Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/MFXwxtlkT7hJWgJ68Poy6aAhEjw.roa (download)

Subject key identifier:   30:55:F0:C6:D9:64:4F:B8:49:5A:02:7A:F0:FA:32:E9:A0:21:12:3C 
Authority key identifier: 7F:F2:20:AB:D6:07:E3:57:BF:B2:5C:2F:7F:D4:8F:CC:6A:B6:6B:88
asID:                     AS1239
Prefixes:
    1: 94.247.139.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/MFXwxtlkT7hJWgJ68Poy6aAhEjw.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17704322 (0x10e2582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff220abd607e357bfb25c2f7fd48fcc6ab66b88
        Validity
            Not Before: Jan  1 01:03:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3055f0c6d9644fb8495a027af0fa32e9a021123c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:35:0c:1c:5c:59:2d:bd:36:e5:65:2d:7e:1d:
                    79:8f:bf:e3:ae:c8:1d:a0:67:58:c3:f7:9c:b7:d1:
                    3c:50:49:3f:f3:13:09:aa:97:3d:a8:f5:2f:7a:c8:
                    d7:1d:65:fa:94:2e:96:cb:8d:21:e1:05:5c:6c:7f:
                    9d:1f:df:97:73:a1:59:db:d0:dd:6f:af:74:8d:66:
                    bd:6b:a0:82:7c:f3:53:9d:da:92:2a:56:a0:df:1c:
                    02:32:3b:94:e4:3a:c1:56:df:53:7c:92:17:97:4c:
                    0a:01:3f:b7:8f:50:80:80:52:ee:41:aa:71:47:58:
                    79:8e:37:fa:e3:24:eb:4d:ab:9b:ed:b2:1b:ea:34:
                    51:fc:dd:e0:fc:3d:40:37:29:52:f1:79:6e:0e:1e:
                    8a:65:4b:4b:70:f6:09:a2:c1:1e:22:03:90:d3:e3:
                    f8:83:86:9c:7b:5a:b8:33:51:2c:f5:38:ab:eb:1e:
                    c5:29:30:43:e0:de:36:b3:2e:2e:85:41:66:c9:73:
                    a1:40:35:79:02:8c:3e:63:9d:eb:73:cb:5f:2d:1c:
                    9e:c2:22:17:03:4f:68:fc:54:2c:1e:99:cf:cf:70:
                    ce:a6:28:0c:76:c7:16:30:44:6f:aa:be:2d:c4:65:
                    66:ae:c1:7c:5d:ca:0a:2f:19:9c:3f:75:5c:ff:c1:
                    65:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                30:55:F0:C6:D9:64:4F:B8:49:5A:02:7A:F0:FA:32:E9:A0:21:12:3C
            X509v3 Authority Key Identifier: 
                keyid:7F:F2:20:AB:D6:07:E3:57:BF:B2:5C:2F:7F:D4:8F:CC:6A:B6:6B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_Igq9YH41e_slwvf9SPzGq2a4g.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/MFXwxtlkT7hJWgJ68Poy6aAhEjw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/f_Igq9YH41e_slwvf9SPzGq2a4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.247.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:9c:e2:43:f0:6e:01:e7:9f:4c:75:81:51:b4:50:75:8f:7f:
         ef:74:b9:33:28:ee:06:ff:f7:a7:5e:cb:f0:54:19:1b:95:38:
         c2:da:5c:82:d5:90:a0:75:a7:83:fb:ec:75:28:d6:67:50:9b:
         29:24:98:ac:05:aa:09:5d:49:da:b4:73:cc:59:2a:83:ab:b0:
         bd:77:28:d5:c5:40:05:b5:0d:88:10:e9:51:5f:91:35:8d:d8:
         ce:6e:db:58:36:9f:74:e4:76:3b:42:a8:4b:c4:9a:42:dd:57:
         1e:f5:c7:40:80:7a:84:af:56:a6:71:38:47:a9:b5:fd:7e:bb:
         be:bc:4d:f3:fd:ec:b8:21:c4:41:59:e6:d3:74:6f:5f:d5:c3:
         d7:d5:04:57:98:d1:31:0c:63:3e:34:f6:fd:72:43:38:56:78:
         f8:4e:06:7d:27:3f:e0:93:ff:c9:60:91:a4:0e:55:30:44:21:
         d6:ce:21:5a:87:d6:ad:14:25:2c:85:ee:9c:fc:af:85:cb:29:
         f1:c6:44:f9:e5:6b:7d:06:8d:1b:fa:0a:05:55:8c:2a:eb:a4:
         ed:18:01:1b:d1:58:f1:6f:4f:8a:3b:28:1c:92:24:76:f5:6d:
         e8:66:1d:11:0a:e7:75:0a:4d:62:0a:78:0f:9f:e0:be:e9:cf:
         ad:40:d6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 13:10:56 2022 by LibreSSL & rpki-client.