Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/cwdI-lIgEEzA0IQXOPjEoi7uMqk.roa (download)

Subject key identifier:   73:07:48:FA:52:20:10:4C:C0:D0:84:17:38:F8:C4:A2:2E:EE:32:A9 
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
asID:                     AS396982
Prefixes:
    1: 147.189.239.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/cwdI-lIgEEzA0IQXOPjEoi7uMqk.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21165253 (0x142f4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
        Validity
            Not Before: Jan  1 00:56:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=730748fa5220104cc0d0841738f8c4a22eee32a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:79:ec:d8:4a:85:3c:1a:e5:54:6e:bd:e4:65:
                    42:b6:ae:de:cc:31:83:3c:12:1f:45:c2:a7:b8:e8:
                    17:cb:92:54:19:d7:2e:af:de:fd:cb:b0:cf:9a:e4:
                    ba:9a:64:27:62:f5:ff:fc:5b:54:f9:0b:66:4d:e4:
                    30:b9:e4:40:10:55:34:4b:34:f1:3f:56:83:35:e6:
                    ce:3b:9a:94:c2:73:e3:ee:27:f8:7a:f9:e8:d5:37:
                    89:7d:73:62:14:15:0e:3f:04:77:be:7a:56:39:ec:
                    ab:14:4a:7e:79:17:47:3c:48:e6:28:ac:57:72:21:
                    33:67:76:f0:42:0e:e7:74:01:99:d8:8e:3c:d9:28:
                    7e:c0:d2:7e:3e:3d:fc:7e:90:db:40:8e:7b:e5:6a:
                    37:23:d2:20:b2:6a:19:73:22:2f:f5:02:66:46:93:
                    03:dd:9f:8b:74:54:7e:55:a8:43:02:05:a7:ed:f4:
                    32:81:d3:8f:ff:95:d9:04:d2:c8:8c:94:8c:ae:b8:
                    ed:5f:43:2a:55:c1:6c:b8:f4:25:a6:61:40:f5:49:
                    19:29:80:1c:34:2f:01:94:ba:d6:23:91:b8:8d:35:
                    aa:63:bc:b4:be:b1:7b:15:47:f5:d9:cd:bc:9a:7a:
                    ee:89:0c:a5:2e:de:db:12:19:f3:15:be:8d:49:0a:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                73:07:48:FA:52:20:10:4C:C0:D0:84:17:38:F8:C4:A2:2E:EE:32:A9
            X509v3 Authority Key Identifier: 
                keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/cwdI-lIgEEzA0IQXOPjEoi7uMqk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.189.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:a3:c5:2f:f7:5f:2e:19:85:35:c9:aa:5a:07:dd:b8:0d:57:
         6f:f5:3d:f2:f4:c6:30:ca:df:67:4f:6e:e9:6d:2d:77:74:9c:
         40:c2:59:67:25:3c:b8:3a:0f:7e:67:d4:07:bf:a2:00:86:03:
         68:fa:6b:91:11:67:5b:86:e7:d7:7e:b1:91:0d:20:22:12:0b:
         9a:7b:43:55:2f:48:ce:84:2d:44:c5:a9:1e:96:01:4a:3b:7e:
         a4:90:08:5c:50:cb:43:9a:9a:b9:9b:1d:3f:7d:8f:20:d4:9c:
         73:a5:d3:b9:b3:d9:be:13:34:04:15:70:95:9c:60:40:f4:1b:
         ec:df:0b:f1:5d:36:3c:18:0d:ed:d1:52:af:14:50:3f:10:ce:
         dd:9e:e5:c5:9e:67:28:88:ed:af:79:df:2b:b0:70:b7:27:70:
         00:07:34:f8:e0:66:d1:84:3c:45:32:8f:f8:53:95:f4:25:21:
         6c:dd:bd:b6:27:d0:24:b1:b5:a4:1b:23:4a:7d:cf:12:af:89:
         61:3e:3a:92:01:b8:8a:62:33:91:b8:65:19:d6:8a:58:ac:08:
         c2:82:5c:33:9b:09:dd:9b:ae:82:d5:8a:65:cb:b2:6c:48:47:
         1f:e2:2f:32:ef:01:76:14:07:7b:e7:6c:15:7c:52:a9:30:6c:
         51:bd:a1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 02:57:57 2022 by LibreSSL & rpki-client.