Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/ac/6a3e2b-5d40-467e-b467-fe3d6ecd4b3c/1/sDCTHen6O1790ECyOWkVd8z9PAU.roa (download)

Subject key identifier:   B0:30:93:1D:E9:FA:3B:5E:FD:D0:40:B2:39:69:15:77:CC:FD:3C:05 
Authority key identifier: 9B:07:0C:07:A2:92:61:81:86:38:5C:C2:04:EC:95:FB:64:AF:5D:19
asID:                     AS1239
Prefixes:
    1: 176.97.195.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/ac/6a3e2b-5d40-467e-b467-fe3d6ecd4b3c/1/sDCTHen6O1790ECyOWkVd8z9PAU.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9575607 (0x921cb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b070c07a292618186385cc204ec95fb64af5d19
        Validity
            Not Before: Jan  1 01:59:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b030931de9fa3b5efdd040b239691577ccfd3c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:97:94:6a:27:12:fe:13:f4:46:00:f8:14:83:
                    e8:c2:66:a2:56:26:7d:b7:cc:73:17:ef:2e:5d:c7:
                    9b:47:25:f3:36:f7:5b:85:11:90:10:65:61:00:99:
                    b7:21:24:ea:ae:ee:80:ba:22:40:5d:6b:3c:19:cd:
                    a9:ce:8b:b4:67:70:3b:da:a1:ca:71:c0:7e:c8:e6:
                    52:ba:47:10:a9:2b:36:36:c0:c0:c9:95:cb:a8:6f:
                    15:ae:f5:af:55:44:bf:5e:a3:e9:06:2d:77:29:12:
                    65:1f:83:f6:2f:a8:0d:a4:50:bf:63:a6:1b:33:fb:
                    97:8f:7d:0a:b6:0b:10:15:f4:fb:db:a9:8a:70:ec:
                    ce:eb:88:5d:1b:3c:cb:b5:cd:f8:41:04:a8:49:7f:
                    23:18:32:8f:87:50:e5:41:8a:76:0f:ae:9d:e9:3a:
                    eb:ba:64:27:e4:2c:72:1c:c0:69:9b:a6:36:de:49:
                    12:2f:03:3d:a3:9b:80:0c:cd:63:77:58:a7:11:63:
                    f7:cd:44:e0:1d:d6:8a:8c:c0:c6:7b:1e:03:02:80:
                    da:df:84:76:09:9e:f8:c9:66:32:aa:84:94:87:e5:
                    56:70:12:43:71:7e:41:6a:73:8d:dd:c6:50:29:40:
                    c6:a2:1f:88:1a:ef:85:b6:55:f9:f3:7a:52:f1:c7:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B0:30:93:1D:E9:FA:3B:5E:FD:D0:40:B2:39:69:15:77:CC:FD:3C:05
            X509v3 Authority Key Identifier: 
                keyid:9B:07:0C:07:A2:92:61:81:86:38:5C:C2:04:EC:95:FB:64:AF:5D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwcMB6KSYYGGOFzCBOyV-2SvXRk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a3e2b-5d40-467e-b467-fe3d6ecd4b3c/1/sDCTHen6O1790ECyOWkVd8z9PAU.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a3e2b-5d40-467e-b467-fe3d6ecd4b3c/1/mwcMB6KSYYGGOFzCBOyV-2SvXRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:e3:10:1c:c6:03:f2:d0:62:40:a9:54:e8:71:a4:ce:8d:8e:
         0f:7b:93:aa:df:1d:1b:d6:c6:13:99:62:17:dd:a0:7f:90:80:
         49:54:85:26:8d:d8:ce:b8:00:8e:c3:0c:c1:c6:0c:89:cd:f5:
         cc:53:a0:f7:a1:f2:da:28:6a:49:6e:98:68:cd:3f:9b:54:2d:
         f5:e9:a5:df:d9:b2:9d:cd:c5:11:72:f4:2d:7e:3a:8b:a5:a0:
         d2:3d:22:42:bc:72:70:8e:30:21:a7:ff:a3:65:62:f8:3f:3a:
         f3:b6:a7:a2:a7:b5:c4:4b:4c:23:8a:89:e4:b4:c7:1f:50:1b:
         d9:92:33:10:20:00:f7:95:e2:9b:ca:ab:84:95:fa:ba:59:78:
         3f:a0:68:e7:03:3b:1f:f6:3b:b1:58:4d:f8:9a:17:7e:43:fb:
         c9:3f:a3:e7:ac:59:38:db:70:29:d6:40:41:1d:ff:cc:4a:4e:
         08:f0:3b:a9:21:c4:41:b4:a2:ef:d7:ee:1e:72:db:34:34:12:
         30:57:db:37:0f:95:67:f1:8e:fd:47:a9:73:89:c2:5a:74:28:
         88:ec:bf:e4:17:c1:f7:a4:51:37:77:d7:88:57:5e:f2:fc:08:
         73:d5:74:31:78:07:7d:4c:be:bb:cf:49:50:bc:de:9c:be:76:
         82:37:cd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 13:11:27 2022 by LibreSSL & rpki-client.