Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/7zxuLMHDug5dkyV5AK5WGRdS0pg.roa
File:                     7zxuLMHDug5dkyV5AK5WGRdS0pg.roa (download)
Hash identifier:          hv3iQw+uNkKiDjlvIHT0W1yytdfIpNIFHi7hNt+3bG0=
Subject key identifier:   EF:3C:6E:2C:C1:C3:BA:0E:5D:93:25:79:00:AE:56:19:17:52:D2:98
Certificate issuer:       /CN=68e07d76595afcd2d29e8d3af09c94d4a0dd8348
Certificate serial:       BAB20A
Authority key identifier: 68:E0:7D:76:59:5A:FC:D2:D2:9E:8D:3A:F0:9C:94:D4:A0:DD:83:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aOB9dlla_NLSno068JyU1KDdg0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/7zxuLMHDug5dkyV5AK5WGRdS0pg.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 62.106.80.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12235274 (0xbab20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68e07d76595afcd2d29e8d3af09c94d4a0dd8348
        Validity
            Not Before: Jan  1 01:00:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef3c6e2cc1c3ba0e5d93257900ae56191752d298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:5c:f9:d0:4c:c3:2c:d9:5d:83:e1:db:de:
                    bd:ed:e9:47:37:bf:c8:c2:d0:cb:d6:e3:09:ae:58:
                    fa:a7:f4:35:6c:00:76:d7:f5:21:a5:29:7f:fe:75:
                    9a:51:69:31:7d:03:81:f9:b8:82:86:b8:f9:dc:0d:
                    ef:af:8a:85:eb:c1:a4:ce:32:0f:5f:37:8a:03:c0:
                    69:5f:2e:43:b7:02:83:87:30:45:90:98:e6:4a:5b:
                    2b:11:ab:ec:05:9b:82:96:e4:0c:21:66:c0:41:1c:
                    bc:67:fb:4c:e4:95:c8:4b:f3:a2:c8:c9:2a:89:fa:
                    bd:bb:f9:69:7a:5b:cd:5b:93:02:a7:d0:7b:da:a4:
                    c4:11:f1:51:89:c9:df:fb:85:44:de:1f:ec:10:28:
                    88:3c:9a:b3:d1:9f:f0:be:9d:88:26:0c:e4:23:86:
                    76:97:9c:ac:da:64:b8:e4:9e:75:dc:d3:a5:af:6d:
                    51:da:35:fd:0f:ca:af:5a:f8:dc:7b:a8:da:6c:7a:
                    34:1b:d1:26:2c:75:fe:30:a1:30:21:35:bd:66:b2:
                    58:75:7b:b6:1f:fc:41:b1:03:d7:98:a5:16:32:16:
                    96:56:5a:0a:d1:b0:a6:f5:dd:18:29:72:03:ba:b9:
                    aa:a9:63:5a:b3:5a:e3:0d:36:8e:b4:cc:3d:57:ae:
                    63:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EF:3C:6E:2C:C1:C3:BA:0E:5D:93:25:79:00:AE:56:19:17:52:D2:98
            X509v3 Authority Key Identifier: 
                keyid:68:E0:7D:76:59:5A:FC:D2:D2:9E:8D:3A:F0:9C:94:D4:A0:DD:83:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB9dlla_NLSno068JyU1KDdg0g.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/7zxuLMHDug5dkyV5AK5WGRdS0pg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/aOB9dlla_NLSno068JyU1KDdg0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:08:08:b8:d9:06:6c:88:c0:9d:67:b5:fa:1b:1c:b8:4a:2c:
         61:c5:ed:9a:7b:30:a2:18:07:43:02:d7:4e:20:c2:44:14:fd:
         32:5e:5c:ab:fe:dc:84:97:cd:3a:4c:ea:81:44:63:b9:b1:da:
         b9:e1:29:d1:a2:c8:64:2d:9f:f9:d8:1d:e2:34:09:62:eb:20:
         ee:58:ab:12:d9:9b:66:ec:05:9f:dc:c0:75:cd:a3:73:37:ce:
         32:47:d6:ce:27:cb:a3:ce:8b:6f:ec:62:1b:72:6a:76:f2:eb:
         01:c4:66:16:9d:3a:81:59:0b:fc:3a:a0:65:8c:c1:7e:b4:42:
         e4:ae:8d:e9:84:d3:6e:42:87:e7:90:96:fa:c4:74:b9:b7:67:
         5e:75:3a:5e:a7:37:0c:86:c4:81:ad:cf:46:e7:11:a4:b4:22:
         95:38:74:20:b8:a8:d7:fe:b5:71:7e:21:c3:6a:9a:22:22:c8:
         ae:00:41:8f:98:94:51:cb:dd:ec:3c:e4:e3:8e:91:16:63:03:
         3c:66:02:e3:1f:9d:60:21:03:3b:59:0c:e3:43:3c:25:33:0e:
         34:c5:f6:3a:a3:f3:8c:57:63:42:5b:6e:69:b4:68:79:c8:db:
         30:41:22:9f:31:29:df:bb:26:61:16:20:1a:a8:b4:7a:8a:f9:
         b4:55:3c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 20:10:25 2022 by rpki-client.