Route Origin Authorization

$ cd rpki.ripe.net/repository/DEFAULT/de/5b4407-b9de-4d40-ad53-6c629d4228e8/1/

$ rpki-client -vvf 0ibMR36s_7RSrgUDqZRzBmfBRnA.roa
File:                     0ibMR36s_7RSrgUDqZRzBmfBRnA.roa (download)
Hash identifier:          OooBBWRB2f6ukAHqadfg11xJZnYdX8BIHatTLkdkphI=
Subject key identifier:   D2:26:CC:47:7E:AC:FF:B4:52:AE:05:03:A9:94:73:06:67:C1:46:70
Certificate issuer:       /CN=18754888f49d5b0c8cb9e6d60ac0eed71fc9b56a
Certificate serial:       B93782
Authority key identifier: 18:75:48:88:F4:9D:5B:0C:8C:B9:E6:D6:0A:C0:EE:D7:1F:C9:B5:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GHVIiPSdWwyMuebWCsDu1x_JtWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/5b4407-b9de-4d40-ad53-6c629d4228e8/1/0ibMR36s_7RSrgUDqZRzBmfBRnA.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 193.56.10.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12138370 (0xb93782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18754888f49d5b0c8cb9e6d60ac0eed71fc9b56a
        Validity
            Not Before: Jan  1 06:58:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d226cc477eacffb452ae0503a994730667c14670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:5d:76:32:ea:f9:3b:5c:0f:37:67:00:fa:
                    2d:3a:10:2c:d7:dc:d2:1c:74:ee:7d:6e:c3:0b:1e:
                    dc:7f:f8:58:57:6e:36:4c:95:3a:72:8a:60:c9:90:
                    f0:67:5a:68:8a:8f:3e:4d:f8:95:17:35:60:73:25:
                    8e:fd:69:69:19:a1:bf:02:88:62:54:5d:7c:24:94:
                    ea:d8:a8:92:9b:d1:62:22:c5:33:cb:f5:f6:bf:be:
                    90:98:02:71:6c:8a:58:a7:6a:1d:93:38:a6:35:6c:
                    52:8f:b6:a6:53:cb:a9:07:4b:b8:85:ab:df:cb:2b:
                    54:9f:91:e2:0e:cc:13:5c:a5:ff:09:e4:e5:ca:e5:
                    7c:f0:84:39:5a:d4:3c:ee:dd:34:c5:88:ce:ec:94:
                    d8:d6:f1:ca:c0:b6:33:40:a8:13:7b:fa:da:24:aa:
                    4e:4c:70:69:69:7f:a4:17:73:c4:4d:02:f2:3f:a5:
                    2a:25:9b:d4:04:e1:02:b2:bd:68:9e:a4:44:19:b1:
                    7c:7c:5b:28:0e:39:6a:6e:56:b6:e0:de:de:8f:b0:
                    e7:95:9d:c6:69:03:0f:31:31:5c:30:97:84:f9:34:
                    84:f0:7c:d1:2c:93:c7:80:60:30:0d:10:a3:aa:6d:
                    be:35:69:f8:ef:4f:ab:e8:78:b3:87:36:32:d0:05:
                    09:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D2:26:CC:47:7E:AC:FF:B4:52:AE:05:03:A9:94:73:06:67:C1:46:70
            X509v3 Authority Key Identifier: 
                keyid:18:75:48:88:F4:9D:5B:0C:8C:B9:E6:D6:0A:C0:EE:D7:1F:C9:B5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHVIiPSdWwyMuebWCsDu1x_JtWo.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5b4407-b9de-4d40-ad53-6c629d4228e8/1/0ibMR36s_7RSrgUDqZRzBmfBRnA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5b4407-b9de-4d40-ad53-6c629d4228e8/1/GHVIiPSdWwyMuebWCsDu1x_JtWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:2e:b0:f3:f5:ad:fc:15:28:e2:80:b7:28:ce:4c:9b:32:12:
         15:00:93:89:02:d0:c9:21:37:b4:38:03:72:6f:30:31:fb:78:
         03:db:e1:d9:e4:72:2c:02:54:ab:ed:1f:ff:6c:86:e5:09:b5:
         2c:00:10:47:7f:e9:c0:18:5e:d9:39:0c:58:4d:ec:b8:2e:06:
         06:84:a6:76:e0:83:1a:7e:28:30:8f:d9:cd:38:5c:9f:86:58:
         21:9b:b5:90:c2:a0:26:90:25:55:95:8c:ad:f6:fc:e8:a2:57:
         97:33:cc:43:c5:eb:b3:54:e1:d0:64:ef:fa:fd:d7:a5:ca:7f:
         7e:64:b3:ed:a6:06:6a:74:5b:ad:ba:5d:d0:20:71:dd:5b:01:
         94:8b:d2:71:6f:dc:35:f3:47:1d:6f:2a:cc:7d:89:50:9a:1f:
         43:0b:eb:32:ba:81:92:62:96:07:8c:6c:15:09:f4:c6:2f:88:
         e6:f2:72:17:8f:ae:19:57:98:81:c1:95:3b:d2:1a:a9:1c:20:
         70:20:37:89:44:25:1d:2b:b4:45:3f:24:91:ed:7f:29:3a:fd:
         f8:37:00:6f:a4:33:4f:86:3f:b1:62:47:81:40:e2:fe:ea:15:
         1e:7b:5e:12:c8:c1:8d:d8:a0:12:92:1c:b4:2c:9d:59:3f:3e:
         1d:3a:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 12:28:33 2022 by rpki-client.