Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/t1rSlpE2i18csDdus9abd113L80.roa
File:                     t1rSlpE2i18csDdus9abd113L80.roa (download)
Hash identifier:          +N2P28j6FTmJmK8b8yaG+xHWeSCDwEUejE+zPPIQ3AU=
Subject key identifier:   B7:5A:D2:96:91:36:8B:5F:1C:B0:37:6E:B3:D6:9B:77:5D:77:2F:CD
Certificate issuer:       /CN=925a9ca5b49cef38ea627c9b20d470a7f599f608
Certificate serial:       E96EBC
Authority key identifier: 92:5A:9C:A5:B4:9C:EF:38:EA:62:7C:9B:20:D4:70:A7:F5:99:F6:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klqcpbSc7zjqYnybINRwp_WZ9gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/t1rSlpE2i18csDdus9abd113L80.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 194.9.181.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15298236 (0xe96ebc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925a9ca5b49cef38ea627c9b20d470a7f599f608
        Validity
            Not Before: Jan  1 05:00:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b75ad29691368b5f1cb0376eb3d69b775d772fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0d:b1:2f:40:3f:5e:6c:86:3e:7c:f8:24:f2:
                    ec:e4:b7:f5:ce:a6:e8:b7:76:33:2f:b3:75:57:5f:
                    17:49:f7:59:3b:3c:91:b7:4c:e4:4e:2d:8b:35:41:
                    c4:d0:67:18:1c:0a:9f:5f:56:ff:ec:66:3e:c8:5f:
                    9c:35:ef:b5:4d:c5:4a:b2:b5:fa:69:51:d8:0c:c4:
                    99:3d:2b:bd:20:3a:33:63:bc:90:27:6c:2b:53:39:
                    83:40:2e:11:8c:39:65:57:fd:e5:db:76:6b:f5:58:
                    89:be:db:1e:77:06:e8:ac:b0:43:40:89:42:a5:41:
                    53:a6:bd:71:71:65:f3:64:dc:62:23:ff:2c:ab:bf:
                    0b:c1:57:26:98:95:05:7a:c0:97:31:96:48:73:21:
                    e8:27:30:63:b8:4e:a0:5b:0b:a4:b3:21:96:5a:ba:
                    60:d8:e5:3e:fd:4b:04:0d:75:b4:4a:14:5c:29:86:
                    62:54:77:fa:36:89:1f:c2:1f:44:5c:12:e2:43:5d:
                    b7:02:8d:c3:61:bf:e5:8d:85:5a:f3:83:51:0e:6e:
                    f8:ba:c1:89:9e:34:fc:f6:b4:92:4e:a0:20:8e:27:
                    fe:f1:6f:8c:c5:af:e1:b6:cd:62:8f:93:e2:2d:3b:
                    f1:f0:6f:e6:28:9a:9e:5e:74:9c:15:4b:ed:09:b7:
                    91:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B7:5A:D2:96:91:36:8B:5F:1C:B0:37:6E:B3:D6:9B:77:5D:77:2F:CD
            X509v3 Authority Key Identifier: 
                keyid:92:5A:9C:A5:B4:9C:EF:38:EA:62:7C:9B:20:D4:70:A7:F5:99:F6:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klqcpbSc7zjqYnybINRwp_WZ9gg.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/t1rSlpE2i18csDdus9abd113L80.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/klqcpbSc7zjqYnybINRwp_WZ9gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.9.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:b1:47:cd:6d:e8:84:73:e3:65:68:53:1c:f9:92:87:d3:d5:
         c5:0a:ef:ae:5e:5c:6d:ca:9a:98:dd:65:ea:c0:09:d3:7b:83:
         78:07:6b:68:d4:61:34:5b:b0:04:03:6e:b8:12:85:15:d1:59:
         26:36:63:20:19:61:0f:8a:1a:0f:ec:8f:4c:6f:50:f9:32:b4:
         8a:25:89:5c:d9:a1:1a:24:f3:fe:5b:ae:19:8e:37:80:96:8f:
         5a:0e:14:5f:3a:4d:2b:6c:00:50:d0:61:74:d4:b1:c7:75:e4:
         e4:c3:dc:34:c6:aa:ed:5e:04:4b:0f:b2:d2:35:cd:d8:62:83:
         e0:a0:93:48:fc:bf:bf:c1:46:c4:08:b2:6a:fd:dc:94:01:72:
         03:ce:da:70:67:cf:a3:96:47:88:0a:1d:09:f2:7f:67:9e:99:
         b3:68:d4:c3:0d:45:70:37:24:ee:08:8e:b2:48:ca:cd:d0:fd:
         e1:ab:37:67:ff:45:9e:12:9f:40:f8:68:a4:71:af:93:dd:e9:
         64:38:0b:c3:32:00:7a:00:81:cd:13:d1:47:5c:5e:ec:be:1f:
         5f:25:fa:f7:12:0c:a8:6a:91:b5:1f:51:1f:79:9d:98:60:2f:
         73:89:26:a7:9c:90:38:a2:cb:4a:de:47:9c:70:4e:9a:db:0a:
         c2:64:01:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 18:49:55 2022 by rpki-client.