Route Origin Authorization

$ cd rpki.ripe.net/repository/DEFAULT/e5/761528-efbd-4af1-a57c-c9bf71474321/1/

$ rpki-client -vvf Cd9Pg73_SHCy8bSUSuLEwauTaks.roa
File:                     Cd9Pg73_SHCy8bSUSuLEwauTaks.roa (download)
Hash identifier:          cZm1ltb5Z3Nry6NTdt8Gfyj7Mh0tll7AxPxCtinYdvk=
Subject key identifier:   09:DF:4F:83:BD:FF:48:70:B2:F1:B4:94:4A:E2:C4:C1:AB:93:6A:4B
Certificate issuer:       /CN=9cadd52cb6db8e50ea3b6962a92e2793026e52ac
Certificate serial:       8EB3BE
Authority key identifier: 9C:AD:D5:2C:B6:DB:8E:50:EA:3B:69:62:A9:2E:27:93:02:6E:52:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nK3VLLbbjlDqO2liqS4nkwJuUqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/761528-efbd-4af1-a57c-c9bf71474321/1/Cd9Pg73_SHCy8bSUSuLEwauTaks.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 194.26.200.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9352126 (0x8eb3be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cadd52cb6db8e50ea3b6962a92e2793026e52ac
        Validity
            Not Before: Jan  1 02:51:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=09df4f83bdff4870b2f1b4944ae2c4c1ab936a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a7:f2:a8:7a:75:b2:93:3a:82:f6:10:ae:17:
                    e9:ce:0e:14:97:77:30:dc:fb:43:4e:a3:b5:1d:de:
                    5b:d7:bf:7a:18:15:21:84:33:b0:a2:44:0d:50:42:
                    d7:4d:08:f1:83:f4:62:52:c7:5e:eb:48:7f:15:ba:
                    d5:aa:4f:af:e1:3b:c4:7d:64:4c:9c:65:12:0f:bc:
                    6f:2d:96:33:e3:50:17:d1:61:9d:a0:aa:7e:6c:0f:
                    a6:ff:5a:a7:c0:40:fd:31:a0:34:af:ce:21:ff:a6:
                    b3:88:a0:39:09:e5:36:7a:14:89:70:e6:48:32:5e:
                    7e:55:a1:3b:c2:23:ae:46:80:e0:8e:69:2e:00:ed:
                    26:54:1c:00:b5:44:24:e9:c1:ba:9d:7b:6a:18:41:
                    1f:e8:d9:c3:e5:83:ba:29:da:91:f9:22:65:35:70:
                    29:68:de:f7:85:34:29:0e:3d:51:fc:6d:44:ca:e6:
                    84:ed:b3:4e:63:bd:77:bf:88:0b:b5:29:e3:f2:e5:
                    08:b8:39:fb:54:9c:c4:ad:07:9c:f4:23:a4:95:a3:
                    bd:d4:6d:ad:d2:69:df:38:74:6a:7f:f5:4c:81:7c:
                    7f:68:2e:70:6e:4f:ca:15:96:d5:be:7d:c1:fa:15:
                    7c:4e:6b:15:73:7e:ef:50:60:c7:68:d4:e2:84:61:
                    9c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                09:DF:4F:83:BD:FF:48:70:B2:F1:B4:94:4A:E2:C4:C1:AB:93:6A:4B
            X509v3 Authority Key Identifier: 
                keyid:9C:AD:D5:2C:B6:DB:8E:50:EA:3B:69:62:A9:2E:27:93:02:6E:52:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nK3VLLbbjlDqO2liqS4nkwJuUqw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/761528-efbd-4af1-a57c-c9bf71474321/1/Cd9Pg73_SHCy8bSUSuLEwauTaks.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/761528-efbd-4af1-a57c-c9bf71474321/1/nK3VLLbbjlDqO2liqS4nkwJuUqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f9:7d:78:75:93:ac:27:43:eb:42:5b:c0:b3:a2:7d:11:d2:
         ee:b6:e1:c6:11:51:f2:c4:e9:4f:d3:60:52:49:f1:ff:61:68:
         70:cd:36:0b:5c:61:e1:bd:7a:e7:5a:e2:78:3d:f6:37:ef:06:
         3a:e5:27:43:dd:e5:84:21:47:82:69:be:3d:14:24:de:92:fa:
         c6:ee:ab:e2:9a:6a:14:e6:fe:57:ff:2a:60:40:0a:9a:e3:96:
         f8:3a:af:63:c1:e5:3a:35:32:a9:23:ab:97:31:0a:2d:3d:b4:
         6e:be:4d:ce:1d:fb:23:2f:fa:87:20:ec:03:84:90:c2:f2:da:
         e3:44:91:d5:a1:81:d5:07:7b:40:31:97:ed:46:e1:86:6f:9c:
         d3:b3:b3:5a:c0:c2:16:80:c0:fa:28:40:40:12:76:a8:78:d6:
         fb:79:52:24:83:32:b9:e2:b5:18:51:7b:ad:f5:c7:4f:40:ec:
         49:26:e4:9a:c5:25:f9:c3:19:32:55:88:4d:a2:97:55:5d:8b:
         76:ce:1a:53:ba:33:3d:a8:a9:bb:22:55:d0:0a:77:7a:aa:1b:
         8a:89:82:5a:ed:4d:b2:81:24:47:da:cf:b6:dd:c5:49:a3:e6:
         26:7d:da:75:d4:64:bf:d8:b9:3f:eb:e2:ef:f1:86:0f:55:e1:
         09:60:01:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 11:54:01 2022 by rpki-client.