Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/3wk539RunyK1VicvWrYl-BCG9_s.roa
File:                     3wk539RunyK1VicvWrYl-BCG9_s.roa (download)
Hash identifier:          tLfb2g4R6fLJUP1bPejJ+OF5H7SFpss7mlKg+UGrp0Y=
Subject key identifier:   DF:09:39:DF:D4:6E:9F:22:B5:56:27:2F:5A:B6:25:F8:10:86:F7:FB
Certificate issuer:       /CN=64f3a298f7de920548e8251de76b807387e2d43c
Certificate serial:       01099E75
Authority key identifier: 64:F3:A2:98:F7:DE:92:05:48:E8:25:1D:E7:6B:80:73:87:E2:D4:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPOimPfekgVI6CUd52uAc4fi1Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/3wk539RunyK1VicvWrYl-BCG9_s.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 146.19.186.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17407605 (0x1099e75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f3a298f7de920548e8251de76b807387e2d43c
        Validity
            Not Before: Mar  7 17:31:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=df0939dfd46e9f22b556272f5ab625f81086f7fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:05:ff:85:60:57:36:2c:ab:cf:a5:b2:50:8d:
                    a2:a0:73:78:57:86:bd:d8:b3:01:1f:61:83:78:e4:
                    80:f2:61:2d:31:d3:2b:a6:48:91:96:73:fe:35:be:
                    da:7a:01:e8:ae:4c:d7:5d:26:ea:9c:32:ae:64:1c:
                    7f:53:31:78:e8:36:92:ad:6f:f0:9c:0c:cd:8b:c5:
                    d2:0e:42:a8:e1:09:4b:d1:8b:07:ba:8f:f9:6a:03:
                    e9:29:b4:f4:72:61:74:fa:5d:81:65:82:c0:f1:82:
                    ee:04:07:75:81:32:85:60:41:56:4d:93:d2:b7:7b:
                    a0:ed:af:6b:f4:96:17:1e:03:67:ef:8b:96:0e:a3:
                    59:14:76:1c:16:40:45:8e:f3:68:89:60:2f:c5:0a:
                    93:fa:5a:9d:64:45:f0:22:34:c9:90:4b:f1:bb:cd:
                    ef:b7:61:6a:77:8b:8d:70:2b:8b:86:29:a9:3f:a0:
                    03:33:8a:7b:ab:13:39:52:f9:55:4b:f2:7b:fe:87:
                    e3:c5:f9:f8:a2:bf:45:f8:49:2c:ff:2b:1c:51:72:
                    5b:12:d0:28:47:29:44:bb:c1:4a:72:d2:d8:c1:e4:
                    0c:9c:fb:21:23:2d:91:95:4c:4f:39:7e:9d:c2:7f:
                    d5:21:89:ec:20:64:6b:2a:bd:bc:5c:9e:a3:b4:d7:
                    c7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DF:09:39:DF:D4:6E:9F:22:B5:56:27:2F:5A:B6:25:F8:10:86:F7:FB
            X509v3 Authority Key Identifier: 
                keyid:64:F3:A2:98:F7:DE:92:05:48:E8:25:1D:E7:6B:80:73:87:E2:D4:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPOimPfekgVI6CUd52uAc4fi1Dw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/3wk539RunyK1VicvWrYl-BCG9_s.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/ZPOimPfekgVI6CUd52uAc4fi1Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:2b:bb:f6:0f:fb:cb:58:e5:9d:f7:b5:3c:0c:52:34:f5:40:
