Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/73/3363c0-63cc-4588-a03b-fdd081e779de/1/x9QAOAgIUCOkxWNgGgLM1dwDgrg.roa (download)

Subject key identifier:   C7:D4:00:38:08:08:50:23:A4:C5:63:60:1A:02:CC:D5:DC:03:82:B8 
Authority key identifier: DF:22:A4:AB:B9:33:9F:65:E8:1F:87:1F:C4:54:99:5F:5B:F2:A0:16
asID:                     AS1239
Prefixes:
    1: 212.6.63.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/73/3363c0-63cc-4588-a03b-fdd081e779de/1/x9QAOAgIUCOkxWNgGgLM1dwDgrg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20725895 (0x13c4087)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df22a4abb9339f65e81f871fc454995f5bf2a016
        Validity
            Not Before: Jan  1 02:01:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c7d4003808085023a4c563601a02ccd5dc0382b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b4:d9:91:bd:2e:27:09:f4:2e:d1:46:2d:22:
                    19:45:00:d9:64:7c:10:1a:14:22:56:a6:09:cc:99:
                    61:34:6e:da:75:53:e4:87:5c:ba:1d:f1:5b:9c:b4:
                    1d:b2:16:4a:7f:12:8e:cb:e5:a9:5a:53:ab:d9:25:
                    45:50:91:11:10:fa:3a:30:3e:89:77:3f:c8:17:bf:
                    26:8a:50:84:02:2c:0f:68:55:09:38:60:3e:ec:04:
                    b6:d7:3e:98:fb:cc:78:bd:d9:90:ef:6e:c6:10:3c:
                    b7:dc:c3:4f:76:bf:a5:82:43:3a:0e:91:ef:87:76:
                    16:16:ee:08:cc:41:7d:43:9b:65:b5:1a:1a:d6:93:
                    64:6b:3b:93:f0:37:01:4a:01:05:ef:fb:b5:7a:db:
                    a6:16:1d:28:ad:05:42:48:14:3a:2e:e6:ac:fb:f9:
                    93:05:ac:47:55:45:59:fb:65:14:c4:b2:6d:f9:2c:
                    9d:63:5e:ef:00:97:0e:b4:14:89:bb:0e:5f:c1:7e:
                    82:d4:4a:3c:69:5f:d7:75:b8:1a:a2:a1:9e:3a:b8:
                    35:5e:42:96:16:4b:e1:63:3e:5d:60:92:99:49:b4:
                    9b:46:71:58:a5:cf:08:4b:12:c8:a0:e5:68:98:e0:
                    4d:b9:2e:f5:85:37:88:8f:d4:b2:63:b2:35:05:20:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C7:D4:00:38:08:08:50:23:A4:C5:63:60:1A:02:CC:D5:DC:03:82:B8
            X509v3 Authority Key Identifier: 
                keyid:DF:22:A4:AB:B9:33:9F:65:E8:1F:87:1F:C4:54:99:5F:5B:F2:A0:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3yKkq7kzn2XoH4cfxFSZX1vyoBY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3363c0-63cc-4588-a03b-fdd081e779de/1/x9QAOAgIUCOkxWNgGgLM1dwDgrg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3363c0-63cc-4588-a03b-fdd081e779de/1/3yKkq7kzn2XoH4cfxFSZX1vyoBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.6.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:8c:47:d5:8b:c6:71:43:0d:7c:ce:e6:3b:1a:96:69:a4:15:
         87:56:e5:10:2a:10:f5:0f:c0:97:70:0e:4f:39:d1:ad:0f:71:
         12:eb:20:52:8e:01:97:59:11:a7:2f:49:bb:6e:7c:1a:81:be:
         10:fb:a5:46:39:57:26:d5:d1:aa:26:a6:e9:89:e8:e6:24:3f:
         66:f3:6c:6b:11:c2:06:08:6a:c1:c1:5a:2c:0c:61:c1:68:e4:
         64:1f:8b:27:5e:b7:17:d8:8b:df:fc:87:f0:61:e4:cb:b3:2b:
         54:7d:ca:8f:dd:a1:a9:79:25:7b:52:a0:4c:ea:cd:45:e8:c9:
         16:fd:4e:d8:50:f8:c3:37:38:d4:c5:3a:0d:8f:b2:fb:d5:a3:
         a7:cb:05:94:83:88:84:78:a9:0f:97:41:2d:bd:cb:8e:2a:99:
         90:ca:e9:76:03:c4:4f:81:12:66:26:65:a3:87:a1:5d:a8:ba:
         e4:e2:95:dd:b7:6f:22:83:55:c6:7f:1f:2a:f8:63:fd:d9:2e:
         e3:0c:bd:51:ba:c7:6f:98:81:58:2c:fd:14:d2:a6:c4:36:4e:
         01:44:69:e7:fc:34:b1:72:4c:fc:7a:08:42:37:e8:0f:48:51:
         f3:1d:b9:a4:0c:b2:e4:f8:b8:9f:ca:cc:8b:8d:5b:e2:5a:02:
         85:ba:5d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 12:57:06 2022 by LibreSSL & rpki-client.