Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/55/d8f6ab-1c9e-482d-8298-4b150e99834a/1/G2GZNvT8siHcuSoPanCgHmbk1EM.roa (download)

Subject key identifier:   1B:61:99:36:F4:FC:B2:21:DC:B9:2A:0F:6A:70:A0:1E:66:E4:D4:43 
Authority key identifier: 40:1C:09:FF:E7:4B:2B:C8:12:EC:95:A2:BD:D1:15:61:02:3D:17:77
asID:                     AS1239
Prefixes:
    1: 62.233.36.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/55/d8f6ab-1c9e-482d-8298-4b150e99834a/1/G2GZNvT8siHcuSoPanCgHmbk1EM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9590623 (0x92575f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=401c09ffe74b2bc812ec95a2bdd11561023d1777
        Validity
            Not Before: Jan  1 02:55:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1b619936f4fcb221dcb92a0f6a70a01e66e4d443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:a1:9f:5d:b8:00:dd:4a:57:b3:f0:07:88:
                    64:af:0e:79:97:e6:63:eb:b3:68:a2:16:4e:9c:20:
                    0e:cd:9a:d2:46:69:b5:92:53:29:a1:84:ff:ec:03:
                    bb:3b:19:18:86:c8:29:c4:df:67:b3:72:1c:ad:93:
                    7f:10:b9:da:21:78:45:1e:bb:eb:ba:67:a2:a0:c2:
                    c7:cd:45:02:5f:b4:10:31:d2:09:4b:2a:96:8a:bb:
                    ca:51:e0:f9:c9:cd:3b:32:ea:ac:f1:dd:ae:c7:99:
                    36:8e:fa:33:3e:c2:b3:16:2d:65:e4:0e:a4:84:b9:
                    24:f5:c8:aa:8b:ea:5f:01:e1:b2:8b:54:9f:09:c6:
                    05:c7:71:e5:b3:5f:4c:89:1e:43:ef:03:88:40:d0:
                    0f:bd:6a:7a:c0:75:31:b1:e8:ce:5a:b9:43:82:71:
                    a0:44:3c:1e:6a:bd:6b:a3:3b:84:32:40:16:43:92:
                    ad:de:e6:84:df:55:e4:52:9d:97:4e:e0:9c:b3:24:
                    7d:d3:1b:2f:19:3d:f5:93:9c:39:52:b2:78:b0:f0:
                    5e:6f:fb:81:22:81:e7:8f:35:af:27:8e:ad:19:dc:
                    12:c7:27:f6:c0:5e:80:b5:5e:da:89:8b:f0:b3:ab:
                    20:32:3b:2b:90:34:8f:d9:d0:8b:af:04:f6:79:66:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1B:61:99:36:F4:FC:B2:21:DC:B9:2A:0F:6A:70:A0:1E:66:E4:D4:43
            X509v3 Authority Key Identifier: 
                keyid:40:1C:09:FF:E7:4B:2B:C8:12:EC:95:A2:BD:D1:15:61:02:3D:17:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBwJ_-dLK8gS7JWivdEVYQI9F3c.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d8f6ab-1c9e-482d-8298-4b150e99834a/1/G2GZNvT8siHcuSoPanCgHmbk1EM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d8f6ab-1c9e-482d-8298-4b150e99834a/1/QBwJ_-dLK8gS7JWivdEVYQI9F3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:31:ec:fc:17:51:bd:a3:73:c1:24:fb:09:88:45:5f:e6:2f:
