Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/nCiam-dFbKPgCk-dkiKUNQ-KVEM.roa
File:                     nCiam-dFbKPgCk-dkiKUNQ-KVEM.roa (download)
Hash identifier:          fTl2I8usZENmnlbU9ir0myM62X8nCae1dL1OCFW08S4=
Subject key identifier:   9C:28:9A:9B:E7:45:6C:A3:E0:0A:4F:9D:92:22:94:35:0F:8A:54:43
Certificate issuer:       /CN=6e8e9da43dfc793d4d5488097b4001ba40941904
Certificate serial:       01104659
Authority key identifier: 6E:8E:9D:A4:3D:FC:79:3D:4D:54:88:09:7B:40:01:BA:40:94:19:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bo6dpD38eT1NVIgJe0ABukCUGQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/nCiam-dFbKPgCk-dkiKUNQ-KVEM.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 46.226.124.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17843801 (0x1104659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e8e9da43dfc793d4d5488097b4001ba40941904
        Validity
            Not Before: Jan  1 01:54:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9c289a9be7456ca3e00a4f9d922294350f8a5443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:e8:cc:37:2e:7b:17:d9:20:ca:d6:ee:51:
                    77:50:c2:20:e9:41:e2:af:79:03:12:bb:30:6c:79:
                    63:b5:82:13:88:8b:c9:02:66:c5:ab:c3:91:30:58:
                    0c:32:d3:38:b8:fc:a6:19:31:4b:52:56:57:ec:0e:
                    b3:35:a3:37:0f:7f:1f:48:01:43:66:55:12:df:24:
                    50:74:73:da:95:86:20:7a:34:47:dc:44:61:74:6b:
                    3d:27:20:6a:8c:9f:f9:66:06:e2:0e:ab:52:28:54:
                    da:5d:bf:03:1a:1f:4f:59:22:17:ce:0a:61:e4:9b:
                    9d:28:33:f1:4a:be:06:b0:39:2d:5a:26:34:1c:7a:
                    fc:e8:57:bb:66:e4:7d:0a:00:46:e8:34:8b:db:e6:
                    25:f1:aa:76:bf:98:95:86:65:28:fb:be:fa:78:6f:
                    5e:9d:39:52:72:40:9a:7f:d2:b1:fb:80:4c:03:9e:
                    92:22:f4:44:9c:31:6f:85:9e:1d:7f:2c:7a:8d:c6:
                    3e:53:fb:c4:46:98:b3:92:0e:dc:ff:7d:7c:13:a6:
                    1b:e7:69:40:f6:2c:14:7a:8e:6d:2c:2a:48:b8:01:
                    e7:cb:88:ce:c6:df:fe:28:19:a2:83:b5:30:70:d8:
                    c9:af:ce:63:00:1e:da:9f:00:36:92:cf:64:11:ca:
                    e3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9C:28:9A:9B:E7:45:6C:A3:E0:0A:4F:9D:92:22:94:35:0F:8A:54:43
            X509v3 Authority Key Identifier: 
                keyid:6E:8E:9D:A4:3D:FC:79:3D:4D:54:88:09:7B:40:01:BA:40:94:19:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bo6dpD38eT1NVIgJe0ABukCUGQQ.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/nCiam-dFbKPgCk-dkiKUNQ-KVEM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/bo6dpD38eT1NVIgJe0ABukCUGQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.226.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:64:55:16:b7:09:56:9a:f6:8a:2a:aa:06:b1:fe:f7:e2:6e:
         62:27:ab:04:7d:f4:1b:42:da:e9:e0:b9:af:66:27:8b:d9:14:
         56:62:c2:4f:eb:1d:a7:47:9c:9a:ca:3a:af:82:f8:a7:39:58:
         7a:8e:2d:ec:2c:8d:09:f1:07:c0:5b:05:71:12:55:1f:66:41:
         5c:66:c5:04:60:4e:ea:eb:cb:27:ce:a2:6c:9d:85:04:25:72:
         a9:91:b2:f3:c0:62:29:02:ba:35:2d:71:4b:36:2c:60:4e:12:
         ea:3f:56:8e:35:e0:57:29:69:d3:68:e7:fd:cf:82:77:c7:53:
         1e:46:04:a1:fe:a5:da:bd:c6:95:68:9c:fe:bb:1d:ed:f8:54:
         f4:0e:db:29:69:16:33:1e:21:2b:c7:1e:5c:8d:c6:76:a6:a4:
         ef:b6:07:21:f4:03:ee:ed:53:23:e6:b0:9f:f2:aa:da:6a:10:
         06:80:38:11:cc:34:7d:f9:51:91:96:94:cd:cd:31:cd:7c:a7:
         04:e1:03:45:c2:77:ba:fe:c2:4b:02:00:7e:aa:74:bd:0a:cf:
         2c:99:a4:74:52:93:d8:7c:4a:86:75:76:07:fc:6d:ae:11:8e:
         71:cb:9d:cd:05:e4:37:f4:38:4a:87:4b:bb:74:c1:a6:27:29:
         d9:6e:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 08:05:05 2022 by rpki-client.