Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/veWDZFkcpSL9MNr7ZEC_Xc7YwPg.roa
File:                     veWDZFkcpSL9MNr7ZEC_Xc7YwPg.roa (download)
Hash identifier:          dcYMVddMPScC9dE+nhzjmy9tlQjzQq1Dn1LGYm0CGcs=
Subject key identifier:   BD:E5:83:64:59:1C:A5:22:FD:30:DA:FB:64:40:BF:5D:CE:D8:C0:F8
Certificate issuer:       /CN=7ffa51abea3e1f4223f540ef0d85b8dd99ee8bf6
Certificate serial:       BAE7F4
Authority key identifier: 7F:FA:51:AB:EA:3E:1F:42:23:F5:40:EF:0D:85:B8:DD:99:EE:8B:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_pRq-o-H0Ij9UDvDYW43Znui_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/veWDZFkcpSL9MNr7ZEC_Xc7YwPg.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 217.114.33.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12249076 (0xbae7f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ffa51abea3e1f4223f540ef0d85b8dd99ee8bf6
        Validity
            Not Before: Jan  1 06:53:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bde58364591ca522fd30dafb6440bf5dced8c0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:39:dd:2a:8e:e9:04:2d:69:21:ad:09:18:
                    71:ca:3d:42:25:70:99:6b:e2:36:08:b4:07:d7:a4:
                    56:f6:60:b8:d3:61:5a:5d:26:6e:8e:c6:99:a3:c3:
                    8a:5b:91:bc:fd:85:6a:f2:ab:0d:3e:49:ac:7e:5e:
                    0f:72:bf:fd:03:67:a0:3c:c2:8f:8b:59:3e:a1:b8:
                    3d:21:3c:03:d0:3b:1b:6d:6b:11:72:9c:3e:08:86:
                    38:15:1d:4a:29:96:30:05:95:4e:82:10:ee:d5:19:
                    ca:d7:11:36:8b:cf:10:1e:ea:0e:33:0d:35:f8:6b:
                    1d:5d:29:3c:50:59:79:2c:92:be:93:af:02:bf:cb:
                    a6:dc:88:33:0e:be:25:37:46:6a:4d:2d:e7:55:da:
                    aa:61:58:a6:dc:c4:35:81:dc:2d:90:5a:95:09:3f:
                    66:f6:21:a9:7d:dd:e9:97:00:e3:a2:51:1d:73:d5:
                    58:44:72:2a:40:5f:61:79:9c:8c:ea:46:ee:01:06:
                    63:27:cd:ca:b8:04:f7:66:be:45:21:98:6f:2b:57:
                    a0:2e:c3:d4:e6:47:d5:c1:3a:aa:d7:b2:ab:c6:55:
                    6f:44:77:ea:e3:4e:37:54:9c:0b:0d:43:d0:2f:10:
                    39:c1:25:9e:ca:77:37:3f:39:98:39:63:4a:56:f5:
                    df:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BD:E5:83:64:59:1C:A5:22:FD:30:DA:FB:64:40:BF:5D:CE:D8:C0:F8
            X509v3 Authority Key Identifier: 
                keyid:7F:FA:51:AB:EA:3E:1F:42:23:F5:40:EF:0D:85:B8:DD:99:EE:8B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_pRq-o-H0Ij9UDvDYW43Znui_Y.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/veWDZFkcpSL9MNr7ZEC_Xc7YwPg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/f_pRq-o-H0Ij9UDvDYW43Znui_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.114.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:2e:e6:e2:70:dd:18:b2:61:2f:f7:d0:43:4f:ec:a0:4c:91:
         d4:e8:0b:e1:ff:34:11:3a:a6:c8:6f:e4:e0:52:cb:fb:61:9e:
         b6:b4:00:20:b7:a6:8e:c4:dc:4f:55:0b:79:12:f4:c5:ce:59:
         de:43:bd:96:f2:55:5d:ae:6b:d3:30:96:c0:4e:ac:2a:10:09:
         5f:80:89:8c:b3:cb:ca:4d:1f:65:b0:2f:15:c2:50:4e:0c:9b:
         ca:0b:63:e7:d2:e8:aa:a4:ac:54:53:b1:90:c0:5f:42:0f:6d:
         7d:cc:32:a3:39:b7:1c:5f:2b:a5:1d:72:85:33:f8:15:61:a6:
         d3:53:3c:5c:07:e7:f1:14:56:d5:b6:8e:43:f9:47:00:9e:0c:
         76:e8:8a:85:2a:bf:59:0f:8e:08:6e:5b:ab:58:50:7d:33:6e:
         cd:61:59:23:b6:e9:a8:2d:68:3b:b2:25:93:00:97:30:14:0f:
         a3:80:bb:6b:5c:98:9a:4c:59:da:a0:66:9a:d5:d1:9e:8b:b9:
         69:86:1f:ae:ac:24:4e:19:de:2e:ee:45:6c:54:aa:08:b3:3f:
         7f:8a:76:23:50:8f:88:50:32:6b:da:73:fb:eb:9a:d3:f4:c9:
         e9:6f:88:c2:24:49:18:52:bd:b5:7d:23:14:0f:aa:cb:f6:c3:
         11:f6:65:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 20:09:29 2022 by rpki-client.