Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/5eCeEMEiUWbVhwhcmHQ3mja-lew.roa
File:                     5eCeEMEiUWbVhwhcmHQ3mja-lew.roa (download)
Hash identifier:          pTTNDFBJf79im2k0xCibJWl8rcM4b3C+1etZ7UVw6Ls=
Subject key identifier:   E5:E0:9E:10:C1:22:51:66:D5:87:08:5C:98:74:37:9A:36:BE:95:EC
Certificate issuer:       /CN=91242d9769b759349c8018c908736e54dffc0cb5
Certificate serial:       0133D46A
Authority key identifier: 91:24:2D:97:69:B7:59:34:9C:80:18:C9:08:73:6E:54:DF:FC:0C:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kSQtl2m3WTScgBjJCHNuVN_8DLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/5eCeEMEiUWbVhwhcmHQ3mja-lew.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 185.249.55.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20173930 (0x133d46a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91242d9769b759349c8018c908736e54dffc0cb5
        Validity
            Not Before: Jan  1 11:53:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e5e09e10c1225166d587085c9874379a36be95ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:2f:26:14:e8:1e:e8:fa:5c:36:dc:2e:cd:
                    c5:e2:27:36:44:28:0d:20:97:f8:28:93:13:aa:98:
                    e2:96:d9:47:cb:51:e6:c1:4c:69:d0:69:8a:5a:f7:
                    ca:0d:c0:76:02:0a:a0:cb:60:7c:a6:8e:4b:92:a4:
                    0a:1a:36:87:fd:d9:4d:c9:77:5d:94:4f:b4:e3:84:
                    ae:31:20:ba:49:55:1e:62:da:c2:5d:8d:a1:af:cc:
                    22:5d:26:6d:15:90:22:b4:98:18:57:8c:30:1e:5e:
                    db:ee:a6:e0:02:a5:03:e9:70:19:22:65:a8:33:42:
                    6c:a0:ac:2f:36:07:0a:e8:45:33:28:6f:a0:48:a7:
                    a0:8c:49:01:58:81:99:50:8b:98:d2:a4:aa:23:06:
                    50:b8:ef:24:13:03:5a:97:77:40:47:6d:44:86:59:
                    45:d5:51:83:32:8c:63:3d:36:11:ce:ce:9b:0e:72:
                    d7:e3:34:6c:66:ab:0b:83:4e:9b:a8:c2:e3:d5:16:
                    ba:34:86:ff:61:93:3a:ac:90:ca:49:85:b0:b3:62:
                    9b:11:1a:89:48:08:5c:a4:8d:66:b4:48:9b:ad:23:
                    2a:26:ab:45:a1:da:02:dd:e5:15:00:0f:dd:0f:07:
                    b0:84:35:5c:0d:4b:58:ce:9f:d0:2e:e6:7e:f6:10:
                    d5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E5:E0:9E:10:C1:22:51:66:D5:87:08:5C:98:74:37:9A:36:BE:95:EC
            X509v3 Authority Key Identifier: 
                keyid:91:24:2D:97:69:B7:59:34:9C:80:18:C9:08:73:6E:54:DF:FC:0C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSQtl2m3WTScgBjJCHNuVN_8DLU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/5eCeEMEiUWbVhwhcmHQ3mja-lew.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/kSQtl2m3WTScgBjJCHNuVN_8DLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:d5:b5:d8:f9:a7:67:46:fc:23:82:6e:25:b1:55:d2:9f:ba:
