Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/e8gXpM8S9MQYKR3J1d5VWGpgr8o.roa (download)

Subject key identifier:   7B:C8:17:A4:CF:12:F4:C4:18:29:1D:C9:D5:DE:55:58:6A:60:AF:CA 
Authority key identifier: B5:3E:54:47:CA:06:4E:98:AE:08:35:56:C7:21:D1:4F:2D:9A:6A:52
asID:                     AS1239
Prefixes:
    1: 2.58.95.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/e8gXpM8S9MQYKR3J1d5VWGpgr8o.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75170578 (0x47b0312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53e5447ca064e98ae083556c721d14f2d9a6a52
        Validity
            Not Before: Apr 14 06:16:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7bc817a4cf12f4c418291dc9d5de55586a60afca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:55:b9:6f:ca:35:1b:9f:24:c7:6b:a4:bc:
                    cb:90:b8:7d:cb:70:c7:fe:f3:ac:ad:45:04:48:cd:
                    b9:ef:e7:7d:1a:03:52:81:d3:3f:f0:b2:38:95:e8:
                    2b:3c:4b:e7:da:89:d0:b2:11:80:62:07:d0:a2:f7:
                    e4:63:60:4e:46:c1:aa:6a:70:6c:8d:07:af:7a:5d:
                    e7:3e:49:a9:13:3d:09:64:a4:ad:0c:88:1e:ed:8b:
                    1a:37:a0:77:44:9a:d1:60:d8:fb:e5:aa:ed:ef:35:
                    32:85:f1:50:dc:bd:5e:e7:10:ba:de:9a:f8:54:f4:
                    fc:0c:6f:8e:bb:3e:4c:a0:21:38:1d:0a:83:6a:4f:
                    0d:8a:a4:f5:da:d5:43:f2:ea:61:96:34:ee:11:dc:
                    0d:d2:14:41:d2:e1:5f:b3:72:c3:57:ad:fe:b8:ae:
                    e6:dd:4d:01:18:7c:2e:ed:ac:60:08:a1:e0:db:f7:
                    98:27:97:69:99:6c:0c:41:69:5f:f0:96:94:0e:38:
                    1c:81:72:45:78:da:1e:a1:63:4c:fa:57:d6:a3:a6:
                    a4:d2:e7:a6:09:3d:97:fe:82:b1:c5:6f:be:3c:ac:
                    d9:68:f2:ed:ae:1b:5c:f0:a3:75:13:dc:5d:1d:f3:
                    73:87:75:0a:5e:dd:66:50:3e:c1:3d:88:1a:f6:7a:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7B:C8:17:A4:CF:12:F4:C4:18:29:1D:C9:D5:DE:55:58:6A:60:AF:CA
            X509v3 Authority Key Identifier: 
                keyid:B5:3E:54:47:CA:06:4E:98:AE:08:35:56:C7:21:D1:4F:2D:9A:6A:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT5UR8oGTpiuCDVWxyHRTy2aalI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/e8gXpM8S9MQYKR3J1d5VWGpgr8o.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/tT5UR8oGTpiuCDVWxyHRTy2aalI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:29:7e:48:b3:04:11:fa:a6:e1:d5:15:ca:f6:8f:91:8b:d6:
         b6:43:3f:7e:81:cb:38:c0:45:82:f8:4e:82:a1:cc:8c:7c:3a:
         b8:33:51:05:5f:e2:18:57:e4:97:22:84:cd:37:c0:28:30:e9:
         c6:d5:99:a4:8a:01:7f:48:13:6e:3f:83:10:ed:83:3c:39:20:
         ae:35:5c:d6:86:2e:b5:21:40:a3:f4:0f:00:39:bc:f6:72:ce:
         3b:46:e8:d0:2c:46:69:c9:41:7b:e0:a7:9f:77:89:dc:2a:ed:
         1b:fa:7c:34:06:f4:14:a6:a3:16:fb:64:50:b5:94:88:e2:77:
         a6:43:df:c6:93:c4:c8:5d:dd:55:4c:3a:5e:80:57:97:34:6c:
         ca:28:de:b1:bf:35:10:34:3c:07:0c:f7:37:70:3b:e6:f1:e0:
         f3:22:a4:f4:d3:96:30:bd:80:ce:49:d8:9c:95:5b:cd:1e:76:
         80:cb:44:20:b9:fb:f0:15:fb:1a:d7:fb:0b:c3:80:9d:a8:ca:
         e7:a6:e7:d8:a6:11:56:80:c8:68:6a:04:05:ed:ce:cc:79:a9:
         bd:05:fa:8e:7b:00:32:37:6d:f9:bb:e4:4c:d8:a1:2f:97:cb:
         92:b3:4d:3f:12:59:fb:70:bd:49:de:4f:53:0e:b8:71:6a:ab:
         5d:ad:4f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Apr 14 11:29:08 2022 by LibreSSL & rpki-client.