Route Origin Authorization
Location: rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/3CDlZGN-fHW8bxgaTTL2fF7fDNY.roa (download)

Subject key identifier:   DC:20:E5:64:63:7E:7C:75:BC:6F:18:1A:4D:32:F6:7C:5E:DF:0C:D6 
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
asID:                     AS42831
Prefixes:
    1: 192.144.33.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/3CDlZGN-fHW8bxgaTTL2fF7fDNY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87618427 (0x538f37b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Jan  1 02:46:26 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dc20e564637e7c75bc6f181a4d32f67c5edf0cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2b:06:81:be:06:32:dd:4f:ce:47:fc:36:a2:
                    25:26:f9:31:1d:04:04:ae:3d:1e:94:be:eb:9b:97:
                    2e:ff:19:08:b6:24:35:5a:d4:b7:87:31:63:31:f7:
                    c5:87:03:e2:74:d0:5e:49:16:33:3d:68:d1:fa:a0:
                    e1:f1:d4:63:e9:fe:c4:c8:fa:c9:3d:c8:be:9b:93:
                    57:4f:04:be:7e:f6:c4:4b:12:e9:2d:c8:c7:36:30:
                    7e:a5:f5:a0:20:99:a4:f5:9b:a8:c8:8a:df:47:a4:
                    60:15:fe:85:d2:52:a2:68:47:25:3c:ec:a9:25:36:
                    cb:d7:94:5d:c7:ef:ee:53:89:cc:85:8a:cd:ab:f1:
                    d3:29:3e:cd:ac:36:c4:c3:89:59:34:c4:fd:f0:6f:
                    76:4b:cd:94:2b:44:38:a3:75:53:2f:54:bf:da:86:
                    f4:10:62:4f:3d:5a:ed:ce:44:da:7e:c9:4a:20:c8:
                    e9:65:33:3d:e7:59:be:84:54:59:6d:62:36:65:70:
                    c0:0a:17:a8:54:d8:61:f2:69:74:fc:c5:45:fb:b5:
                    ee:a4:74:77:5c:9c:f9:94:92:d2:7a:bc:ce:14:e4:
                    78:d9:97:a3:a8:a3:5b:3e:36:6a:bc:8f:fd:91:96:
                    cd:4b:92:dd:3f:61:c3:e0:2f:fc:b0:d8:6b:fe:4d:
                    dd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DC:20:E5:64:63:7E:7C:75:BC:6F:18:1A:4D:32:F6:7C:5E:DF:0C:D6
            X509v3 Authority Key Identifier: 
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access: 
                1.3.6.1.5.5.7.48.11 - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/3CDlZGN-fHW8bxgaTTL2fF7fDNY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0......!
    Signature Algorithm: sha256WithRSAEncryption
         0f:2c:55:61:9b:7b:18:c4:40:3f:2c:b7:91:29:f5:5e:3a:62:
         2a:00:6f:c8:d6:05:c8:00:50:6b:f7:8f:cc:ef:48:ce:e1:ae:
         e3:7f:5a:c0:42:15:c6:62:bd:55:76:fa:a9:be:3f:15:09:79:
         02:0a:9b:99:4e:a0:21:7f:9b:8d:1b:dc:35:7c:d1:8a:f9:70:
         9a:59:00:29:df:0a:53:60:9e:81:0d:a9:e9:b1:a2:7f:7b:fd:
         50:22:8f:df:09:dd:89:5f:0a:0d:95:6e:3d:e0:17:5f:c8:97:
         ed:56:e9:3a:ec:d1:c2:45:21:2f:fa:8a:de:68:cc:cb:74:b7:
         62:13:cd:7b:99:97:74:c1:d1:36:93:aa:09:1b:5d:98:22:16:
         8e:4a:10:5a:ed:50:bd:71:ad:09:20:8c:ed:85:99:ac:52:1d:
         7f:5b:87:42:ee:2c:c4:1c:1f:0b:19:f8:72:cb:9a:f0:d4:d6:
         7d:2b:2e:a3:3c:86:c0:91:2d:02:05:82:ec:df:d0:73:25:43:
         6e:f5:5a:e2:e0:de:06:9e:04:e8:c2:3a:7f:e5:13:f8:f8:6e:
         86:da:d3:b3:33:6d:00:ed:f2:e4:46:33:43:98:1c:da:0b:f0:
         5c:bc:a5:8d:74:d4:2c:c9:b2:78:10:60:03:c9:54:f2:e0:5c:
         ca:33:80:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:24:42 2021 by LibreSSL & rpki-client.