         41:b8:0a:1f:16:4e:47:cb:42:05:d1:c6:d7:f9:ca:03:81:10:
         5a:9d:f5:5b:3d:51:75:d9:28:f7:f5:e4:b3:41:22:00:03:59:
         08:17:4b:b9:01:37:f5:fb:d6:61:a7:78:04:ef:cd:f1:4b:cc:
         60:a4:92:d2:ed:54:63:60:d1:f4:f0:b9:4e:43:4d:fc:08:e7:
         9b:b8:56:98:b8:ae:38:d7:39:c6:c8:6d:ac:65:71:13:61:af:
         e0:93:e3:be:25:a5:bb:5d:b6:6e:e0:ce:43:08:c8:3a:52:a6:
         00:3d:7b:8a:67:b4:20:c2:b2:ce:58:10:9e:b9:f3:a0:a5:89:
         dd:78:0e:06:6d:1e:37:61:a3:19:a9:6e:40:ce:31:a4:fd:15:
         90:bc:16:65:c4:c9:5f:ca:f2:f6:57:03:07:85:b8:d7:40:bd:
         1b:f0:22:57:9b:bf:54:7e:d6:fc:27:3b:29:d1:90:3c:3b:4a:
         5b:bf:cd:4b:b0:4f:d3:d4:b3:1d:5a:f7:f7:fc:04:5c:08:fb:
         94:16:a9:ef:87:1a:78:8a:b5:26:94:17:e9:96:90:d4:3f:ab:
         f5:9e:a0:d9:da:e3:1b:62:8d:2c:5f:10:e6:0c:74:2b:60:85:
         7f:82:17:28
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAQmedTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NGYzYTI5OGY3ZGU5MjA1NDhlODI1MWRlNzZiODA3Mzg3ZTJkNDNjMB4XDTIyMDMw
NzE3MzExOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGYwOTM5ZGZkNDZl
OWYyMmI1NTYyNzJmNWFiNjI1ZjgxMDg2ZjdmYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOEF/4VgVzYsq8+lslCNoqBzeFeGvdizAR9hg3jkgPJhLTHT
K6ZIkZZz/jW+2noB6K5M110m6pwyrmQcf1MxeOg2kq1v8JwMzYvF0g5CqOEJS9GL
B7qP+WoD6Sm09HJhdPpdgWWCwPGC7gQHdYEyhWBBVk2T0rd7oO2va/SWFx4DZ++L
lg6jWRR2HBZARY7zaIlgL8UKk/panWRF8CI0yZBL8bvN77dhaneLjXAri4YpqT+g
AzOKe6sTOVL5VUvye/6H48X5+KK/RfhJLP8rHFFyWxLQKEcpRLvBSnLS2MHkDJz7
ISMtkZVMTzl+ncJ/1SGJ7CBkayq9vFyeo7TXx3ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTfCTnf1G6fIrVWJy9atiX4EIb3+zAfBgNVHSMEGDAWgBRk86KY996SBUjo
JR3na4Bzh+LUPDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pQT2ltUGZla2dWSTZDVWQ1MnVBYzRmaTFEdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGQvZjE3NzQ2LWI5Y2UtNGUxNS1iM2JjLWY4Y2MwODUxY2VmZC8x
LzN3azUzOVJ1bnlLMVZpY3ZXcllsLUJDRzlfcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQv
ZjE3NzQ2LWI5Y2UtNGUxNS1iM2JjLWY4Y2MwODUxY2VmZC8xL1pQT2ltUGZla2dW
STZDVWQ1MnVBYzRmaTFEdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJITujANBgkqhkiG9w0BAQsFAAOC
AQEAayu79g/7y1jlnfe1PAxSNPVAQbgKHxZOR8tCBdHG1/nKA4EQWp31Wz1Rddko
9/Xks0EiAANZCBdLuQE39fvWYad4BO/N8UvMYKSS0u1UY2DR9PC5TkNN/Ajnm7hW
mLiuONc5xshtrGVxE2Gv4JPjviWlu122buDOQwjIOlKmAD17ime0IMKyzlgQnrnz
oKWJ3XgOBm0eN2GjGaluQM4xpP0VkLwWZcTJX8ry9lcDB4W410C9G/AiV5u/VH7W
/Cc7KdGQPDtKW7/NS7BP09SzHVr39/wEXAj7lBap74caeIq1JpQX6ZaQ1D+r9Z6g
2drjG2KNLF8Q5gx0K2CFf4IXKA==
-----END CERTIFICATE-----
Generated at Thu Dec 8 09:20:30 2022 by rpki-client.