Route Origin Authorization

$ cd rpki.ripe.net/repository/DEFAULT/d1/e2346f-4831-45eb-a1fd-a89fbc41a86c/1/

$ rpki-client -vvf Hhia9JHO0K2Tt3mxGO855giqE7I.roa
File:                     Hhia9JHO0K2Tt3mxGO855giqE7I.roa (download)
Hash identifier:          rVJenXNVMP9PiW5OkS8Ik4r4pPg0dfXhWW/YKeP70b8=
Subject key identifier:   1E:18:9A:F4:91:CE:D0:AD:93:B7:79:B1:18:EF:39:E6:08:AA:13:B2
Certificate issuer:       /CN=a463eb824231750be9a9f1d870400ce9e098bf93
Certificate serial:       0134E85A
Authority key identifier: A4:63:EB:82:42:31:75:0B:E9:A9:F1:D8:70:40:0C:E9:E0:98:BF:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pGPrgkIxdQvpqfHYcEAM6eCYv5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/e2346f-4831-45eb-a1fd-a89fbc41a86c/1/Hhia9JHO0K2Tt3mxGO855giqE7I.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 185.201.253.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20244570 (0x134e85a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a463eb824231750be9a9f1d870400ce9e098bf93
        Validity
            Not Before: Jan  1 05:06:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1e189af491ced0ad93b779b118ef39e608aa13b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:66:1b:03:45:87:09:f5:c0:40:26:ba:92:fa:
                    ce:c1:5d:d0:28:27:62:02:2c:b5:ba:7f:67:c9:e1:
                    93:15:f3:1d:cc:9e:11:06:ee:b8:b6:20:c4:af:a0:
                    18:7b:6c:08:28:ad:f4:c0:38:ba:0c:16:2f:32:2d:
                    94:41:16:4b:78:fb:db:2d:d7:d8:b7:d1:50:8c:b8:
                    eb:d1:7c:65:1d:aa:a3:c2:ce:b7:6c:ff:08:32:49:
                    9c:be:cb:ad:a9:73:ba:a3:68:b5:09:8c:7f:e4:94:
                    80:92:dc:a8:49:1e:82:82:b2:d9:52:06:d3:a4:01:
                    33:fb:a3:8e:d1:37:94:65:53:ec:cf:28:c6:ec:69:
                    2d:be:a3:fc:b0:48:f7:ff:b3:fe:56:e4:51:44:f3:
                    54:2b:8b:98:60:66:6d:25:b1:1e:cd:61:13:18:4d:
                    a7:7b:ee:3a:8b:4c:28:cd:4d:5d:33:55:b8:27:05:
                    b7:f1:b0:7b:b8:bd:ee:ce:a1:5f:42:ab:ab:19:53:
                    0e:72:8f:6a:49:4d:47:b6:8f:85:30:27:3c:6f:06:
                    7f:47:5e:12:7c:33:d8:dc:b3:be:a3:64:8d:d9:fc:
                    58:13:04:9b:34:9a:d5:65:7f:42:b6:a9:8d:a2:f0:
                    f5:d7:57:56:89:ff:70:4e:e7:f3:8c:3c:3b:17:ca:
                    82:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1E:18:9A:F4:91:CE:D0:AD:93:B7:79:B1:18:EF:39:E6:08:AA:13:B2
            X509v3 Authority Key Identifier: 
                keyid:A4:63:EB:82:42:31:75:0B:E9:A9:F1:D8:70:40:0C:E9:E0:98:BF:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pGPrgkIxdQvpqfHYcEAM6eCYv5M.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e2346f-4831-45eb-a1fd-a89fbc41a86c/1/Hhia9JHO0K2Tt3mxGO855giqE7I.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e2346f-4831-45eb-a1fd-a89fbc41a86c/1/pGPrgkIxdQvpqfHYcEAM6eCYv5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:aa:a0:b2:98:42:89:b3:1e:34:3a:97:fd:b7:d8:8a:dc:4f:
