Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/vMJGKXKzZVDONJ8wHukKbKdxkLY.roa (download)

Subject key identifier:   BC:C2:46:29:72:B3:65:50:CE:34:9F:30:1E:E9:0A:6C:A7:71:90:B6 
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
asID:                     AS396982
Prefixes:
    1: 185.82.48.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/vMJGKXKzZVDONJ8wHukKbKdxkLY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107309594 (0x6656a1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9585c19915455835457413ef222a7d375b29901d
        Validity
            Not Before: Jan  1 04:59:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bcc2462972b36550ce349f301ee90a6ca77190b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b0:76:85:92:be:2c:b1:07:f5:21:03:da:3d:
                    96:9f:03:11:b5:f2:68:c0:51:1a:c5:06:5f:e6:e9:
                    25:ca:63:13:6c:f6:7c:74:7a:79:9d:6c:ab:50:b2:
                    24:74:d7:65:aa:dd:cd:5d:21:5c:e6:8b:50:59:d8:
                    25:c1:e4:85:77:29:41:d9:34:93:de:a4:25:37:cb:
                    4d:7b:8c:d2:0e:f6:29:6b:88:ad:8c:00:35:2c:e9:
                    f8:e3:35:87:67:c8:3c:fa:98:04:71:1f:7e:a1:06:
                    04:fb:ed:5e:f7:9d:13:2e:56:d5:98:81:37:0a:52:
                    e5:ba:4e:b8:87:4b:c1:30:c5:85:77:91:77:43:39:
                    61:39:86:09:15:ed:65:16:d4:82:8a:33:f4:c2:70:
                    15:1f:94:0e:b1:23:25:67:e7:d3:76:9c:25:10:2b:
                    4f:0a:a2:7c:7f:84:cc:81:3f:8f:a1:20:e0:bb:eb:
                    b7:a2:d9:be:1a:8e:e5:9e:34:12:e4:22:dd:ec:32:
                    9a:0f:fb:56:2c:f6:35:80:0e:ad:5a:9e:45:59:88:
                    0c:f9:ae:6d:d4:f1:aa:d3:25:7a:b5:e9:d3:81:f8:
                    3c:11:b5:9b:60:33:60:5c:be:1f:02:58:63:cf:3d:
                    5e:c2:90:a1:c1:ea:d4:61:25:96:6a:05:83:ff:85:
                    7c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BC:C2:46:29:72:B3:65:50:CE:34:9F:30:1E:E9:0A:6C:A7:71:90:B6
            X509v3 Authority Key Identifier: 
                keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/vMJGKXKzZVDONJ8wHukKbKdxkLY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:58:af:8f:c5:3c:87:df:26:ed:6d:28:a1:71:aa:ce:61:ad:
         97:a2:f3:14:78:f7:ec:32:8f:27:ae:e2:54:25:65:a7:a9:87:
         de:a7:4b:e6:b1:21:33:fd:6b:07:8c:af:ff:5f:2b:3d:3d:8e:
         e9:ae:7e:d8:ea:dd:75:5f:46:6e:1b:82:fb:52:78:93:ed:7c:
         d0:24:ba:14:01:de:bb:b9:7f:5e:d0:c4:f0:22:32:f1:f1:6e:
         0b:af:11:33:37:06:c4:cc:5b:6d:16:de:34:d2:89:b8:a8:8f:
         de:16:c0:a4:93:d4:bb:4a:10:30:44:b2:f8:8c:e0:d3:76:c4:
         4f:92:70:f7:57:06:d8:69:43:16:61:00:65:7b:78:93:c1:7a:
         63:9d:5c:b0:34:91:64:7f:a4:b8:4c:2a:5e:1a:6f:d4:d0:74:
         1c:77:b9:57:94:b0:26:bf:ac:6b:45:88:38:e3:50:62:70:13:
         3f:e1:2b:ca:de:3e:e2:0c:70:14:74:45:76:26:fa:ab:c7:20:
         88:8a:7d:ef:b2:c3:0a:1b:01:b3:68:a5:55:95:c1:9c:58:d9:
         02:51:ec:30:55:7d:60:b9:df:0c:59:c9:d4:75:5c:5d:ac:fe:
         36:b7:62:11:47:39:3b:55:63:15:76:41:90:b0:34:8a:aa:3d:
         5e:bf:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 08:22:45 2022 by LibreSSL & rpki-client.