Route Origin Authorization
Location:                 ca.rg.net/rpki/RGnet-OU/ovsCA/TpaRq-F6rUNVMwp4MdtM7gtOq7Q.roa (download)

Subject key identifier:   4E:96:91:AB:E1:7A:AD:43:55:33:0A:78:31:DB:4C:EE:0B:4E:AB:B4 
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
asID:                     AS47065
Prefixes:
    1: 147.28.3.0/24 (max: 24)

--
$ test-roa -p ca.rg.net/rpki/RGnet-OU/ovsCA/TpaRq-F6rUNVMwp4MdtM7gtOq7Q.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13285 (0x33e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 14 10:34:47 2021 GMT
            Not After : Apr  1 01:01:03 2022 GMT
        Subject: CN=4E9691ABE17AAD4355330A7831DB4CEE0B4EABB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:78:a4:d2:ac:4a:a1:13:98:23:b4:76:0c:
                    a8:e0:f9:cf:07:1f:26:c1:45:c4:ec:54:a4:a5:5a:
                    f3:37:eb:66:8f:db:b7:be:8b:a2:a3:d6:c3:1b:cb:
                    58:45:df:9c:de:dd:9d:f3:b2:53:d0:2d:d2:7c:2f:
                    97:98:10:04:6d:40:f1:8e:19:e7:3c:11:01:b9:d8:
                    82:82:a0:88:92:c8:b2:ff:1a:b4:aa:bd:c6:38:f9:
                    04:51:dd:0d:84:bc:a0:b3:41:b9:df:6a:3e:06:28:
                    ea:d7:77:48:65:65:d3:40:bb:a9:56:52:ba:1f:31:
                    7b:38:d8:42:2f:e4:63:4d:a8:83:fc:26:3f:56:8f:
                    76:c2:bf:35:a7:45:3e:63:03:f6:52:c9:91:ba:6d:
                    d3:18:a6:77:33:6f:d2:43:69:ce:0b:40:23:07:b0:
                    fc:fe:39:49:30:b0:91:b5:67:47:c2:0f:1f:ef:a1:
                    10:4f:8a:df:62:4e:89:5c:e3:f6:18:9e:d8:54:12:
                    eb:43:f1:16:3d:44:b1:99:86:34:f5:e8:fa:35:66:
                    ec:6c:b9:e7:85:13:3c:c8:db:a4:14:2b:6d:0f:10:
                    5a:6d:c0:b5:b4:6f:fc:33:ff:37:af:86:8f:45:33:
                    80:ac:39:3b:1b:76:61:e3:60:b6:7f:08:44:0d:5d:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4E:96:91:AB:E1:7A:AD:43:55:33:0A:78:31:DB:4C:EE:0B:4E:AB:B4
            X509v3 Authority Key Identifier: 
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access: 
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TpaRq-F6rUNVMwp4MdtM7gtOq7Q.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                0.0.....0.......
    Signature Algorithm: sha256WithRSAEncryption
         67:a8:90:a2:4a:9d:d6:17:5d:11:04:f1:42:e1:7d:aa:12:0e:
         96:37:32:07:c2:f1:f4:55:69:6e:31:ae:3d:ab:58:c5:6d:a4:
         ba:5a:5f:29:c9:1e:bd:fd:3a:80:45:f3:e9:3d:f1:29:17:68:
         31:88:7d:5f:7e:99:b7:fe:12:b9:a0:ad:3a:03:b8:6a:66:c8:
         d7:e3:26:99:4a:ec:9a:9e:eb:31:5d:d1:8e:12:c2:5b:4b:e1:
         e4:9f:ef:ba:c9:f0:8f:60:25:cd:e4:af:a3:6b:d9:b9:93:e8:
         00:d3:71:1a:20:5a:f6:c5:65:27:75:e8:c6:4f:e9:bb:d3:bf:
         ee:0b:78:e7:3a:c5:9e:cd:b1:5c:7a:7b:20:64:9a:1b:c7:1c:
         07:2f:0a:46:4b:50:71:b3:93:c3:76:01:37:db:83:94:c0:0a:
         db:7b:a8:9e:63:5a:c1:5c:25:da:16:44:53:71:5b:5e:2f:8a:
         af:8d:f3:b5:f5:d0:73:76:0c:9f:aa:b5:9d:03:01:56:de:f7:
         da:10:9b:3e:ec:0f:0d:f3:61:2c:62:37:79:d4:47:e9:c0:48:
         0f:f5:21:52:92:5c:90:d2:04:91:b6:a0:96:6d:90:94:34:5e:
         39:96:74:cf:6c:0d:ef:73:90:b4:ec:d7:9c:38:dd:73:bc:42:
         cb:33:0a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jun 15 17:49:57 2021 by LibreSSL & rpki-client.