Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a7/5c2a92-9762-4450-83e7-e0cca5e20f4f/1/KVXmifvAPMWjD06KPRHkUL-eV3Y.roa (download)

Subject key identifier:   29:55:E6:89:FB:C0:3C:C5:A3:0F:4E:8A:3D:11:E4:50:BF:9E:57:76 
Authority key identifier: 8C:3D:7D:88:5B:9F:CF:06:C8:8F:0F:E2:AF:10:E3:AE:97:FF:5B:6E
asID:                     AS1239
Prefixes:
    1: 195.225.98.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a7/5c2a92-9762-4450-83e7-e0cca5e20f4f/1/KVXmifvAPMWjD06KPRHkUL-eV3Y.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19382269 (0x127bffd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c3d7d885b9fcf06c88f0fe2af10e3ae97ff5b6e
        Validity
            Not Before: Jan  1 11:53:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2955e689fbc03cc5a30f4e8a3d11e450bf9e5776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:a7:87:70:49:8d:af:9a:19:61:fb:69:1f:
                    45:bc:3d:91:59:7e:b1:5b:a3:bd:90:29:9e:da:e6:
                    74:b8:f6:9c:e4:ca:75:48:fa:95:fe:57:17:97:bd:
                    b7:77:5f:1c:59:ca:eb:26:62:b7:d1:c5:5f:15:d4:
                    6b:4d:5b:80:98:34:b6:ed:7f:6a:48:1d:9b:29:b1:
                    03:f5:6d:a9:46:8a:fc:8f:d6:fc:f2:c7:03:5d:7f:
                    9b:22:f8:e8:bb:98:3f:88:58:f6:8a:3a:52:9b:28:
                    3f:e5:78:91:65:b3:ab:21:3b:a2:14:49:46:c2:1f:
                    07:76:b4:32:6c:f3:d6:d9:d1:fb:0b:31:83:73:94:
                    58:73:53:b3:0d:01:86:a9:f6:98:9c:ee:4d:e3:24:
                    6f:f5:01:3d:93:30:51:d6:6f:ed:75:5d:f5:d3:ba:
                    fe:36:3f:32:22:96:30:eb:bf:36:f2:fc:7d:a5:d0:
                    f3:bb:e1:0b:0f:b7:a9:e9:19:38:8f:69:13:6c:21:
                    3f:d2:10:d5:85:13:23:ed:6e:fb:60:3c:33:cf:f9:
                    13:0b:57:29:d9:e8:f1:a7:f3:40:4d:29:35:9b:eb:
                    11:4c:23:4c:f8:f4:66:44:db:0c:62:5d:c0:44:8d:
                    2e:69:cb:23:17:94:f1:60:c8:9a:69:8a:bf:c7:b3:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                29:55:E6:89:FB:C0:3C:C5:A3:0F:4E:8A:3D:11:E4:50:BF:9E:57:76
            X509v3 Authority Key Identifier: 
                keyid:8C:3D:7D:88:5B:9F:CF:06:C8:8F:0F:E2:AF:10:E3:AE:97:FF:5B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD19iFufzwbIjw_irxDjrpf_W24.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a92-9762-4450-83e7-e0cca5e20f4f/1/KVXmifvAPMWjD06KPRHkUL-eV3Y.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a92-9762-4450-83e7-e0cca5e20f4f/1/jD19iFufzwbIjw_irxDjrpf_W24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.225.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:af:92:f8:91:0f:9c:5d:94:73:da:c8:0e:a1:d6:af:45:ae:
         5f:38:70:13:b3:bc:d0:3b:2f:e5:ca:39:84:c9:2c:d2:02:4c:
         12:be:95:7e:9a:a3:6e:75:d4:d4:88:db:4b:cc:ec:4b:92:27:
         cf:d2:ff:3b:38:99:c5:e9:ea:04:c1:b2:26:a7:62:7e:3e:d8:
         87:54:ec:74:06:ec:48:d9:29:af:88:7e:ea:32:36:d2:ce:df:
         4b:00:87:5d:82:7f:0d:ca:d5:b8:5b:14:28:f5:95:f2:2e:3b:
         b6:96:81:13:0f:74:ba:6b:1c:b7:8d:bc:c7:a7:e8:0a:2a:1c:
         7d:86:63:9e:d4:45:9e:df:c5:0a:6e:6c:22:5a:c2:b9:e4:aa:
         9d:5d:fa:fd:f2:49:f4:31:3a:d0:79:16:5e:c5:fe:61:f3:95:
         f2:a2:47:19:2f:16:7c:1e:06:e6:5d:87:b9:e6:0b:b5:1a:69:
         6a:e5:9c:9d:b5:ee:af:77:47:8d:be:4b:86:b3:ab:5b:5d:60:
         45:e0:bc:e2:8e:43:83:60:02:2d:71:75:1c:7c:38:39:01:f1:
         43:97:3e:eb:df:63:c5:18:cc:25:2f:27:a2:80:6f:0b:98:e0:
         25:54:03:38:cd:6c:55:71:84:62:37:bf:79:88:36:ff:1d:0d:
         90:87:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 13:10:11 2022 by LibreSSL & rpki-client.