Route Origin Authorization
Location:                 ca.rg.net/rpki/RGnet-OU/ybfZJWSIlrVQDGT-humaf5d-jKE.roa (download)

Subject key identifier:   C9:B7:D9:25:64:88:96:B5:50:0C:64:FE:86:E9:9A:7F:97:7E:8C:A1 
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
asID:                     AS3130
Prefixes:
    1: 147.28.7.0/24 (max: 24)

--
$ test-roa -p ca.rg.net/rpki/RGnet-OU/ybfZJWSIlrVQDGT-humaf5d-jKE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37441 (0x9241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
        Validity
            Not Before: Jun 17 00:17:13 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=C9B7D925648896B5500C64FE86E99A7F977E8CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d3:e1:cb:d5:09:d4:15:ed:9e:03:98:a6:2c:
                    4e:d3:aa:6d:7b:a0:a5:e6:df:e5:f1:67:4c:51:6d:
                    7b:83:64:6b:be:ad:2d:61:84:9f:8d:31:11:63:dc:
                    e6:d2:56:5b:37:36:0f:da:be:ad:88:31:b9:1d:70:
                    29:0a:35:5c:f5:83:2d:90:61:7c:8d:8d:a2:82:0a:
                    04:bf:ef:9f:e2:79:db:90:76:0b:36:44:c0:e8:39:
                    72:03:28:97:e1:95:24:17:f7:9e:68:37:ab:a7:fa:
                    92:5a:34:e2:76:53:a3:96:75:ff:08:d2:8b:9e:38:
                    95:99:a5:d0:38:ab:96:e7:52:05:fe:3a:9f:4c:c2:
                    8d:32:98:9f:df:31:3e:31:4f:d1:09:b6:dd:da:c7:
                    3a:c9:5a:d4:ac:59:13:46:91:1b:dc:03:db:36:b7:
                    56:09:21:3c:ad:65:b2:68:cf:4e:cf:26:b3:8c:ef:
                    3f:9b:51:16:52:26:f4:20:0d:7e:4e:96:38:aa:4f:
                    a5:f3:66:3a:80:72:9b:04:16:91:08:9e:d8:63:5e:
                    36:12:45:f2:5c:a8:10:36:19:30:c5:1a:31:d2:e3:
                    a6:dd:43:1f:a0:50:0a:c8:1a:19:bf:81:83:0f:e9:
                    80:9c:a6:79:1c:6e:22:53:38:3f:b2:21:6a:e1:54:
                    a3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C9:B7:D9:25:64:88:96:B5:50:0C:64:FE:86:E9:9A:7F:97:7E:8C:A1
            X509v3 Authority Key Identifier: 
                keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access: 
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ybfZJWSIlrVQDGT-humaf5d-jKE.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                0.0.....0.......
    Signature Algorithm: sha256WithRSAEncryption
         25:f0:4f:78:75:c0:f0:05:2c:f8:b7:5e:d7:a8:66:3f:72:aa:
         a8:9b:63:72:2a:cc:bc:1c:03:95:ce:43:3b:2f:2f:91:e7:12:
         e0:3f:0f:5c:44:80:96:c9:fb:49:8a:80:7a:0f:f3:96:12:26:
         00:3f:26:9a:c5:b1:8a:90:8b:0a:b8:da:2f:1b:3e:71:1b:5e:
         a8:39:bb:9f:5c:4b:ab:ba:e5:54:af:d4:a1:67:7a:cc:46:cd:
         75:7d:e2:71:97:d1:a6:6f:e6:ea:3a:14:c4:51:df:c1:15:f8:
         97:7a:17:61:30:10:91:b3:06:c7:45:0c:f0:bd:6a:55:ab:d3:
         a5:dc:98:64:3d:70:fb:ff:d4:32:10:85:4c:a1:1e:ae:cd:46:
         e5:74:d9:73:53:78:cc:fb:22:0f:74:d0:ca:55:6d:75:ff:e9:
         b0:1b:6e:04:6a:3a:ac:b7:ec:75:9f:e3:1c:5d:ee:30:ba:98:
         9c:f4:01:43:b5:43:a7:da:12:18:e4:ae:d7:20:c9:0e:73:2e:
         bc:1f:55:12:c3:b3:72:93:cd:3e:aa:87:e6:b1:ec:0f:76:a3:
         6c:24:22:2e:c7:f1:c8:27:cd:5e:5e:69:49:25:7b:da:59:4c:
         00:59:72:29:ef:b1:18:76:65:ba:7c:be:ba:04:97:a9:f8:96:
         99:ae:82:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Aug 2 15:18:30 2021 by LibreSSL & rpki-client.