Route Origin Authorization
Location: ca.rg.net/rpki/RGnet-OU/iZAfniuG6KbsY7Z97K4XxodnEnA.roa (download)

Subject key identifier:   89:90:1F:9E:2B:86:E8:A6:EC:63:B6:7D:EC:AE:17:C6:87:67:12:70 
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
asID:                     AS3130
Prefixes:
    1: 147.28.96.0/19 (max: 19)

--
$ test-roa -p ca.rg.net/rpki/RGnet-OU/iZAfniuG6KbsY7Z97K4XxodnEnA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28470 (0x6f36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
        Validity
            Not Before: Dec 17 14:33:11 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=89901F9E2B86E8A6EC63B67DECAE17C687671270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:e6:a7:26:73:79:b3:9a:ca:a6:de:fe:3c:
                    37:a9:f3:38:b5:35:88:7b:9a:d4:11:20:a4:57:6d:
                    94:2d:96:f8:eb:52:17:3f:f8:2d:4b:b2:f2:1e:6a:
                    4e:8d:ea:22:dd:44:56:9b:61:66:9c:03:e5:f2:20:
                    6c:fd:9b:03:b2:3c:66:0b:42:f7:02:bf:b7:40:80:
                    69:4c:73:43:c0:66:e5:20:cf:e6:30:65:f7:8d:9d:
                    3d:40:f4:47:f8:c2:e7:a9:ca:bd:d8:b1:2d:2f:d3:
                    75:5e:2f:d6:91:87:67:61:c8:2e:b2:ed:79:23:20:
                    98:cf:4e:ab:53:42:80:e2:c0:12:e8:7d:af:84:46:
                    53:0b:d9:f8:21:34:49:01:3a:f8:c9:11:30:e2:ae:
                    db:cf:dc:35:85:a5:d5:75:c4:d9:0f:34:66:8d:e9:
                    92:f3:c5:fe:f9:3b:67:2a:a0:b7:70:9b:ec:02:8c:
                    2d:06:c0:5f:df:7b:75:1a:ff:5a:c0:1b:3e:74:98:
                    eb:58:b1:8a:ce:12:ae:6f:7b:6b:d0:53:8f:eb:46:
                    e9:28:49:37:30:bc:42:65:4a:06:28:b7:91:fb:2f:
                    df:3c:69:ec:08:e2:81:82:b0:ea:75:6d:07:14:cf:
                    6a:7f:11:3a:b1:47:d7:17:77:ff:6d:a8:cb:f9:b0:
                    8d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                89:90:1F:9E:2B:86:E8:A6:EC:63:B6:7D:EC:AE:17:C6:87:67:12:70
            X509v3 Authority Key Identifier: 
                keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access: 
                1.3.6.1.5.5.7.48.11 - URI:rsync://ca.rg.net/rpki/RGnet-OU/iZAfniuG6KbsY7Z97K4XxodnEnA.roa
                1.3.6.1.5.5.7.48.13 - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                0.0.....0......`
    Signature Algorithm: sha256WithRSAEncryption
         2b:42:6e:3f:46:ae:11:ff:e1:27:2f:5d:34:4b:09:9b:76:dd:
         62:33:6e:41:6e:3c:2b:37:ab:57:d3:76:90:0d:fc:da:3f:06:
         e3:65:68:41:55:26:d8:d5:06:6c:3d:2b:14:c7:c4:28:58:64:
