Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/mBP8XgmuA3fecs6M-Y3LZl9uFmE.roa (download)

Subject key identifier:   98:13:FC:5E:09:AE:03:77:DE:72:CE:8C:F9:8D:CB:66:5F:6E:16:61 
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
asID:                     AS1239
Prefixes:
    1: 155.193.2.0/23 maxlen: 23
    2: 155.193.8.0/22 maxlen: 22

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/mBP8XgmuA3fecs6M-Y3LZl9uFmE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63759582 (0x3cce4de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
        Validity
            Not Before: Jan  1 08:04:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9813fc5e09ae0377de72ce8cf98dcb665f6e1661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:f5:37:3b:2a:b8:18:fb:4f:9b:ac:f0:96:
                    9a:3c:66:b1:76:93:c8:8f:9d:36:c9:71:d2:5f:bc:
                    87:4e:7c:1c:0a:27:d5:9b:4e:5d:52:89:9d:a8:88:
                    42:1b:4c:f7:55:84:b2:41:70:48:45:29:94:63:18:
                    fe:49:d0:9b:10:68:6d:14:23:8d:b2:88:ad:f4:3b:
                    9a:14:a1:ac:c9:67:e4:ab:d6:7b:34:19:31:19:d8:
                    35:24:1e:35:1a:0c:7c:e1:49:d9:13:b6:39:0c:1f:
                    c3:7b:92:82:db:a2:6f:c8:93:5c:9e:c2:c9:3e:b3:
                    ef:fc:4c:9e:67:18:b0:b9:c9:a1:60:0a:ec:e9:ab:
                    4c:48:d0:8a:9c:4d:53:a1:68:d9:8c:03:f0:a2:88:
                    79:2f:d6:70:ff:bf:3f:a1:08:4c:34:4d:4d:df:46:
                    ea:bf:84:7e:22:ea:51:96:de:bb:76:fb:b7:a3:e9:
                    e8:3f:81:69:db:63:8f:06:e5:48:d6:65:9f:c5:2f:
                    ae:a2:a7:0e:ab:05:7c:36:e8:87:3a:df:d6:d9:39:
                    92:ac:a7:be:0e:80:2f:c0:83:27:7b:19:e2:b6:10:
                    f3:dc:ba:10:31:d5:79:a2:37:93:ab:7f:4a:ea:9b:
                    98:f9:c9:b2:37:15:e7:47:4f:92:6d:f3:9b:a9:3b:
                    c4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                98:13:FC:5E:09:AE:03:77:DE:72:CE:8C:F9:8D:CB:66:5F:6E:16:61
            X509v3 Authority Key Identifier: 
                keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/mBP8XgmuA3fecs6M-Y3LZl9uFmE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.193.2.0/23
                  155.193.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:e5:75:1e:95:25:6f:87:17:11:fe:21:f1:66:08:95:d0:42:
         93:af:ce:f8:92:13:39:21:84:db:ca:76:68:b7:ce:bd:ad:04:
         d2:a9:e3:83:99:83:94:34:83:49:f6:15:c4:4b:bc:b4:eb:9a:
         c6:98:3d:14:0c:de:00:f6:59:fd:57:8b:4b:cf:3f:a5:fb:d3:
         39:06:76:3a:3d:5c:9b:24:97:8c:ab:99:8a:17:88:30:45:4e:
         56:9c:0c:e5:fe:d8:ce:6b:d4:7e:4c:7b:1d:e7:3b:9a:fc:ed:
         5e:37:7b:7c:7f:8e:5c:5e:2f:64:ac:e0:47:6d:4a:3c:8c:f7:
         ff:2f:e6:6e:66:da:c7:47:8a:50:76:b3:ed:6b:d4:bc:39:fc:
         54:27:4f:4b:13:49:10:73:14:e5:e8:24:f6:89:73:d7:b0:16:
         3e:07:c9:e1:d9:f0:b7:ea:6a:dc:3c:b2:b3:ae:0c:5a:26:b5:
         57:40:05:01:58:83:75:80:b6:a5:05:4e:eb:97:ef:56:db:f4:
         f2:77:2d:1a:2f:02:d2:99:10:b0:02:47:17:e0:fa:67:7e:91:
         df:f8:9f:07:f5:17:7f:c4:f2:75:cc:21:73:36:cb:af:94:ba:
         bc:85:34:b0:a0:94:49:00:0b:24:15:2a:b3:f3:f4:42:31:55:
         9d:67:14:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 12:57:39 2022 by LibreSSL & rpki-client.