWObjXXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/Lm270GLmTkvqC9gmi-wavIp2i-E.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     400040
IP address blocks:
    1: 146.19.92.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8143830 (0x7c43d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ed6e066436e0a0b617474955a8a758e6e35d76
        Validity
            Not Before: Jan  5 10:09:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2e6dbbd062e64e4bea0bd8268bec1abc8a768be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:25:46:b0:46:3c:47:3a:de:59:67:ec:0f:5b:
                    ff:5d:fc:ff:ae:8a:83:af:ef:e0:89:70:5d:7f:e8:
                    ab:09:01:2a:a4:c2:29:f1:e5:d0:b3:ec:46:4d:04:
                    29:21:50:1f:c7:f4:36:34:ac:87:cc:65:b6:45:2a:
                    8b:0a:2f:db:5a:66:68:9d:ca:ce:c8:9f:30:26:bd:
                    e0:0b:00:ce:c1:59:0a:e1:03:71:a6:21:a0:f3:0c:
                    37:ff:2c:58:88:69:14:71:b0:87:dc:3a:b6:0e:a8:
                    7e:37:52:bb:a1:0d:81:9b:f6:7b:6e:16:04:69:9e:
                    3b:d9:48:26:85:ea:44:e6:fe:9d:6f:37:63:e7:e1:
                    3e:76:95:6f:67:18:38:2a:63:27:fb:bd:3d:83:c8:
                    20:20:24:55:5e:5c:58:1c:e3:45:02:bf:b8:c5:aa:
                    19:f1:10:6c:dc:57:42:72:64:56:d9:2e:4a:0c:06:
                    f8:71:5f:67:40:df:40:97:e5:30:13:54:20:8a:a3:
                    df:08:bb:1b:50:68:7c:81:68:87:4a:a4:7e:22:fd:
                    dc:33:31:c0:ce:18:38:43:94:c6:9e:d6:98:9e:9b:
                    71:6e:b0:eb:33:3b:36:74:a8:d5:b4:a0:a0:bb:15:
                    62:3a:96:9d:c0:3e:18:f3:c0:1f:0e:5f:a1:c5:2f:
                    ca:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2E:6D:BB:D0:62:E6:4E:4B:EA:0B:D8:26:8B:EC:1A:BC:8A:76:8B:E1
            X509v3 Authority Key Identifier: 
                keyid:F7:ED:6E:06:64:36:E0:A0:B6:17:47:49:55:A8:A7:58:E6:E3:5D:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-1uBmQ24KC2F0dJVainWObjXXY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/Lm270GLmTkvqC9gmi-wavIp2i-E.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/9-1uBmQ24KC2F0dJVainWObjXXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:d7:b3:df:25:d1:a7:5b:2e:1f:5a:0c:20:a1:e4:58:ca:5b:
         28:8c:b7:1a:bd:3c:81:35:11:81:a0:fd:e2:0a:58:5e:a7:3f:
         6d:19:9e:dc:fe:0a:9e:cc:07:99:e3:88:b5:09:fa:1e:64:d1:
         10:58:70:49:53:79:75:45:d2:ac:82:b9:e2:56:5f:88:09:6b:
         a0:2e:10:c5:19:e8:c8:1f:dd:bd:16:e3:d5:b8:0d:83:dd:f9:
         ae:34:f5:ca:84:59:2c:73:10:60:e4:bd:0f:35:78:41:8b:e1:
         02:d0:e7:5c:ba:b4:25:88:3c:40:78:33:f0:f7:6f:5b:bd:58:
         ff:8e:9a:7e:a8:d8:05:fc:b3:f4:5b:2a:a4:e9:2f:1b:2a:6a:
         ba:2c:d0:af:81:74:04:ad:a6:78:89:79:4f:e7:4e:68:d8:15:
         62:74:f3:80:23:af:d5:c1:cb:a1:f4:2b:3f:0a:8a:bd:a2:65:
         81:b0:50:ad:4d:9a:df:c8:42:a4:50:25:bf:84:91:1a:b5:0c:
         97:46:f6:dd:38:b4:4f:c3:2d:54:27:75:16:17:87:e1:5f:0f:
         95:a5:95:95:8d:d3:7a:2f:cd:b4:84:45:88:0c:fa:9c:13:ae:
         6e:d0:d5:ee:0f:96:80:38:6c:06:7b:b3:3b:fe:de:d6:df:a6:
         43:4a:65:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 01:54:58 2022 by rpki-client.