Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/43/0f8525-0fbc-4402-9a3e-cf2743a9d962/1/6g0iW01iV8ji994B37nUMCw_Tpg.roa (download)

Subject key identifier:   EA:0D:22:5B:4D:62:57:C8:E2:F7:DE:01:DF:B9:D4:30:2C:3F:4E:98 
Authority key identifier: DD:00:68:37:39:33:FF:0F:6E:5D:FE:66:7A:55:C8:D5:57:D3:45:5C
asID:                     AS1239
Prefixes:
    1: 193.35.229.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/43/0f8525-0fbc-4402-9a3e-cf2743a9d962/1/6g0iW01iV8ji994B37nUMCw_Tpg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15600435 (0xee0b33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd0068373933ff0f6e5dfe667a55c8d557d3455c
        Validity
            Not Before: Jan  1 10:02:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea0d225b4d6257c8e2f7de01dfb9d4302c3f4e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ed:a5:7c:31:62:f8:9e:60:13:90:da:ae:af:
                    d2:43:14:c7:a9:88:e8:b9:e1:29:86:48:ae:06:00:
                    c2:b7:2b:cf:04:77:f0:09:9e:42:99:3a:50:57:0b:
                    17:7a:a3:36:6d:ab:2f:f8:12:49:50:94:1f:a0:67:
                    20:51:50:de:18:58:de:b5:fa:82:0c:3e:5a:2f:46:
                    f3:12:c8:87:7d:c8:1d:35:9d:1c:39:4d:a2:a4:7a:
                    76:b9:b7:0f:34:e3:cd:78:37:42:49:b0:a2:8b:98:
                    16:f9:2e:0e:71:71:e0:e2:48:05:2d:84:93:d1:ba:
                    e1:ff:1b:4f:03:ae:74:66:84:7c:38:84:1f:75:78:
                    76:f4:ef:57:64:4f:78:14:73:c9:a1:8a:c7:1b:f5:
                    b9:73:8b:10:e2:90:88:4f:18:7c:a0:69:6f:a6:ef:
                    02:47:a7:2a:9e:5d:58:d4:b6:da:b2:de:c1:96:4d:
                    8b:c7:3f:e8:17:52:cf:d8:e2:bf:fe:18:97:7e:42:
                    c0:3a:69:a0:f1:52:16:c6:d7:65:e3:43:d4:14:ad:
                    57:ad:9c:95:9a:24:de:57:9a:84:65:53:6e:90:bb:
                    70:ab:d2:0f:a5:04:48:45:f1:ee:a0:b7:ee:a6:ff:
                    65:e9:a4:7e:a2:f4:58:5b:cc:cf:33:63:7c:c1:27:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EA:0D:22:5B:4D:62:57:C8:E2:F7:DE:01:DF:B9:D4:30:2C:3F:4E:98
            X509v3 Authority Key Identifier: 
                keyid:DD:00:68:37:39:33:FF:0F:6E:5D:FE:66:7A:55:C8:D5:57:D3:45:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QBoNzkz_w9uXf5melXI1VfTRVw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0f8525-0fbc-4402-9a3e-cf2743a9d962/1/6g0iW01iV8ji994B37nUMCw_Tpg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0f8525-0fbc-4402-9a3e-cf2743a9d962/1/3QBoNzkz_w9uXf5melXI1VfTRVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.35.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:12:b7:f3:b8:44:eb:b7:29:c5:0c:8a:94:28:12:4f:70:87:
         ef:bf:ce:af:17:d2:81:5c:f0:c5:d8:2a:fc:59:51:5b:e5:0e:
         6a:14:1f:92:92:29:56:4d:ea:a2:42:cc:2f:d7:89:97:1e:95:
         ac:de:12:d0:7e:88:2a:20:9f:06:ba:c6:53:84:67:3c:96:78:
         94:17:b4:ea:49:da:1a:65:d5:8c:be:df:f1:47:ba:9f:c1:88:
         a4:d0:15:7b:7e:9a:60:30:c9:20:ac:41:68:70:c1:fe:08:72:
         79:25:1c:c3:fc:49:c2:22:c5:d4:ca:6f:b0:8f:9e:ff:1a:f7:
         7c:57:ba:aa:77:c7:70:03:c3:31:32:6c:e6:4c:cc:a2:75:69:
         ac:ca:6e:4b:5e:26:52:ea:3d:03:36:bf:6d:9c:24:a5:b4:6d:
         e1:c2:b5:68:fb:95:dc:33:7c:57:1f:d7:5c:92:52:92:a2:bb:
         53:52:99:76:80:98:1e:18:ea:ab:8d:5a:00:aa:f5:b7:78:4c:
         5e:98:b5:a4:bf:f3:1a:1e:b5:a9:40:7f:1a:a0:b3:6f:51:4a:
         0b:52:64:28:b9:82:be:8f:7f:bb:40:8e:6c:01:30:ff:a1:4c:
         1e:18:f1:56:08:ce:2f:97:f7:88:ce:f1:d2:f3:29:66:65:49:
         5e:66:ea:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 12:34:55 2022 by LibreSSL & rpki-client.