Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e4/04ae87-757a-4074-9236-d47b5c2c6647/1/RWRffqVJmt9eT8cyveuxux9NYNA.roa (download)

Subject key identifier:   45:64:5F:7E:A5:49:9A:DF:5E:4F:C7:32:BD:EB:B1:BB:1F:4D:60:D0 
Authority key identifier: A5:CC:04:BB:8E:E5:84:F8:5B:FC:4D:49:73:98:44:D4:B5:00:2D:DA
asID:                     AS1239
Prefixes:
    1: 176.126.125.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e4/04ae87-757a-4074-9236-d47b5c2c6647/1/RWRffqVJmt9eT8cyveuxux9NYNA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10023595 (0x98f2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5cc04bb8ee584f85bfc4d49739844d4b5002dda
        Validity
            Not Before: Jan  1 00:56:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=45645f7ea5499adf5e4fc732bdebb1bb1f4d60d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a3:10:65:c6:ff:a6:b1:76:2d:49:d4:20:88:
                    7a:ed:2c:50:1f:78:a9:06:f2:5a:d6:a7:01:59:e1:
                    95:45:df:15:ed:c2:f3:45:fc:ff:14:6e:10:1f:62:
                    90:f3:d3:33:9a:45:e7:db:c0:3e:a7:d5:7c:e1:b6:
                    2a:04:5e:d8:07:bb:03:8a:4f:f6:62:53:6e:38:99:
                    35:9a:09:44:7b:ec:c3:b8:65:c5:ca:10:f9:5c:91:
                    32:1a:06:d5:cb:53:a0:e9:cc:22:cf:52:6c:c8:46:
                    eb:6e:0b:78:d8:4e:2b:18:bd:55:08:d0:94:82:47:
                    8e:8a:36:83:82:dd:0a:de:03:44:c6:36:b4:90:b6:
                    a5:b4:a8:47:31:6a:51:30:ed:b3:52:f7:5c:9e:48:
                    8e:f0:aa:71:73:f3:14:e2:5e:78:66:c4:9d:ca:46:
                    a3:44:1b:54:98:b0:be:b2:69:f9:bd:77:2d:aa:c2:
                    9e:76:50:74:19:f2:5c:7d:de:55:aa:96:04:b4:38:
                    f3:7f:ab:92:2b:8f:fe:5c:ff:f9:2f:bb:04:64:e6:
                    88:60:44:30:c0:87:1b:b2:fd:83:76:e4:fb:f7:75:
                    c0:4c:da:06:a1:72:63:e3:51:7b:1e:c7:0e:2d:c6:
                    34:39:cb:82:60:e1:0a:d7:96:63:c7:91:4c:50:1d:
                    0a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                45:64:5F:7E:A5:49:9A:DF:5E:4F:C7:32:BD:EB:B1:BB:1F:4D:60:D0
            X509v3 Authority Key Identifier: 
                keyid:A5:CC:04:BB:8E:E5:84:F8:5B:FC:4D:49:73:98:44:D4:B5:00:2D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcwEu47lhPhb_E1Jc5hE1LUALdo.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/04ae87-757a-4074-9236-d47b5c2c6647/1/RWRffqVJmt9eT8cyveuxux9NYNA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/04ae87-757a-4074-9236-d47b5c2c6647/1/pcwEu47lhPhb_E1Jc5hE1LUALdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:cc:b9:5a:cf:0c:28:a8:d5:e4:de:0d:fa:b1:56:83:40:0c:
         c8:69:b6:22:30:37:b2:92:73:e6:a6:df:12:56:60:7a:27:8c:
         09:a7:8c:b1:e1:3a:2e:32:82:af:20:4b:cb:9b:13:e3:07:51:
         17:fd:31:aa:f3:31:ce:5f:2b:51:45:24:a8:ce:86:f4:39:d3:
         06:c6:0a:2e:41:03:49:2f:7d:d3:2d:d1:ad:63:a8:6e:07:33:
         15:9c:83:9d:a2:35:aa:3a:ba:fb:c8:8f:90:96:42:3e:bc:ee:
         ec:87:f9:14:8b:02:5f:d3:83:be:12:5e:2e:50:63:59:46:01:
         b5:63:db:fd:f5:e1:73:ca:5a:93:51:e4:8c:2f:4c:36:cc:b8:
         9d:f8:8d:02:da:06:dc:5e:5d:f0:ae:7c:6e:10:7e:b3:72:76:
         ed:1e:68:42:09:7b:60:c4:bf:01:4b:d9:5e:44:b2:19:19:7a:
         71:4b:1f:25:4a:c4:f7:e6:e4:72:f6:e7:15:8c:a0:fd:1c:e5:
         47:de:1c:d7:80:f8:f0:b7:fa:08:70:d0:33:74:40:80:cf:96:
         d8:c5:ec:68:6b:ce:5f:ed:39:d3:cf:8a:bd:bc:e8:89:cd:98:
         2a:6e:ca:fd:b8:b8:f8:de:4b:7d:22:29:7e:17:18:c1:2e:8a:
         1c:48:05:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 13:25:40 2022 by LibreSSL & rpki-client.