Route Origin Authorization
Location:                 nostromo.heficed.net/repo/1123831/0/3138352e3133392e3233362e302f32322d3234203d3e203631333137.roa (download)

Subject key identifier:   9B:F9:DA:77:D2:BD:D7:F7:30:10:C4:9A:E3:21:37:EC:6C:98:65:47 
Authority key identifier: AF:8C:3E:DF:23:8B:DF:87:64:78:41:8F:C4:8E:7F:CF:F1:A3:38:03
asID:                     AS61317
Prefixes:
    1: 185.139.236.0/22 (max: 24)

--
$ test-roa -p nostromo.heficed.net/repo/1123831/0/3138352e3133392e3233362e302f32322d3234203d3e203631333137.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0d:d9:3b:b2:fe:3f:91:14:f9:36:99:28:c5:ff:fb:78:c2:b8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af8c3edf238bdf876478418fc48e7fcff1a33803
        Validity
            Not Before: Apr 30 07:55:00 2021 GMT
            Not After : Apr 30 08:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:c1:ab:69:c7:9b:1b:c1:89:82:b3:68:46:
                    bb:23:6a:92:3c:73:88:15:7e:17:61:93:83:e0:1e:
                    2b:84:7f:07:85:52:b5:11:bf:51:69:34:dd:56:83:
                    d5:b9:3c:77:44:76:b2:16:d2:2c:4a:b7:7b:34:4f:
                    57:40:8f:43:9f:cf:89:90:b7:22:19:03:4f:c5:23:
                    0d:6c:19:30:81:f2:d0:a7:1d:12:ca:84:11:90:5a:
                    54:ca:fc:1e:9a:ea:67:0a:55:b1:34:65:33:f1:ed:
                    ec:75:d6:9d:a6:c9:4d:f7:73:b5:92:42:e5:73:e1:
                    1f:62:cb:18:23:98:de:08:7c:b7:6d:22:5d:5b:46:
                    01:d4:df:04:81:15:4c:08:3e:bf:51:84:0e:96:e2:
                    e7:d3:0a:cc:7b:56:f6:8a:25:06:c8:72:30:84:72:
                    96:3c:54:d8:c0:bf:37:27:01:4c:bf:b8:a8:5b:97:
                    23:96:d0:61:ee:b3:5a:21:fc:f2:97:1c:c5:df:b4:
                    df:7e:f5:18:3d:17:26:35:d2:a1:23:a6:a1:49:2b:
                    47:8f:d4:ec:f0:22:70:88:d9:fe:70:04:3e:46:6a:
                    03:9d:c3:75:e6:1c:53:4e:8b:f8:9a:ae:ee:02:44:
                    6b:1a:86:b1:af:98:6f:46:cb:b6:59:fc:e4:c8:eb:
                    90:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9B:F9:DA:77:D2:BD:D7:F7:30:10:C4:9A:E3:21:37:EC:6C:98:65:47
            X509v3 Authority Key Identifier: 
                keyid:AF:8C:3E:DF:23:8B:DF:87:64:78:41:8F:C4:8E:7F:CF:F1:A3:38:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123831/0/AF8C3EDF238BDF876478418FC48E7FCFF1A33803.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4w-3yOL34dkeEGPxI5_z_GjOAM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123831/0/3138352e3133392e3233362e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:01:a3:0c:79:b8:f1:ff:12:d4:f4:3e:dc:dd:57:37:cd:9b:
         13:91:b7:35:40:29:0b:9e:22:06:5d:09:33:e1:16:58:72:09:
         16:ae:17:9c:73:c3:01:80:82:04:66:8b:db:09:5f:f3:df:f4:
         41:c1:24:c6:3f:23:0a:4f:70:41:47:f5:c4:49:15:19:9d:37:
         3e:72:de:5b:2d:bc:fd:4c:c4:8e:e9:6d:2f:5a:a7:2b:6e:87:
         73:9b:a9:88:2f:96:44:63:c8:03:c4:4d:f1:5f:f3:8b:3b:f9:
         00:ce:4e:0e:2b:06:b7:9b:32:15:33:f4:4f:87:24:b4:ba:01:
         c7:d9:b2:f2:f6:bb:aa:32:d0:64:7f:d5:83:c6:45:4f:2f:90:
         ee:40:43:c8:5e:74:a5:8c:fc:f5:3c:65:47:4f:8f:87:50:bc:
         10:ed:21:27:c8:fc:47:ac:b1:81:8b:22:f6:65:e6:58:e7:be:
         f5:7e:4a:57:1e:e7:54:e7:4d:42:f8:e1:b9:e8:dc:26:2b:f9:
         63:7e:3f:e2:d1:82:d9:7c:5a:1d:0a:cb:c3:af:2b:33:5e:48:
         c9:d1:a3:1a:c8:88:cf:70:f1:43:cf:0d:b5:3a:de:ca:b8:11:
         27:24:a2:c3:f7:48:48:c8:09:c1:a0:b2:ed:0e:d1:d9:e7:56:
         37:8a:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Sep 20 23:03:49 2021 by LibreSSL & rpki-client.