Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/iXJKkKwA6vYEaiNpLYn3kfiDlLA.roa (download)

Subject key identifier:   89:72:4A:90:AC:00:EA:F6:04:6A:23:69:2D:89:F7:91:F8:83:94:B0 
Authority key identifier: 9F:24:66:32:E8:57:F3:70:C3:03:8F:75:54:5F:12:2B:8E:B1:6D:1A
asID:                     AS1239
Prefixes:
    1: 193.3.186.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/iXJKkKwA6vYEaiNpLYn3kfiDlLA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9916651 (0x9750eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f246632e857f370c3038f75545f122b8eb16d1a
        Validity
            Not Before: Jan  1 03:00:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=89724a90ac00eaf6046a23692d89f791f88394b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6e:9a:14:9b:f0:43:30:96:c4:eb:e0:98:92:
                    22:b9:c2:59:71:53:ef:d7:f4:32:ad:09:48:20:71:
                    6c:98:f7:f5:81:9c:bb:b5:10:05:f5:fc:9b:da:ed:
                    c8:1e:e8:5e:5a:8f:96:30:e7:50:c6:6f:ec:ab:54:
                    fb:bf:76:0d:a4:ab:85:56:2e:c5:c7:6e:df:e2:c3:
                    92:2e:3d:e5:a4:50:d6:67:0d:5c:b2:ed:dc:53:22:
                    7c:93:d5:5b:61:0a:23:08:99:9a:83:a3:2c:6a:03:
                    dc:fa:c9:b6:d7:c8:85:79:25:8f:3f:99:34:d3:db:
                    50:70:91:9e:62:d8:50:4b:88:93:ff:4c:ce:eb:f0:
                    31:9c:19:7d:32:4c:06:20:16:46:1d:88:24:76:b0:
                    38:79:f9:a8:2c:01:fb:7f:f8:ee:c7:d8:a3:8c:16:
                    05:5b:f3:64:43:1f:9a:da:e3:a1:8b:27:14:c5:19:
                    8d:a5:1c:ea:e5:5c:3f:bf:bb:50:45:ae:0a:01:a1:
                    de:28:a8:25:c8:6e:79:5d:1f:ed:f6:89:37:0a:7e:
                    d3:0e:ae:fe:59:4a:3b:9f:52:e4:47:a3:6e:54:78:
                    01:13:fc:99:1a:ed:0e:a0:6d:f3:6a:f2:50:91:14:
                    91:2f:fa:14:fb:50:4d:c5:d7:f6:6f:f9:5e:23:6c:
                    82:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                89:72:4A:90:AC:00:EA:F6:04:6A:23:69:2D:89:F7:91:F8:83:94:B0
            X509v3 Authority Key Identifier: 
                keyid:9F:24:66:32:E8:57:F3:70:C3:03:8F:75:54:5F:12:2B:8E:B1:6D:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyRmMuhX83DDA491VF8SK46xbRo.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/iXJKkKwA6vYEaiNpLYn3kfiDlLA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/nyRmMuhX83DDA491VF8SK46xbRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:61:ee:49:21:4c:f1:35:73:5b:53:f7:83:06:40:2b:23:b9:
         d9:1b:14:0d:9d:8c:8d:b8:db:13:93:2f:f1:75:61:64:ce:ac:
         0b:83:e8:2a:94:6c:0f:90:f6:19:23:b9:96:b2:bb:94:51:e9:
         65:b0:57:ca:00:bb:ce:d1:bb:f8:e8:c6:fd:f3:03:e0:61:a4:
         6d:e9:41:9b:08:20:2a:50:4c:22:ce:d3:fb:63:79:c0:14:4d:
         9e:b1:02:2d:70:a2:3a:92:f5:e1:70:14:59:41:62:44:b8:fe:
         4c:9c:8a:df:c7:a4:4b:20:42:5e:29:e4:06:9e:a9:1c:12:6c:
         08:8f:28:92:91:c5:a5:83:57:31:d5:9f:f0:ae:f2:89:45:ee:
         c1:80:fa:58:0b:82:3e:d4:69:eb:9f:74:b3:1b:6d:5b:f4:60:
         86:2a:14:70:f2:fa:53:53:b7:fe:a1:2a:ff:18:89:a1:67:aa:
         7a:4d:99:d0:cb:41:a1:d3:08:ac:d8:c9:a8:c7:ba:27:e3:8a:
         93:f2:a5:06:57:73:a5:d6:fe:b0:3b:7b:f1:cc:49:a1:65:a6:
         d4:b6:08:e8:7e:91:94:4e:51:9c:1e:54:2d:ec:c4:05:1a:f0:
         7e:9b:02:e1:87:8a:6f:9d:66:6f:a9:aa:7c:0d:1b:39:5a:00:
         1e:72:a9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 13:28:24 2022 by LibreSSL & rpki-client.