Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/9_icOnebYOvy212_D6Uur-FfwzM.roa (download)

Subject key identifier:   F7:F8:9C:3A:77:9B:60:EB:F2:DB:5D:BF:0F:A5:2E:AF:E1:5F:C3:33 
Authority key identifier: 32:5A:EF:FE:20:B6:F9:A4:64:74:1B:E1:F3:3D:AF:14:65:C3:6F:A1
asID:                     AS1239
Prefixes:
    1: 194.104.133.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/9_icOnebYOvy212_D6Uur-FfwzM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13893587 (0xd3ffd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=325aeffe20b6f9a464741be1f33daf1465c36fa1
        Validity
            Not Before: Jan  1 12:54:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f7f89c3a779b60ebf2db5dbf0fa52eafe15fc333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:75:c4:f8:07:cf:bb:c5:0c:1a:ab:d4:60:01:
                    f1:14:ac:e9:f1:a8:02:d3:ae:e7:15:f4:c5:09:46:
                    59:80:99:40:76:4f:3b:72:74:5e:21:1f:d8:90:6e:
                    0f:9f:a8:94:33:ce:60:b3:06:03:ae:3b:89:af:98:
                    83:b0:a7:54:2a:6c:1a:bb:52:59:e5:4e:bc:48:28:
                    19:bb:49:a5:ce:a1:09:76:e0:3a:63:92:10:a3:63:
                    af:75:c5:bf:f3:5b:da:51:da:bd:95:57:fa:6f:09:
                    ce:e8:7b:99:31:b4:f3:bc:ba:3d:51:6f:d3:ea:53:
                    69:82:0a:c7:3d:79:70:0d:ca:18:65:28:bc:6e:9e:
                    b3:03:90:57:9e:20:ac:08:f7:07:bc:29:33:46:aa:
                    84:98:a5:be:bc:67:6b:e6:78:68:00:e7:30:51:1e:
                    79:7f:6f:4f:18:79:50:a5:f2:67:67:b8:91:e6:9c:
                    be:94:b4:4c:c1:d3:4d:f7:a9:7c:15:23:07:39:d8:
                    65:08:b0:a6:80:53:8a:73:2f:03:eb:b8:55:63:eb:
                    1d:56:4c:65:e6:30:fc:b2:c5:20:d0:8b:06:23:83:
                    93:7a:25:be:43:ae:3f:1e:0b:dd:45:40:c7:9b:61:
                    85:e8:7e:c5:ae:54:f8:32:78:90:48:7a:88:a7:1c:
                    0c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F7:F8:9C:3A:77:9B:60:EB:F2:DB:5D:BF:0F:A5:2E:AF:E1:5F:C3:33
            X509v3 Authority Key Identifier: 
                keyid:32:5A:EF:FE:20:B6:F9:A4:64:74:1B:E1:F3:3D:AF:14:65:C3:6F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mlrv_iC2-aRkdBvh8z2vFGXDb6E.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/9_icOnebYOvy212_D6Uur-FfwzM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/Mlrv_iC2-aRkdBvh8z2vFGXDb6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:65:d1:6d:a0:1a:3a:66:2b:ad:e1:db:c8:12:ce:3e:fa:34:
         22:e0:0d:81:80:3e:16:7e:4e:27:62:2f:23:d7:f7:fb:01:a7:
         9e:3f:bd:54:37:5a:f2:d9:ab:33:34:95:c1:5e:33:1c:ec:a7:
         87:7a:fc:89:6d:f8:4c:8e:99:95:85:69:5f:7a:2e:1c:07:ab:
         c5:7f:d4:be:8d:38:73:c6:31:2a:88:fd:4a:3c:eb:8f:64:4c:
         12:98:be:a7:43:3c:58:8e:95:2c:7d:88:43:36:72:98:39:84:
         fd:b1:68:f0:11:1f:d5:78:20:68:b9:a7:86:fb:cc:43:5e:4d:
         50:fa:3a:9f:cd:21:5a:a3:3f:24:8f:76:38:78:6e:84:ba:d4:
         cf:7b:d1:eb:cc:b2:9c:74:c5:00:08:7e:aa:31:65:5b:6f:7a:
         35:78:08:dd:bd:60:cc:92:73:75:54:b9:e3:e7:c0:94:d7:8c:
         25:42:10:31:b1:51:c5:c5:5b:ac:54:e7:6e:7e:6d:12:d2:c7:
         58:7a:97:18:c8:8f:6e:2f:e5:de:60:13:4d:27:5f:04:f4:2f:
         33:3f:b8:ae:13:69:2a:e8:6f:2e:2b:37:99:2a:07:23:03:05:
         5e:40:44:e0:dc:eb:6f:45:f4:5f:05:80:c9:19:66:23:29:d5:
         a2:24:a5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 12:28:54 2022 by LibreSSL & rpki-client.