         77:40:15:78:3d:04:27:84:d3:ce:bb:cb:12:f4:ee:f2:8d:b8:
         66:98:c0:5a:8a:86:47:59:7b:b9:55:3d:4e:4a:e0:e0:86:88:
         c6:69:7c:83:01:b9:5c:11:cc:39:f1:ef:82:94:f4:87:9e:3c:
         31:c7:ad:39:25:27:d7:9e:d8:fc:69:23:36:6e:04:5c:ec:f7:
         40:e3:b6:d4:29:62:89:8a:a7:47:21:4b:22:a3:1f:83:92:8c:
         5c:a1:a7:c0:fb:58:ef:62:17:38:d1:be:db:d8:64:f3:7d:d4:
         3c:4f:27:13:ea:01:ef:b3:fe:c6:41:de:58:bb:e3:14:33:b9:
         f0:c3:8d:ec:04:12:6a:fe:67:d4:56:63:bc:2d:86:f2:e1:8a:
         bd:42:b7:40:f3:b4:56:44:4b:5d:3d:6f:c4:7a:59:d8:c2:91:
         d4:0a:c6:11:fb:9c:c7:90:4d:8e:7b:d1:46:5e:e5:e0:b2:6b:
         18:0a:20:ae:18:43:76:fe:16:ca:a2:44:21:46:b0:96:4e:f3:
         f1:3d:50:11
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgICbzYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNmQ2
ZmJmYTk3NTNkYjhkODQ2NDMzZGI1MzUxZDlhOWVjMDdjOTZiZDAeFw0yMDEyMTcx
NDMzMTFaFw0yMTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDg5OTAxRjlFMkI4NkU4
QTZFQzYzQjY3REVDQUUxN0M2ODc2NzEyNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCas+anJnN5s5rKpt7+PDep8zi1NYh7mtQRIKRXbZQtlvjrUhc/
+C1LsvIeak6N6iLdRFabYWacA+XyIGz9mwOyPGYLQvcCv7dAgGlMc0PAZuUgz+Yw
ZfeNnT1A9Ef4wuepyr3YsS0v03VeL9aRh2dhyC6y7XkjIJjPTqtTQoDiwBLofa+E
RlML2fghNEkBOvjJETDirtvP3DWFpdV1xNkPNGaN6ZLzxf75O2cqoLdwm+wCjC0G
wF/fe3Ua/1rAGz50mOtYsYrOEq5ve2vQU4/rRukoSTcwvEJlSgYot5H7L988aewI
4oGCsOp1bQcUz2p/ETqxR9cXd/9tqMv5sI2tAgMBAAGjggHUMIIB0DAdBgNVHQ4E
FgQUiZAfniuG6KbsY7Z97K4XxodnEnAwHwYDVR0jBBgwFoAUbW+/qXU9uNhGQz21
NR2ansB8lr0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBQBgNVHR8ESTBHMEWg
Q6BBhj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL2JXLV9xWFU5dU5o
R1F6MjFOUjJhbnNCOGxyMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAC
hkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JXLV9x
WFU5dU5oR1F6MjFOUjJhbnNCOGxyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIGKBggr
BgEFBQcBCwR+MHwwSwYIKwYBBQUHMAuGP3JzeW5jOi8vY2EucmcubmV0L3Jwa2kv
UkduZXQtT1UvaVpBZm5pdUc2S2JzWTdaOTdLNFh4b2RuRW5BLnJvYTAtBggrBgEF
BQcwDYYhaHR0cHM6Ly9jYS5yZy5uZXQvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQFkxxgMA0GCSqGSIb3DQEBCwUAA4IBAQArQm4/
Rq4R/+EnL100Swmbdt1iM25BbjwrN6tX03aQDfzaPwbjZWhBVSbY1QZsPSsUx8Qo
WGR3QBV4PQQnhNPOu8sS9O7yjbhmmMBaioZHWXu5VT1OSuDghojGaXyDAblcEcw5
8e+ClPSHnjwxx605JSfXntj8aSM2bgRc7PdA47bUKWKJiqdHIUsiox+DkoxcoafA
+1jvYhc40b7b2GTzfdQ8TycT6gHvs/7GQd5Yu+MUM7nww43sBBJq/mfUVmO8LYby
4Yq9QrdA87RWREtdPW/EelnYwpHUCsYR+5zHkE2Oe9FGXuXgsmsYCiCuGEN2/hbK
okQhRrCWTvPxPVAR
-----END CERTIFICATE-----

Generated at Wed Mar 3 03:15:16 2021 by LibreSSL & rpki-client.