         a6:99:6f:97:12:5b:50:69:3d:ec:5e:87:cc:b0:53:28:e4:84:
         9c:d3:52:9c:08:5f:54:d0:18:12:f3:80:3a:9c:dd:12:1c:de:
         06:50:f3:b3:86:a9:87:67:2f:29:cd:c4:25:7f:7c:83:bc:ad:
         c8:21:45:60:a3:19:74:8f:2e:f5:89:a9:b4:71:40:f3:25:c3:
         f6:24:d5:b8:c8:a1:9b:8e:3a:8c:f4:fe:ff:49:ac:bd:ef:fc:
         9b:3f:77:d3:62:77:cb:e5:a4:16:42:74:32:61:bf:f7:11:68:
         89:be:92:a6:e2:9c:56:18:a1:91:26:db:99:82:83:67:fc:a7:
         2b:1f:7f:d9:7a:fc:0d:d4:06:d3:e6:fb:85:f5:d5:99:9b:3c:
         67:72:16:d2:71:7d:d4:4d:7a:4f:ce:47:5b:2f:0b:64:c2:ad:
         3c:62:80:72:84:45:c4:21:93:9c:bc:1d:75:7e:68:9a:00:e4:
         18:a6:25:95:76:f0:93:2e:4b:95:29:01:cc:6f:3c:5c:8d:0c:
         22:5e:c9:5d:97:66:87:f5:aa:20:a5:23:fc:75:c5:97:22:94:
         c0:ef:dc:74:68:29:4f:a1:e8:68:cf:53:d7:00:ee:c1:59:47:
         86:b5:66:f8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAJJXXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MDFjMDlmZmU3NGIyYmM4MTJlYzk1YTJiZGQxMTU2MTAyM2QxNzc3MB4XDTIyMDEw
MTAyNTUwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWI2MTk5MzZmNGZj
YjIyMWRjYjkyYTBmNmE3MGEwMWU2NmU0ZDQ0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALDGoZ9duADdSlez8AeIZK8OeZfmY+uzaKIWTpwgDs2a0kZp
tZJTKaGE/+wDuzsZGIbIKcTfZ7NyHK2TfxC52iF4RR6767pnoqDCx81FAl+0EDHS
CUsqloq7ylHg+cnNOzLqrPHdrseZNo76Mz7CsxYtZeQOpIS5JPXIqovqXwHhsotU
nwnGBcdx5bNfTIkeQ+8DiEDQD71qesB1MbHozlq5Q4JxoEQ8Hmq9a6M7hDJAFkOS
rd7mhN9V5FKdl07gnLMkfdMbLxk99ZOcOVKyeLDwXm/7gSKB5481ryeOrRncEscn
9sBegLVe2omL8LOrIDI7K5A0j9nQi68E9nlm0b8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQbYZk29PyyIdy5Kg9qcKAeZuTUQzAfBgNVHSMEGDAWgBRAHAn/50sryBLs
laK90RVhAj0XdzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FCd0pfLWRMSzhnUzdKV2l2ZEVWWVFJOUYzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTUvZDhmNmFiLTFjOWUtNDgyZC04Mjk4LTRiMTUwZTk5ODM0YS8x
L0cyR1pOdlQ4c2lIY3VTb1BhbkNnSG1iazFFTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUv
ZDhmNmFiLTFjOWUtNDgyZC04Mjk4LTRiMTUwZTk5ODM0YS8xL1FCd0pfLWRMSzhn
UzdKV2l2ZEVWWVFJOUYzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7pJDANBgkqhkiG9w0BAQsFAAOC
AQEAgDHs/BdRvaNzwST7CYhFX+YvpplvlxJbUGk97F6HzLBTKOSEnNNSnAhfVNAY
EvOAOpzdEhzeBlDzs4aph2cvKc3EJX98g7ytyCFFYKMZdI8u9YmptHFA8yXD9iTV
uMihm446jPT+/0msve/8mz9302J3y+WkFkJ0MmG/9xFoib6SpuKcVhihkSbbmYKD
Z/ynKx9/2Xr8DdQG0+b7hfXVmZs8Z3IW0nF91E16T85HWy8LZMKtPGKAcoRFxCGT
nLwddX5omgDkGKYllXbwky5LlSkBzG88XI0MIl7JXZdmh/WqIKUj/HXFlyKUwO/c
dGgpT6HoaM9T1wDuwVlHhrVm+A==
-----END CERTIFICATE-----

Generated at Sun Jan 30 12:40:17 2022 by LibreSSL & rpki-client.