Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/2fgJrBORcFyADY5vYrGdGEzamR8.roa (download)

Subject key identifier:   D9:F8:09:AC:13:91:70:5C:80:0D:8E:6F:62:B1:9D:18:4C:DA:99:1F 
Authority key identifier: EA:B6:71:4D:71:91:81:EB:FC:CD:5D:CD:E6:CD:62:95:D7:78:DE:D9
asID:                     AS1239
Prefixes:
    1: 188.244.118.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/2fgJrBORcFyADY5vYrGdGEzamR8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13493656 (0xcde598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab6714d719181ebfccd5dcde6cd6295d778ded9
        Validity
            Not Before: Jan  1 09:56:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d9f809ac1391705c800d8e6f62b19d184cda991f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ff:30:69:e8:c3:13:df:ba:2e:81:3b:e5:fc:
                    d2:5f:47:b8:6a:7c:c4:76:a1:5d:e2:c1:8a:7f:2d:
                    09:0e:da:f3:25:1d:13:ec:9a:0f:22:77:bf:ab:e3:
                    7d:46:86:dc:56:52:43:6f:0e:b5:39:7a:91:7a:0f:
                    bd:10:c0:24:cd:b4:c1:03:1d:b3:1a:ef:8e:39:23:
                    2f:42:42:4c:20:11:83:ad:0d:af:60:4c:42:89:91:
                    67:d4:a0:13:43:d3:35:0b:03:e1:1a:80:05:d3:ca:
                    2a:6f:fd:15:98:01:2f:73:d6:a8:71:38:84:10:17:
                    08:94:7c:f6:bc:0e:e9:af:e2:fb:51:60:66:51:88:
                    b6:cc:bc:5e:4d:9a:2e:09:67:a3:50:5c:46:3b:e4:
                    b0:bb:64:c0:ed:dd:84:36:7a:3f:8c:e0:10:2e:00:
                    64:55:07:17:c4:f0:30:8b:6f:9e:49:21:84:59:9b:
                    a2:93:04:0e:d6:bc:90:c0:4a:91:24:6b:b0:cb:cd:
                    9c:1c:76:b0:46:c5:5a:cd:6d:67:12:71:a6:65:78:
                    61:28:53:64:39:89:41:33:e2:a7:ec:af:d0:db:ff:
                    ca:34:ed:4f:a7:dd:57:cc:e6:9a:86:24:a6:0e:ce:
                    b3:bc:85:6c:e0:d8:11:10:4a:c9:d0:11:6e:5a:b4:
                    3b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D9:F8:09:AC:13:91:70:5C:80:0D:8E:6F:62:B1:9D:18:4C:DA:99:1F
            X509v3 Authority Key Identifier: 
                keyid:EA:B6:71:4D:71:91:81:EB:FC:CD:5D:CD:E6:CD:62:95:D7:78:DE:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rZxTXGRgev8zV3N5s1ildd43tk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/2fgJrBORcFyADY5vYrGdGEzamR8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/6rZxTXGRgev8zV3N5s1ildd43tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:e3:58:2b:12:c7:12:1c:ce:06:4d:10:6f:c7:fd:dd:ed:c6:
         2d:1f:74:9a:dc:c4:a3:25:bf:29:c5:92:78:f6:ef:70:d9:12:
         e6:d4:9f:7c:5f:e8:80:54:ce:2b:6a:90:6d:9c:4e:8c:d0:9c:
         72:d6:7e:eb:9c:d1:79:73:01:33:42:60:ee:bd:6d:12:d4:3e:
         77:85:cc:65:0c:20:fc:5d:c7:d2:ac:fc:5f:bd:18:e0:6f:a4:
         9f:28:6e:3c:33:f0:9b:96:e2:85:1d:0d:91:aa:15:37:d2:83:
         19:20:98:04:13:6f:67:3f:be:24:ce:d5:4d:3a:2c:7c:8f:da:
         a7:3a:9e:10:26:ea:45:e5:5f:15:fb:6a:b9:1a:af:a6:1c:4c:
         ba:c9:78:27:95:50:81:2f:fd:91:ef:3c:75:8b:d9:ba:47:ee:
         6f:3f:f8:fa:76:99:72:d2:ef:cd:05:ea:ae:ac:4e:ca:9a:cf:
         24:0c:9e:87:3f:fd:66:a3:70:c7:ba:f4:a4:5d:7f:4d:22:36:
         a1:8f:2f:6b:0b:bc:38:b3:43:72:ce:05:78:2d:98:56:c7:f4:
         2b:f8:46:59:7b:41:a1:c6:16:eb:bb:a5:10:ea:9d:7e:e8:42:
         5f:3f:56:ff:e8:e0:b5:01:a7:08:33:0b:df:ad:89:29:26:08:
         85:74:be:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 13:14:01 2022 by LibreSSL & rpki-client.