Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Ag_8K88Xh9ESDLdFroj7JEemmSk.roa (download)

Subject key identifier:   02:0F:FC:2B:CF:17:87:D1:12:0C:B7:45:AE:88:FB:24:47:A6:99:29 
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
asID:                     AS20473
Prefixes:
    1: 141.11.70.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Ag_8K88Xh9ESDLdFroj7JEemmSk.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56012064 (0x356ad20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Mar  4 11:29:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=020ffc2bcf1787d1120cb745ae88fb2447a69929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:65:d1:77:c2:06:e6:e0:cd:e3:c9:0d:b5:6e:
                    d4:b2:a9:0b:39:a9:74:ff:d7:3d:31:5c:cb:38:87:
                    8b:ad:83:0f:e9:f8:20:0f:bc:25:06:61:0e:8b:d5:
                    b2:d7:78:0e:c8:69:fe:86:80:af:a0:a7:a9:d4:f8:
                    91:76:8d:98:0e:25:60:b3:64:1a:fe:5a:a7:83:4f:
                    d5:cc:34:d6:4d:c0:1e:56:17:81:e9:c8:09:69:21:
                    f7:11:29:45:fa:7c:bf:e8:24:52:83:3e:e9:6e:bd:
                    86:c6:66:f6:43:ec:dd:c8:33:d4:10:42:4f:6d:cd:
                    8a:c3:90:f5:ca:16:98:39:4f:65:ce:48:d4:50:1f:
                    d3:73:6f:93:48:77:3a:22:e1:c7:d6:21:66:dc:fa:
                    4b:03:3a:99:90:f6:cc:bf:d0:78:99:c2:99:5c:7d:
                    1a:45:3c:d8:ad:d2:da:9c:67:11:6c:80:c7:6a:fe:
                    9f:f1:53:fc:4e:6a:e2:5a:35:8d:2f:ba:1e:4b:b9:
                    1b:5a:3f:79:36:45:53:98:1b:15:80:2e:db:b9:50:
                    5a:67:48:0b:46:72:b9:45:e0:b9:6e:c8:a5:af:fb:
                    e8:05:75:f8:c2:f5:91:c2:73:74:99:2f:c2:7f:76:
                    5e:b9:4e:52:45:7b:9a:9b:5f:66:bf:ea:95:4e:e2:
                    39:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                02:0F:FC:2B:CF:17:87:D1:12:0C:B7:45:AE:88:FB:24:47:A6:99:29
            X509v3 Authority Key Identifier: 
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Ag_8K88Xh9ESDLdFroj7JEemmSk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:37:af:4e:01:c6:8b:54:b6:8e:08:46:c0:68:ae:d5:bd:26:
         57:28:8b:1f:cc:77:14:5a:0b:fd:d3:3f:e5:27:48:93:2f:f0:
         00:c0:a7:4d:ca:3f:8e:56:5b:94:a9:05:e0:79:6e:a4:47:30:
         72:4f:dd:2f:9e:66:65:7f:65:08:ab:78:44:39:16:d2:2a:8c:
         68:b7:09:c5:71:e3:34:b7:4e:7b:ee:53:dd:ff:99:2a:75:03:
         ab:84:6b:40:1b:79:d6:f3:f8:ab:e2:27:28:10:10:9b:a6:56:
         79:90:39:1a:3c:de:10:a4:6e:fb:04:76:15:db:aa:a3:eb:75:
         14:36:0f:94:25:6d:6c:f4:8d:27:c4:3b:79:04:c0:e2:38:08:
         02:db:66:79:f9:ad:e5:f3:67:27:5a:6c:86:b6:d6:15:1f:a2:
         28:06:41:e1:59:ef:cf:e8:aa:21:ff:58:32:c3:83:c5:3f:97:
         3f:af:0e:6e:6a:5b:03:0e:d7:75:80:9e:07:62:76:7a:3c:9f:
         15:b6:8f:74:d7:5e:ab:02:db:d0:73:89:01:cd:8e:20:54:9f:
         97:46:2b:b5:18:3f:46:22:72:73:a6:9a:14:45:ce:b8:8d:a3:
         5a:e2:4f:26:e7:17:e8:0c:0d:f2:2d:2d:ea:48:f1:d2:36:76:
         74:62:23:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Mar 4 13:32:44 2022 by LibreSSL & rpki-client.