Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/nEYbIGg9GuFMPxF9IGAS3grRby4.roa (download)

Subject key identifier:   9C:46:1B:20:68:3D:1A:E1:4C:3F:11:7D:20:60:12:DE:0A:D1:6F:2E 
Authority key identifier: EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
asID:                     AS1239
Prefixes:
    1: 146.19.149.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/nEYbIGg9GuFMPxF9IGAS3grRby4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16380688 (0xf9f310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eba85586b991cf70e0af19c03a4376e27d026f43
        Validity
            Not Before: Mar  7 17:31:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9c461b20683d1ae14c3f117d206012de0ad16f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fd:3b:11:1c:d5:f9:57:5e:af:02:14:90:76:
                    40:04:34:b2:6c:ef:3b:95:c6:eb:13:36:4d:60:df:
                    0e:4a:21:27:5e:92:75:4f:13:a1:93:ba:27:d1:8a:
                    b5:8c:1f:69:22:9f:95:c2:aa:be:a5:c8:3a:68:d8:
                    59:c2:ab:87:fa:42:7d:bb:d6:22:c9:54:75:60:f6:
                    61:fb:36:92:9a:73:40:72:2b:ea:02:81:6e:9d:b8:
                    65:a9:85:c9:81:24:5c:bb:56:dd:86:96:f8:00:69:
                    e1:50:48:32:11:dd:95:c5:50:6a:88:a4:c7:0f:04:
                    5c:a4:c1:79:0a:d5:1d:4c:03:43:ac:71:7f:ba:19:
                    b5:fd:d5:41:4a:d6:92:61:22:48:fd:5f:47:ab:64:
                    0a:d5:41:09:0c:92:1d:86:cb:c8:fa:3a:b5:95:2e:
                    8c:36:21:62:f2:ab:45:c6:bf:ee:10:99:17:1e:7c:
                    bd:f1:ba:47:7f:a1:b8:66:b0:ad:8d:e0:a9:d0:09:
                    9f:3e:6e:e7:63:88:ee:9e:c9:c6:7f:92:b9:9f:6d:
                    df:5d:cd:5f:d0:76:c8:01:bb:0b:04:e7:91:76:c0:
                    7b:65:4b:b9:02:65:6b:c4:43:3a:34:d0:9f:bd:45:
                    f8:66:a1:56:0d:25:52:e2:9e:b7:9a:f4:10:27:a7:
                    cf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9C:46:1B:20:68:3D:1A:E1:4C:3F:11:7D:20:60:12:DE:0A:D1:6F:2E
            X509v3 Authority Key Identifier: 
                keyid:EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/nEYbIGg9GuFMPxF9IGAS3grRby4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/66hVhrmRz3DgrxnAOkN24n0Cb0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:2b:ef:f1:01:b6:a4:59:b7:b3:77:49:be:88:5d:ce:31:76:
         25:53:83:d7:0b:91:80:ae:12:53:33:f9:22:7c:ac:36:f5:a3:
         9a:7d:d5:9f:45:66:0e:2f:7b:38:fe:ad:49:6c:b1:cf:0b:ec:
         2f:af:38:65:95:f1:4f:e5:26:2b:5f:4b:2d:52:9a:65:79:3b:
         76:60:dd:04:11:f4:1b:26:5a:bb:9a:73:ad:9c:f4:ee:dc:81:
         3f:a1:4d:ec:fa:69:a3:79:64:df:8b:dd:f7:10:81:0a:40:88:
         8f:a8:4d:0e:1c:4e:08:d3:ed:19:96:1f:3c:b8:8c:85:26:d1:
         52:ac:ca:69:f1:f8:ee:87:c0:5c:65:0e:eb:38:06:db:08:11:
         a4:39:2a:59:43:8c:da:9e:97:17:e2:93:93:c6:a1:d5:fe:eb:
         04:52:82:88:a9:87:85:4c:02:46:61:38:82:3d:70:50:99:ed:
         2f:9c:ba:34:fe:ba:b1:bc:cb:51:29:92:d0:7e:3e:f5:23:0e:
         3c:d4:d1:b5:3a:24:9e:20:2c:44:dc:f6:fa:13:3b:14:3f:9b:
         b2:d0:b9:39:a9:76:15:18:34:3d:b0:de:1e:1d:e6:b9:d3:c7:
         5a:1d:36:54:3f:7d:83:92:c9:51:ca:bc:4d:15:44:05:dd:6c:
         58:a6:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Mar 7 20:46:33 2022 by LibreSSL & rpki-client.