Route Origin Authorization
Location:                 ca.rg.net/rpki/RGnet-OU/OuWqUymxGA3MYvzuBrenyF6G_ZI.roa (download)

Subject key identifier:   3A:E5:AA:53:29:B1:18:0D:CC:62:FC:EE:06:B7:A7:C8:5E:86:FD:92 
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
asID:                     AS3130
Prefixes:
    1: 147.28.0.0/23 (max: 23)

--
$ test-roa -p ca.rg.net/rpki/RGnet-OU/OuWqUymxGA3MYvzuBrenyF6G_ZI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37442 (0x9242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
        Validity
            Not Before: Jun 17 00:17:17 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3AE5AA5329B1180DCC62FCEE06B7A7C85E86FD92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:26:1c:61:8b:f9:5c:26:8a:96:b0:9f:64:
                    75:16:0d:b5:fd:9d:b8:bf:ad:35:03:c4:b8:17:c1:
                    6f:3f:24:ab:9e:70:61:cf:62:15:58:35:af:38:4e:
                    95:eb:6f:c0:a4:4c:95:35:50:74:cf:61:44:72:a5:
                    86:ea:99:9c:42:a2:27:23:ff:b5:71:80:30:90:0c:
                    5e:29:52:28:5b:7a:2a:4d:f3:d3:81:a4:da:e0:1a:
                    c1:f6:09:9d:75:7c:77:9f:a4:74:8f:83:8e:95:ae:
                    a5:d4:22:ae:0e:7c:97:68:68:66:b1:13:60:2d:4f:
                    f2:98:8a:13:4d:b3:89:c6:0e:6c:4e:f2:ec:ee:8e:
                    07:5b:ea:55:d3:7e:75:98:20:24:04:46:bd:3e:5b:
                    9a:64:8a:5e:19:bf:3e:9d:a6:2c:9b:b0:ef:70:e6:
                    39:1c:62:95:b8:e4:09:d5:bc:dd:1b:9a:41:a2:70:
                    74:a0:1d:fc:81:ce:72:57:26:90:fa:e0:a5:49:15:
                    08:bf:5b:ba:09:52:57:ff:ff:d6:c1:4e:32:a7:51:
                    1e:13:2e:2d:bd:e2:88:d7:47:53:25:d6:a6:d7:8d:
                    8d:a6:ad:07:72:99:9b:2a:14:6d:ad:1d:5c:10:ce:
                    64:1a:87:27:74:fe:03:57:69:5b:df:d3:13:fc:67:
                    ec:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3A:E5:AA:53:29:B1:18:0D:CC:62:FC:EE:06:B7:A7:C8:5E:86:FD:92
            X509v3 Authority Key Identifier: 
                keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access: 
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/OuWqUymxGA3MYvzuBrenyF6G_ZI.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                0.0.....0.......
    Signature Algorithm: sha256WithRSAEncryption
         54:69:cd:5c:55:f1:e4:3a:93:c5:3d:f8:69:8b:aa:18:7d:0e:
         55:a5:00:a2:72:2d:38:a9:27:3e:3f:22:3e:b6:d7:e9:2a:91:
         8c:13:1b:86:46:aa:c5:6a:68:b2:d5:07:17:da:76:ee:11:85:
         2a:5d:32:4c:11:5f:50:ab:ef:3d:30:45:a1:ca:0f:d3:af:91:
         a4:6a:76:e7:e8:90:5f:e2:ef:0f:46:b0:ae:6d:b2:b5:1c:fa:
         03:69:d9:ae:60:39:32:6e:58:a6:e7:c2:64:95:5d:ba:b0:df:
         04:db:3a:7a:32:69:59:ff:ac:ad:96:8a:5a:d8:4e:86:b9:58:
         7c:40:cc:cf:39:1e:ca:ca:e5:4c:0f:73:b3:b9:a7:17:8d:cd:
         fc:15:af:e5:99:06:61:ce:bc:cd:a9:ed:c0:e4:df:11:94:3f:
         ff:ad:86:ee:2d:47:cd:e0:40:0e:e6:31:39:6d:65:42:2e:fa:
         27:18:47:7f:a2:0c:d5:9a:e5:10:ef:f0:83:fd:53:84:b8:5f:
         34:1d:6f:08:eb:e8:d2:19:24:d5:c3:3b:cb:5f:69:50:72:62:
         8f:42:bc:1b:a5:6a:fd:db:c2:66:2f:e1:35:70:c7:32:5f:70:
         83:f6:95:30:9b:16:43:af:7e:27:ed:96:7e:9a:c5:46:ae:b3:
         09:4f:7d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Aug 2 12:43:27 2021 by LibreSSL & rpki-client.