Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/KsTyOD9bAyTEnU5n6V5tNBKgJtI.roa (download)

Subject key identifier:   2A:C4:F2:38:3F:5B:03:24:C4:9D:4E:67:E9:5E:6D:34:12:A0:26:D2 
Authority key identifier: BC:FC:12:C4:99:CE:B1:C6:12:04:62:53:26:F0:0E:DA:7B:52:57:D0
asID:                     AS1239
Prefixes:
    1: 185.161.123.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/KsTyOD9bAyTEnU5n6V5tNBKgJtI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19637672 (0x12ba5a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfc12c499ceb1c61204625326f00eda7b5257d0
        Validity
            Not Before: Jan  1 11:57:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2ac4f2383f5b0324c49d4e67e95e6d3412a026d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:81:63:33:eb:16:cf:f6:50:d8:01:3c:bb:c3:
                    97:d2:56:35:fe:14:c7:6d:15:44:f5:12:37:7f:90:
                    be:48:88:9a:01:51:a1:99:1c:d7:6d:1b:c6:e3:2f:
                    ea:65:9e:b6:1b:fe:73:96:c0:ec:98:37:ad:8f:18:
                    79:04:cb:f9:0b:66:d4:0f:5e:4f:4d:b1:8e:9b:0e:
                    df:a2:a0:31:e3:6f:fa:22:17:fc:fb:d6:09:b3:ff:
                    68:11:eb:6a:91:4c:d4:89:a9:50:f7:2b:57:f1:13:
                    8d:be:fb:8d:7a:c9:07:24:1e:75:dd:89:00:4a:58:
                    3f:6a:75:1f:ec:6d:0e:f3:2b:d6:f1:f4:ab:83:4c:
                    b8:ee:92:35:30:c8:ae:7a:11:3a:b2:34:83:53:87:
                    61:15:37:99:0c:64:2a:32:b6:04:6e:29:80:e8:42:
                    ea:bd:8b:af:2a:ed:73:a1:b7:1a:f3:4a:23:a8:f1:
                    d1:0c:a5:01:98:18:da:de:a2:ab:c1:a4:58:0f:28:
                    9c:ae:78:fb:ef:16:e9:ed:e1:83:13:d5:d2:25:04:
                    45:2c:27:a2:85:f5:32:03:81:9a:0f:b0:51:e4:5e:
                    a7:4d:2f:1f:6f:7d:2c:0f:f4:56:5e:53:a4:21:9b:
                    56:23:f0:31:65:1a:b7:0c:79:2c:94:c6:66:a2:a5:
                    42:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2A:C4:F2:38:3F:5B:03:24:C4:9D:4E:67:E9:5E:6D:34:12:A0:26:D2
            X509v3 Authority Key Identifier: 
                keyid:BC:FC:12:C4:99:CE:B1:C6:12:04:62:53:26:F0:0E:DA:7B:52:57:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPwSxJnOscYSBGJTJvAO2ntSV9A.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/KsTyOD9bAyTEnU5n6V5tNBKgJtI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/vPwSxJnOscYSBGJTJvAO2ntSV9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.161.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:08:b8:57:1c:48:6f:b4:ec:a2:74:73:0f:68:68:43:19:08:
         41:aa:50:d7:6d:fe:be:80:8e:24:1f:4c:97:5d:0d:28:53:ec:
         45:6a:07:d4:2a:1b:f3:73:76:56:d3:84:b3:6d:0b:55:b0:d8:
         f8:f3:00:8e:81:6e:5e:15:c0:1e:3b:24:d9:17:fc:bd:c2:b2:
         12:e2:fa:8a:9e:b5:80:1f:62:68:57:78:93:04:39:26:ae:f1:
         83:0f:fe:e5:40:8a:66:04:3f:2d:a5:6f:64:02:e9:b2:61:b3:
         5c:45:7e:be:70:54:87:4b:8b:d3:77:84:9e:1e:cc:09:9b:7b:
         26:33:47:66:79:b3:41:b0:f6:95:6d:31:34:9b:90:57:ab:44:
         f4:fb:d0:a3:2e:71:32:a9:75:65:ff:07:39:de:02:81:41:05:
         1c:77:68:1e:a6:38:c0:f0:f9:27:a0:60:eb:ec:6a:de:53:41:
         2d:8c:3a:b7:52:34:18:80:16:b1:b4:dd:da:a3:4e:2a:6b:37:
         b2:40:d1:82:31:0c:5d:ee:38:df:df:93:f9:2d:8a:43:49:2c:
         98:6a:ba:fa:26:4a:b1:ce:df:35:17:0e:09:f6:6e:85:1f:08:
         7a:7d:d1:e0:cc:4f:38:c1:8b:f1:25:d5:a9:79:51:05:03:64:
         23:60:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 12:49:03 2022 by LibreSSL & rpki-client.