         14:50:6a:67:0c:af:f9:0f:fd:cd:7e:0a:d0:3d:37:47:e1:db:
         1f:60:94:08:2d:6f:36:dc:e1:86:3b:c6:e0:8d:eb:67:ce:0d:
         99:ed:01:55:01:11:a1:be:c0:30:c7:b6:1f:7e:52:96:2c:fb:
         7a:1e:a0:e6:4e:1c:0b:fb:16:b1:8c:87:b1:d9:bb:90:d3:30:
         ef:9a:9a:11:bd:a1:90:ad:f3:0c:76:34:c4:9d:f3:94:ff:8c:
         8b:ca:f2:90:61:75:07:c2:56:a9:dc:dc:00:3a:72:26:f2:04:
         c7:af:b5:51:82:aa:07:2c:6e:5f:6a:bc:6b:15:8b:f1:4c:57:
         0c:5e:0e:90:5d:7f:ef:88:94:3e:ed:0b:b7:a2:7e:44:88:15:
         fb:1b:ed:71:fa:a3:57:64:00:88:fa:9b:e5:37:94:5b:0a:34:
         4f:a0:f9:6b:2d:fd:80:63:3e:99:fa:8a:5e:aa:38:ec:5c:0b:
         46:51:3b:a1:a1:3e:46:b8:33:aa:b7:3d:04:72:a7:db:85:b0:
         d1:08:12:da:50:fa:9f:6b:e8:e1:e1:c7:e4:aa:d1:76:29:6b:
         95:bf:ee:a5:66:2f:df:6b:65:6b:ad:b9:2e:e5:ff:ba:8a:af:
         f7:fe:31:3c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEATToWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDYzZWI4MjQyMzE3NTBiZTlhOWYxZDg3MDQwMGNlOWUwOThiZjkzMB4XDTIyMDEw
MTA1MDYyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWUxODlhZjQ5MWNl
ZDBhZDkzYjc3OWIxMThlZjM5ZTYwOGFhMTNiMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMhmGwNFhwn1wEAmupL6zsFd0CgnYgIstbp/Z8nhkxXzHcye
EQbuuLYgxK+gGHtsCCit9MA4ugwWLzItlEEWS3j72y3X2LfRUIy469F8ZR2qo8LO
t2z/CDJJnL7LralzuqNotQmMf+SUgJLcqEkegoKy2VIG06QBM/ujjtE3lGVT7M8o
xuxpLb6j/LBI9/+z/lbkUUTzVCuLmGBmbSWxHs1hExhNp3vuOotMKM1NXTNVuCcF
t/Gwe7i97s6hX0KrqxlTDnKPaklNR7aPhTAnPG8Gf0deEnwz2NyzvqNkjdn8WBME
mzSa1WV/QrapjaLw9ddXVon/cE7n84w8OxfKgh8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQeGJr0kc7QrZO3ebEY7znmCKoTsjAfBgNVHSMEGDAWgBSkY+uCQjF1C+mp
8dhwQAzp4Ji/kzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BHUHJna0l4ZFF2cHFmSFljRUFNNmVDWXY1TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvZTIzNDZmLTQ4MzEtNDVlYi1hMWZkLWE4OWZiYzQxYTg2Yy8x
L0hoaWE5SkhPMEsyVHQzbXhHTzg1NWdpcUU3SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEv
ZTIzNDZmLTQ4MzEtNDVlYi1hMWZkLWE4OWZiYzQxYTg2Yy8xL3BHUHJna0l4ZFF2
cHFmSFljRUFNNmVDWXY1TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnJ/TANBgkqhkiG9w0BAQsFAAOC
AQEAC6qgsphCibMeNDqX/bfYitxPFFBqZwyv+Q/9zX4K0D03R+HbH2CUCC1vNtzh
hjvG4I3rZ84Nme0BVQERob7AMMe2H35Sliz7eh6g5k4cC/sWsYyHsdm7kNMw75qa
Eb2hkK3zDHY0xJ3zlP+Mi8rykGF1B8JWqdzcADpyJvIEx6+1UYKqByxuX2q8axWL
8UxXDF4OkF1/74iUPu0Lt6J+RIgV+xvtcfqjV2QAiPqb5TeUWwo0T6D5ay39gGM+
mfqKXqo47FwLRlE7oaE+Rrgzqrc9BHKn24Ww0QgS2lD6n2vo4eHH5KrRdilrlb/u
pWYv32tla625LuX/uoqv9/4xPA==
-----END CERTIFICATE-----
Generated at Fri Dec 2 13:03:19 2022 by rpki-client.