Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/BkHcyI2Y7rgk4VwIeknQfS71ePs.roa (download)

Subject key identifier:   06:41:DC:C8:8D:98:EE:B8:24:E1:5C:08:7A:49:D0:7D:2E:F5:78:FB 
Authority key identifier: E9:70:C7:7C:3C:E0:4E:77:34:9A:64:11:CB:73:CF:51:E4:EF:D0:F2
asID:                     AS1239
Prefixes:
    1: 146.19.119.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/BkHcyI2Y7rgk4VwIeknQfS71ePs.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16881420 (0x101970c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e970c77c3ce04e77349a6411cb73cf51e4efd0f2
        Validity
            Not Before: Mar  7 17:31:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0641dcc88d98eeb824e15c087a49d07d2ef578fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8e:ff:62:cd:18:35:3f:95:fb:7b:07:cc:8c:
                    de:26:05:cb:95:fd:53:08:db:84:fd:fe:ae:7d:ba:
                    76:d8:af:85:13:c1:7f:b8:e2:b3:8f:a2:ee:2e:f7:
                    d3:bf:db:97:5b:e7:a9:e2:91:e5:83:b4:9e:ec:32:
                    1b:46:ce:8d:75:ca:1c:2c:d6:7d:82:3d:dc:56:5d:
                    5b:99:00:52:25:56:d7:f0:0f:35:c9:fa:98:99:92:
                    40:21:17:95:1a:7d:06:44:86:ec:8e:a5:5c:38:b3:
                    da:89:a3:29:e3:a9:ea:78:2f:1e:41:76:1b:29:8b:
                    66:f9:cf:f5:fc:49:26:1c:a6:4e:41:07:38:fc:01:
                    cb:60:9b:86:28:3f:8e:0a:1d:f2:0a:9e:2b:50:fc:
                    08:ed:13:5a:55:aa:6e:1c:76:13:56:e7:93:92:c9:
                    c1:6d:03:7e:13:f6:28:2f:81:60:a0:84:fa:8f:09:
                    27:70:b6:71:b3:99:a5:e3:13:1f:ad:5c:26:12:c9:
                    71:41:6f:9b:94:6c:52:72:94:1c:26:c9:cf:34:06:
                    bf:af:d3:05:a2:dc:33:81:d7:00:4d:30:c5:b2:c6:
                    1c:d3:48:05:33:63:2d:d2:23:e3:f3:9d:b9:8b:dd:
                    49:6c:cf:55:7e:8e:b8:53:db:d7:d1:07:5e:89:6d:
                    db:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                06:41:DC:C8:8D:98:EE:B8:24:E1:5C:08:7A:49:D0:7D:2E:F5:78:FB
            X509v3 Authority Key Identifier: 
                keyid:E9:70:C7:7C:3C:E0:4E:77:34:9A:64:11:CB:73:CF:51:E4:EF:D0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XDHfDzgTnc0mmQRy3PPUeTv0PI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/BkHcyI2Y7rgk4VwIeknQfS71ePs.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/6XDHfDzgTnc0mmQRy3PPUeTv0PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:d9:f3:05:b4:7a:00:4b:69:60:68:b8:fc:1b:85:6b:bb:2a:
         0a:92:92:df:65:60:e0:61:f7:c5:0d:d7:f6:83:7a:ad:9e:8d:
         01:bf:3c:29:bb:8f:03:8c:83:ce:e9:d1:9a:0d:e5:4d:dc:9c:
         9e:90:31:ca:d9:7c:22:c9:18:b5:69:78:5a:f1:79:ad:ba:1c:
         c4:a0:59:1e:ba:33:8b:1a:96:10:28:23:df:14:d0:99:2e:da:
         5b:0e:86:01:4e:61:1f:4e:1a:29:2f:3d:b3:1d:cf:42:07:c2:
         7a:45:79:ea:83:2e:ef:8c:ca:07:6b:7a:40:6c:49:ae:9a:05:
         60:ae:b0:b0:ee:e9:bd:1b:1a:4a:86:fc:32:43:09:c3:48:d9:
         ef:98:31:f0:1d:8d:e8:85:85:87:49:29:8e:28:62:18:dc:46:
         42:63:6f:df:37:53:e7:53:b3:09:eb:61:ac:53:13:b3:a0:d4:
         0b:75:cf:a6:b4:f9:6b:9c:9d:6c:37:63:fd:fe:14:67:5d:3a:
         d7:69:76:28:c4:ca:ea:16:dd:0e:8b:f1:00:6f:c8:67:82:17:
         bd:cb:0f:fe:96:70:37:03:0a:2e:da:ef:47:c9:d5:cd:98:6b:
         c5:3a:07:d2:f8:fb:9b:b8:0a:a3:64:15:4e:79:0c:83:b4:14:
         61:0c:f6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Mar 7 20:35:50 2022 by LibreSSL & rpki-client.