Route Origin Authorization

$ cd rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/

$ rpki-client -vvf pKDCutzqPCuBJfTxQKhemgo6XT0.roa
File:                     pKDCutzqPCuBJfTxQKhemgo6XT0.roa (download)
Hash identifier:          n7XmeSKaFe88GNzhgzaPya65pHRf89raCt7wc1VCA8o=
Subject key identifier:   A4:A0:C2:BA:DC:EA:3C:2B:81:25:F4:F1:40:A8:5E:9A:0A:3A:5D:3D
Certificate issuer:       /CN=c0ffaf8ccae3639d9748dddcb833cd088938a901
Certificate serial:       01464CEB
Authority key identifier: C0:FF:AF:8C:CA:E3:63:9D:97:48:DD:DC:B8:33:CD:08:89:38:A9:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wP-vjMrjY52XSN3cuDPNCIk4qQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/pKDCutzqPCuBJfTxQKhemgo6XT0.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 193.163.6.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21384427 (0x1464ceb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ffaf8ccae3639d9748dddcb833cd088938a901
        Validity
            Not Before: Jan  1 10:59:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a4a0c2badcea3c2b8125f4f140a85e9a0a3a5d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ca:f9:7e:e3:5b:4d:a5:2e:17:2c:cc:fe:5b:
                    9f:d4:9c:7c:2a:80:d6:e6:32:05:40:bc:ec:5d:32:
                    b8:17:80:76:7a:ba:c4:5a:7d:58:4a:ca:ec:82:2d:
                    3a:27:8e:41:ea:8c:a1:bd:5c:68:0a:c9:85:9e:90:
                    6c:ad:c2:3c:5e:30:af:d7:c4:0e:0b:11:24:f5:5f:
                    07:19:63:d3:21:98:6c:c5:23:51:82:f0:f2:3b:1b:
                    42:64:ad:78:1b:ac:14:49:58:0d:d6:32:59:1e:87:
                    31:8c:41:78:df:cf:57:15:d5:78:72:84:df:a6:11:
                    b0:05:21:ab:a3:61:08:07:e1:6f:3f:e5:d1:3b:0a:
                    28:fd:77:1d:40:75:32:22:c8:56:c4:17:3b:ea:52:
                    ba:d9:72:36:8b:a1:79:e3:6b:60:10:dd:43:4d:fd:
                    ca:1a:f0:76:8a:a6:15:f4:36:50:83:8b:47:8e:37:
                    96:f5:9d:cf:29:98:ef:37:78:77:4d:f2:35:35:fc:
                    fa:79:b4:61:79:d4:41:38:53:94:4e:17:63:9c:3b:
                    b7:6a:5f:c5:14:27:e7:59:85:47:37:22:3a:34:70:
                    23:c4:c9:c4:63:28:1d:7a:3f:fb:59:b4:50:7e:31:
                    5f:5d:c3:ca:a7:7b:e5:45:a8:76:7c:66:fc:e6:1c:
                    0b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A4:A0:C2:BA:DC:EA:3C:2B:81:25:F4:F1:40:A8:5E:9A:0A:3A:5D:3D
            X509v3 Authority Key Identifier: 
                keyid:C0:FF:AF:8C:CA:E3:63:9D:97:48:DD:DC:B8:33:CD:08:89:38:A9:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP-vjMrjY52XSN3cuDPNCIk4qQE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/pKDCutzqPCuBJfTxQKhemgo6XT0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/wP-vjMrjY52XSN3cuDPNCIk4qQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:57:98:57:fc:b9:f7:27:aa:40:b1:2b:0e:d7:f3:f4:80:40:
         cb:8b:af:7e:3e:b9:7b:ac:42:c2:55:ee:6e:77:86:9e:c0:a1:
         f0:61:b7:23:5d:a4:95:7b:e0:bb:6a:68:47:66:24:f8:08:74:
         ca:79:d7:d7:3c:fa:9e:bf:20:8c:c5:95:c6:9b:d6:b1:18:de:
         b5:64:43:de:a1:b6:bd:85:08:1e:59:7c:31:13:a4:1e:b3:cb:
         a1:d8:13:80:3d:65:c7:df:c4:f0:00:40:cd:33:94:99:c9:b1:
         13:41:eb:b8:c7:92:af:ab:2d:cc:e6:0e:17:68:23:73:74:c7:
         b3:d2:17:45:66:15:a4:48:d0:c0:0f:85:06:fb:33:d1:1b:c5:
         65:4b:62:68:61:f9:5b:52:f2:5b:c8:63:94:d2:99:e3:3e:e5:
         e4:9b:2c:46:f4:f1:bc:05:1d:ba:c5:f5:6d:d4:13:23:10:10:
         fa:82:1e:5c:b1:d1:7a:35:9d:f2:b8:42:38:ee:0b:ff:cf:61:
         f9:ba:dc:c4:f6:e8:ce:05:2a:eb:91:d9:11:c9:e0:14:10:63:
         ab:ca:00:e7:4a:ab:51:62:db:a5:e0:5e:a7:54:5b:61:9f:fe:
         df:95:74:90:a6:76:7f:79:38:f6:45:80:5f:65:ab:a4:ce:38:
         09:0a:48:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 12:29:25 2022 by rpki-client.