Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/2e/506fe1-9255-4f42-9d4a-9073d20c2d92/1/pr_FFO8Cok_L92QgTD4Lemkf5tY.roa (download)

Subject key identifier:   A6:BF:C5:14:EF:02:A2:4F:CB:F7:64:20:4C:3E:0B:7A:69:1F:E6:D6 
Authority key identifier: 16:46:46:B6:28:BC:27:D2:FB:26:B4:99:A5:ED:B2:E1:C4:C5:08:8A
asID:                     AS1239
Prefixes:
    1: 62.233.38.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/2e/506fe1-9255-4f42-9d4a-9073d20c2d92/1/pr_FFO8Cok_L92QgTD4Lemkf5tY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9867631 (0x96916f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164646b628bc27d2fb26b499a5edb2e1c4c5088a
        Validity
            Not Before: Jan  1 01:51:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a6bfc514ef02a24fcbf764204c3e0b7a691fe6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:00:dc:9e:14:ad:9a:73:30:6f:22:e9:a7:ad:
                    77:55:cc:47:0a:2e:8d:bf:6a:11:96:98:0e:b0:f0:
                    ea:c0:22:b2:7e:41:aa:fa:8b:a1:e1:00:4f:b8:d7:
                    26:a6:61:ff:e8:2b:9a:9d:0f:fa:43:cf:e1:1e:16:
                    7a:3d:fe:57:0b:0f:58:1d:59:b1:83:a6:86:35:c3:
                    64:ce:63:61:05:9a:b5:3c:57:f4:3b:00:6e:87:bf:
                    df:7f:d0:a6:af:37:58:5a:54:51:10:94:d3:ed:46:
                    50:cd:02:03:70:89:7d:03:60:38:3d:d6:68:2b:2e:
                    bd:ed:cd:e8:15:4e:e6:29:ed:b9:dc:8b:b5:35:9a:
                    90:5f:ea:c4:a7:13:1f:77:bd:fe:0f:54:02:d5:63:
                    35:ec:6b:c6:1c:97:91:a2:4c:79:a6:ef:58:b8:9c:
                    78:29:6c:28:5a:8b:5f:f5:a2:db:8a:b4:c9:6e:16:
                    ab:de:c9:bd:ec:4f:d2:92:7e:c3:8b:d7:88:aa:a3:
                    1f:a8:df:d7:89:20:6d:b1:52:db:a2:6a:fd:8c:bf:
                    5e:44:a6:df:94:56:f7:f4:77:5a:5d:bf:c2:4d:8a:
                    97:de:ec:0f:94:e8:51:8d:32:6b:24:2c:10:23:c6:
                    4b:cb:f2:79:0e:0c:12:b8:bf:13:29:48:52:e8:54:
                    f7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A6:BF:C5:14:EF:02:A2:4F:CB:F7:64:20:4C:3E:0B:7A:69:1F:E6:D6
            X509v3 Authority Key Identifier: 
                keyid:16:46:46:B6:28:BC:27:D2:FB:26:B4:99:A5:ED:B2:E1:C4:C5:08:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkZGtii8J9L7JrSZpe2y4cTFCIo.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/506fe1-9255-4f42-9d4a-9073d20c2d92/1/pr_FFO8Cok_L92QgTD4Lemkf5tY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/506fe1-9255-4f42-9d4a-9073d20c2d92/1/FkZGtii8J9L7JrSZpe2y4cTFCIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:b8:cd:91:ec:35:56:1d:dd:98:27:df:fd:a6:2b:4b:b0:b9:
         33:24:5c:a3:0f:6f:a9:02:c2:b8:38:8a:15:4d:49:72:22:1a:
         bd:d3:95:ba:05:6f:ba:7a:8f:8c:70:b8:13:fa:7f:35:6e:b5:
         31:14:78:5e:05:1c:9c:74:31:f6:f0:a1:da:51:db:d4:a2:3b:
         8a:96:3f:fb:43:00:04:0a:51:7c:2b:1c:7e:46:fc:d0:7a:54:
         a8:86:66:ad:79:da:7a:df:73:b9:33:c2:ea:c2:a7:74:c0:36:
         fc:4a:47:25:d6:af:5b:ca:bc:27:b9:ff:c6:4e:65:a7:cb:0b:
         b0:fd:c0:7d:c1:ed:f9:e4:61:ba:c9:56:50:ef:f1:be:7e:78:
         f5:ec:aa:de:e4:a6:2b:af:86:27:7c:3f:81:1d:46:12:cc:1b:
         31:dc:b0:51:e5:88:0a:ac:4c:cd:a1:91:a2:bb:f9:9c:2f:0b:
         5d:c0:02:89:99:18:93:b0:b2:77:bd:b9:fb:4b:48:1d:eb:5f:
         b1:18:8a:8b:25:24:bd:44:88:07:ed:7d:2a:5e:cc:38:e2:8c:
         9c:4e:75:66:c5:fc:42:6a:2c:3d:96:be:f9:ab:40:a9:a4:89:
         ed:a3:34:07:19:b7:ca:57:2d:ad:44:42:63:81:0f:0e:71:90:
         e8:aa:be:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 12:47:46 2022 by LibreSSL & rpki-client.