Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/64T4-clmiN8I6w_4lUvd0_MZ03Y.roa (download)

Subject key identifier:   EB:84:F8:F9:C9:66:88:DF:08:EB:0F:F8:95:4B:DD:D3:F3:19:D3:76 
Authority key identifier: 19:E6:99:E2:56:EC:3B:E9:47:26:71:9B:60:F8:FF:41:4E:FE:FF:E9
asID:                     AS1239
Prefixes:
    1: 91.236.195.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/64T4-clmiN8I6w_4lUvd0_MZ03Y.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13567548 (0xcf063c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19e699e256ec3be94726719b60f8ff414efeffe9
        Validity
            Not Before: Jan  1 05:54:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb84f8f9c96688df08eb0ff8954bddd3f319d376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f1:4a:9e:09:5f:33:d4:76:25:b2:14:b3:cb:
                    d6:f0:aa:51:80:84:95:83:0a:08:37:72:9c:47:59:
                    f2:0f:4e:ee:bb:9f:4c:f9:ba:3c:ca:2e:d2:f2:c1:
                    14:c1:04:78:7d:68:6f:d8:2a:a1:63:cf:b2:bc:c1:
                    04:4f:b0:a3:85:a8:87:e3:b2:34:02:7b:aa:dc:04:
                    5a:56:2a:ee:56:5b:5c:ce:88:6c:61:d8:b8:86:a4:
                    d4:77:cf:51:8c:90:c2:de:be:d2:fe:50:00:a5:0a:
                    aa:35:5d:07:98:02:6f:81:06:f9:d4:a9:27:82:e8:
                    62:be:41:7e:06:75:6e:a6:d1:9d:94:b4:9e:05:3a:
                    4b:f3:87:8d:68:c9:ca:64:f5:61:bc:b6:06:2d:29:
                    d1:8d:78:71:a2:9d:20:59:ec:fd:fc:d0:35:ff:b6:
                    97:f4:64:25:8b:6a:1c:e5:d1:91:69:10:f4:0b:f0:
                    7b:e6:b7:90:57:1d:00:04:68:b9:f2:be:1c:fe:0e:
                    41:4d:bd:62:fc:39:b3:85:89:2d:23:dd:6c:0a:f9:
                    e6:13:ff:79:70:70:4d:12:20:f5:89:a3:15:0a:d8:
                    34:cd:8f:8a:5a:36:a9:f0:f8:62:d1:e7:54:56:c1:
                    b4:05:52:bb:b0:73:1a:b1:80:60:f8:31:92:87:7c:
                    cf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EB:84:F8:F9:C9:66:88:DF:08:EB:0F:F8:95:4B:DD:D3:F3:19:D3:76
            X509v3 Authority Key Identifier: 
                keyid:19:E6:99:E2:56:EC:3B:E9:47:26:71:9B:60:F8:FF:41:4E:FE:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/64T4-clmiN8I6w_4lUvd0_MZ03Y.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.236.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:b3:78:3d:52:37:70:2d:91:fa:fa:28:c9:5c:5a:62:c6:9d:
         97:d0:22:3f:18:bd:2c:07:b7:81:91:b4:c5:ab:14:f0:7c:32:
         38:92:c0:6f:63:f3:0f:5b:2d:71:b6:ad:62:b8:b3:98:d1:c3:
         51:b7:70:9c:3f:cb:15:99:e7:0e:58:c2:8f:b8:3d:b4:27:03:
         4b:d7:ce:01:b1:d2:1e:aa:f0:ba:46:35:07:54:46:aa:94:c1:
         fd:1d:47:a8:13:40:4d:92:af:4d:4e:3c:51:38:a9:bd:64:6a:
         50:d3:ff:ff:41:b5:9f:56:69:e9:dc:da:3e:a5:f2:3e:e4:74:
         65:72:ce:9b:bc:a0:b7:f2:10:01:76:ba:3d:6b:2e:da:6e:45:
         bf:89:6b:6c:2d:4a:7d:59:4e:89:15:b0:8d:f3:1c:ec:5f:72:
         a7:2f:a0:a0:8b:25:0e:fb:96:49:c4:82:1e:7f:08:a5:bb:dc:
         e5:a0:11:5e:f8:37:28:29:5a:f8:55:94:d1:a8:ef:11:06:ab:
         b2:c6:8c:d3:01:f7:1e:f5:11:83:35:e6:9b:d7:29:cb:32:f8:
         b0:8a:fc:f2:08:86:55:e1:a2:9a:0d:c1:ce:53:98:92:ba:ce:
         78:7b:5e:5b:3b:60:e5:a0:6e:f6:8b:01:e5:61:9c:2a:72:82:
         c4:c3:52:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 12:40:36 2022 by LibreSSL & rpki-client.