Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/7c/2fbf9b-308a-49ca-9b0f-ad6aaecca27f/1/zNBRSD42HVP7-jZlL_u2RKUS4gI.roa (download)

Subject key identifier:   CC:D0:51:48:3E:36:1D:53:FB:FA:36:65:2F:FB:B6:44:A5:12:E2:02 
Authority key identifier: A7:E8:85:B6:DB:AD:67:EA:5C:1A:9A:55:EE:14:89:A0:7C:BF:95:42
asID:                     AS1239
Prefixes:
    1: 217.119.133.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/7c/2fbf9b-308a-49ca-9b0f-ad6aaecca27f/1/zNBRSD42HVP7-jZlL_u2RKUS4gI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11432265 (0xae7149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e885b6dbad67ea5c1a9a55ee1489a07cbf9542
        Validity
            Not Before: Jan  1 06:58:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ccd051483e361d53fbfa36652ffbb644a512e202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bd:60:04:39:57:0c:b0:b9:4a:19:ed:08:0a:
                    e9:c3:b5:dc:76:48:d8:9d:13:ba:70:a0:e4:f6:c9:
                    68:a0:f1:b6:b7:ca:83:cd:e0:b0:1b:aa:da:aa:5b:
                    b5:e1:7e:eb:a1:6f:f4:f2:d6:79:fa:74:ae:72:0c:
                    61:6c:99:83:aa:b0:6e:54:eb:3d:17:c4:bc:c9:d9:
                    99:69:c7:61:25:d7:f5:11:93:c9:9a:e0:94:cf:e2:
                    e8:aa:ed:b4:b4:68:71:d7:f5:45:6d:d0:e6:56:53:
                    45:c7:57:4f:6b:74:ee:79:7d:85:1a:dc:c2:10:a3:
                    b6:9b:03:04:46:f4:9c:50:08:d9:d5:0d:cb:8a:fe:
                    97:ef:69:25:e0:47:b4:fa:22:57:61:8b:be:99:dd:
                    cc:f5:f0:7a:5c:db:33:09:04:c2:f6:8f:77:45:71:
                    20:af:a6:59:06:aa:f0:e6:ae:ea:93:82:79:97:ec:
                    bc:d3:d5:22:61:4b:73:c8:42:87:10:86:1f:2e:6e:
                    79:ef:b0:1f:e2:78:79:39:eb:f9:f4:52:f2:a1:c5:
                    9f:c6:be:18:e2:5b:7d:2e:f7:e6:1e:5b:c6:51:71:
                    3c:20:e5:b7:69:8c:ab:af:74:47:08:04:56:12:95:
                    8b:5c:b7:a4:e2:61:a5:56:58:64:f7:58:f6:24:ea:
                    a6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CC:D0:51:48:3E:36:1D:53:FB:FA:36:65:2F:FB:B6:44:A5:12:E2:02
            X509v3 Authority Key Identifier: 
                keyid:A7:E8:85:B6:DB:AD:67:EA:5C:1A:9A:55:EE:14:89:A0:7C:BF:95:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-iFttutZ-pcGppV7hSJoHy_lUI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fbf9b-308a-49ca-9b0f-ad6aaecca27f/1/zNBRSD42HVP7-jZlL_u2RKUS4gI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fbf9b-308a-49ca-9b0f-ad6aaecca27f/1/p-iFttutZ-pcGppV7hSJoHy_lUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.119.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:f1:ae:40:7f:a6:47:a7:1a:9a:14:ab:4d:c0:7e:37:f0:6f:
         ed:bc:51:af:20:0f:ca:22:18:6b:b6:6c:5e:9d:ed:fb:bf:4d:
         28:35:3d:2f:00:69:c3:cd:06:7d:e5:80:47:8a:3d:89:16:87:
         b1:37:7c:51:a4:03:18:ba:ac:f1:6a:37:21:be:7f:ef:16:a6:
         c5:bf:00:b4:e3:df:39:68:3d:7f:63:8d:af:0f:48:ef:09:0d:
         56:5f:3c:aa:fc:fc:73:1a:44:3e:bd:ec:4d:8c:11:88:b1:e5:
         68:a4:fb:ee:c3:5d:0e:25:a0:67:13:1e:29:79:21:6c:77:83:
         f5:16:4d:10:e4:e6:41:83:45:33:0a:d3:c2:8a:66:85:b8:d2:
         43:f3:1c:1e:7a:52:d7:8b:df:55:ca:01:e6:6c:c8:6e:17:4e:
         5c:5c:54:0e:ce:5e:b9:5b:bf:64:95:3b:f7:1a:fd:cc:22:ec:
         a1:63:5b:95:d1:af:cc:8e:50:8e:06:b5:69:5a:e4:ad:fe:4a:
         cd:1f:a6:9e:e1:92:f9:50:d0:db:5e:ad:a1:70:0b:0a:f5:77:
         e6:22:16:cd:62:11:f9:2a:30:98:1e:4b:ca:c9:2f:c1:38:e3:
         e1:03:45:44:aa:33:be:31:10:71:b1:01:57:4b:f1:6d:7c:aa:
         50:40:d9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 12:59:21 2022 by LibreSSL & rpki-client.