Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/wBV_WYoZrJTCKo-eIcZp6Z_0uVs.roa
File:                     wBV_WYoZrJTCKo-eIcZp6Z_0uVs.roa (download)
Hash identifier:          PLyuEo+q4wFm83Bm1JR0u/9oszKOzZ1SjQDeax1xUqU=
Subject key identifier:   C0:15:7F:59:8A:19:AC:94:C2:2A:8F:9E:21:C6:69:E9:9F:F4:B9:5B
Certificate issuer:       /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial:       08359F25
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/wBV_WYoZrJTCKo-eIcZp6Z_0uVs.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 193.36.227.0/24 maxlen: 24
    2: 193.36.179.0/24 maxlen: 24
    3: 193.36.185.0/24 maxlen: 24
    4: 193.36.187.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137731877 (0x8359f25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
        Validity
            Not Before: Jun 29 08:41:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0157f598a19ac94c22a8f9e21c669e99ff4b95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:56:e3:3a:5b:7e:3a:13:ec:26:30:de:bf:
                    72:5b:3e:05:ad:60:3c:1a:45:58:6a:67:6f:4f:c4:
                    54:dc:c8:8b:f2:2f:91:58:9b:4b:0b:a9:5a:54:36:
                    f1:dc:95:19:2c:17:0e:60:18:72:77:2d:66:eb:39:
                    cf:d1:d3:31:91:18:8e:6b:bd:fc:b7:58:3b:3a:48:
                    8a:50:49:ba:e6:da:16:46:21:9d:d7:3e:e4:a8:73:
                    8b:b7:6c:9f:ac:42:03:6f:9f:29:9e:29:4d:0a:7e:
                    4c:47:7a:69:09:d3:de:61:4a:cc:f8:d2:65:b0:34:
                    d1:05:0a:0e:fa:01:58:f3:4e:a1:ae:66:3e:d5:38:
                    64:a7:a4:45:5d:66:f1:b0:bf:e7:a6:92:35:52:ae:
                    6c:7e:c7:d6:13:dd:31:d3:fd:5a:ed:76:a0:20:08:
                    d5:c4:ae:85:8e:e1:2d:c8:70:52:2c:74:60:bb:ed:
                    76:0c:c0:2f:89:a8:9a:b9:9e:6a:a6:c2:a4:0a:6a:
                    5a:86:30:97:45:10:82:cf:54:f9:4e:e1:90:e0:d5:
                    15:bc:c3:bb:a1:30:80:48:a9:9d:5f:6d:1e:32:75:
                    bc:a2:61:af:de:da:a8:c8:89:85:92:02:e5:75:f4:
                    ae:91:99:e6:15:23:0a:75:e5:19:b5:d5:dd:28:ed:
                    05:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C0:15:7F:59:8A:19:AC:94:C2:2A:8F:9E:21:C6:69:E9:9F:F4:B9:5B
            X509v3 Authority Key Identifier: 
                keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/wBV_WYoZrJTCKo-eIcZp6Z_0uVs.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.179.0/24
                  193.36.185.0/24
                  193.36.187.0/24
                  193.36.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:7b:5d:9f:d7:90:e0:0f:d4:5d:db:40:c6:65:4e:ec:92:4f:
         a0:e3:4f:d6:ad:d8:66:07:91:f7:56:ae:e1:24:cf:02:d3:5e:
         76:c9:1c:50:7e:b0:19:11:33:ba:4e:6b:b3:27:80:fd:b9:cc:
         4c:ab:e3:1c:d0:ee:8d:94:28:79:50:e7:d1:7d:42:c9:b4:a5:
         d2:69:f4:49:a0:5f:2b:a2:ec:84:f2:35:88:e4:e2:2c:50:09:
         d1:63:0c:b1:6b:59:c7:7f:44:84:32:b4:0f:6a:6b:10:74:ab:
         05:e0:ca:e9:9a:d4:00:44:91:69:53:e7:de:b1:c6:5d:f8:8d:
         af:3c:23:5c:44:97:72:c0:b7:14:0c:b4:89:3f:3c:76:d9:37:
         4a:f6:e7:2f:27:f1:75:f9:38:35:4f:6f:bf:80:3c:f0:7d:68:
         05:53:ab:a5:75:54:7b:47:0e:2f:2d:3d:7c:3d:4c:b0:d6:a1:
         b5:b8:dd:0f:8a:e8:bf:89:ec:5f:22:5b:45:37:d6:49:9b:ae:
         8f:94:32:dc:50:9c:47:41:2a:53:a9:25:f9:e2:c4:cc:b5:31:
         07:02:bd:1b:49:bc:94:13:d6:84:f8:c5:73:3d:ff:88:57:12:
         0e:8d:ad:3f:8d:5e:4b:19:30:59:1a:63:66:30:2c:01:29:a3:
         e2:57:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 10:35:54 2022 by rpki-client.