         5d:50:01:20:26:66:86:54:84:50:65:d4:86:cd:b2:82:49:db:
         f9:b7:39:78:91:6c:c6:a0:91:80:57:1b:cb:34:7f:20:13:a9:
         49:4b:24:2c:4a:e5:f4:9d:a5:cd:ce:73:8f:4a:c0:25:dc:22:
         46:d8:98:b0:59:30:c1:9b:5f:c8:6e:c3:23:ed:d2:dc:5d:78:
         37:92:25:3c:96:3d:4d:4c:c4:5f:2c:fb:6e:2d:b7:22:f2:55:
         38:86:f7:77:ee:9e:40:dd:85:64:5b:b5:d4:e8:f3:8d:53:45:
         74:9c:bf:eb:94:5f:77:75:c4:fc:5e:6f:dd:11:f7:64:27:4f:
         fa:81:60:74:70:fd:e1:5b:dd:6b:e6:2e:cc:67:b2:ea:39:74:
         91:60:c8:e2:af:84:03:d2:46:5d:b4:f5:4d:32:88:75:e5:01:
         a0:03:a8:3f:98:f5:24:b2:f6:18:29:86:59:76:c5:68:3a:ce:
         61:c5:ab:1e:45:17:f4:f6:db:95:c8:4d:5b:b6:8f:a1:bc:c4:
         57:28:0c:09:68:2b:63:25:fe:eb:2f:4f:bd:a8:92:01:a1:cf:
         87:77:cb:3f:bd:78:0c:a3:20:01:00:a8:cf:d6:9d:45:eb:3f:
         2e:af:65:83
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEATPUajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MTI0MmQ5NzY5Yjc1OTM0OWM4MDE4YzkwODczNmU1NGRmZmMwY2I1MB4XDTIyMDEw
MTExNTM0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTVlMDllMTBjMTIy
NTE2NmQ1ODcwODVjOTg3NDM3OWEzNmJlOTVlYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK//LyYU6B7o+lw23C7NxeInNkQoDSCX+CiTE6qY4pbZR8tR
5sFMadBpilr3yg3AdgIKoMtgfKaOS5KkCho2h/3ZTcl3XZRPtOOErjEguklVHmLa
wl2Noa/MIl0mbRWQIrSYGFeMMB5e2+6m4AKlA+lwGSJlqDNCbKCsLzYHCuhFMyhv
oEinoIxJAViBmVCLmNKkqiMGULjvJBMDWpd3QEdtRIZZRdVRgzKMYz02Ec7Omw5y
1+M0bGarC4NOm6jC49UWujSG/2GTOqyQykmFsLNimxEaiUgIXKSNZrRIm60jKiar
RaHaAt3lFQAP3Q8HsIQ1XA1LWM6f0C7mfvYQ1ZUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTl4J4QwSJRZtWHCFyYdDeaNr6V7DAfBgNVHSMEGDAWgBSRJC2XabdZNJyA
GMkIc25U3/wMtTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tTUXRsMm0zV1RTY2dCakpDSE51Vk5fOERMVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDkvMWMzYjIwLWM5NjYtNDg0MC04YmUyLTJlMTBhMWU3MTk4ZS8x
LzVlQ2VFTUVpVVdiVmh3aGNtSFEzbWphLWxldy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkv
MWMzYjIwLWM5NjYtNDg0MC04YmUyLTJlMTBhMWU3MTk4ZS8xL2tTUXRsMm0zV1RT
Y2dCakpDSE51Vk5fOERMVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn5NzANBgkqhkiG9w0BAQsFAAOC
AQEAMdW12PmnZ0b8I4JuJbFV0p+6XVABICZmhlSEUGXUhs2ygknb+bc5eJFsxqCR
gFcbyzR/IBOpSUskLErl9J2lzc5zj0rAJdwiRtiYsFkwwZtfyG7DI+3S3F14N5Il
PJY9TUzEXyz7bi23IvJVOIb3d+6eQN2FZFu11OjzjVNFdJy/65Rfd3XE/F5v3RH3
ZCdP+oFgdHD94Vvda+YuzGey6jl0kWDI4q+EA9JGXbT1TTKIdeUBoAOoP5j1JLL2
GCmGWXbFaDrOYcWrHkUX9PbblchNW7aPobzEVygMCWgrYyX+6y9PvaiSAaHPh3fL
P714DKMgAQCoz9adRes/Lq9lgw==
-----END CERTIFICATE-----
Generated at Thu Dec 8 10:36:03 2022 by rpki-client.