Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/emJqYri8TnvAnm63__2O-NSKnS0.roa (download)

Subject key identifier:   7A:62:6A:62:B8:BC:4E:7B:C0:9E:6E:B7:FF:FD:8E:F8:D4:8A:9D:2D 
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
asID:                     AS174
Prefixes:
    1: 178.218.145.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/emJqYri8TnvAnm63__2O-NSKnS0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87166526 (0x5320e3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  1 04:35:54 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=7a626a62b8bc4e7bc09e6eb7fffd8ef8d48a9d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:ec:1d:5e:41:68:68:28:1e:e9:7e:1e:de:
                    d8:1e:78:d5:1c:ae:5f:3b:47:50:e3:64:8a:5b:cb:
                    d3:f0:f0:5e:a4:0a:c8:7d:2e:15:5d:44:84:2d:aa:
                    1a:ce:ca:55:35:6b:dd:3f:d4:90:a0:e4:0c:96:b9:
                    8f:fc:49:36:35:71:da:36:74:7f:eb:fc:bb:bb:01:
                    10:0d:be:8b:2e:9c:a4:af:9c:0c:b0:57:6b:d6:f6:
                    a4:4f:55:79:75:62:93:54:29:b1:b0:5e:0c:1b:02:
                    35:ac:e6:13:af:4e:ed:90:b6:ed:2f:d1:35:23:a8:
                    e1:f4:da:2a:b0:10:c9:54:6e:55:63:25:79:76:89:
                    e7:83:f6:f3:9a:4f:e2:89:37:74:0b:97:bc:2f:25:
                    36:81:c4:a4:19:50:a6:83:df:71:8a:ce:37:0f:88:
                    c7:e8:4c:d9:bd:e6:e1:9b:c9:37:b1:ee:32:8d:1d:
                    30:e3:71:5f:6a:07:93:87:12:c8:70:d3:9e:a4:38:
                    e3:06:b2:6a:b2:37:f9:99:31:e9:0c:d4:2c:97:83:
                    ac:8e:ec:7f:63:a2:32:b2:12:26:3f:0f:69:a4:19:
                    b5:53:a0:d0:8d:78:bf:81:33:a1:76:c8:ba:6e:e7:
                    2e:2f:02:54:5f:cb:2e:b8:9f:a8:b3:10:ae:20:5f:
                    39:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7A:62:6A:62:B8:BC:4E:7B:C0:9E:6E:B7:FF:FD:8E:F8:D4:8A:9D:2D
            X509v3 Authority Key Identifier: 
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/emJqYri8TnvAnm63__2O-NSKnS0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.218.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:f0:d7:db:37:25:85:28:55:c9:8f:13:1a:42:a6:fe:2c:8c:
         da:18:2a:9e:54:0e:a3:64:71:a1:8a:f8:63:99:66:31:9e:bf:
         bf:97:9e:28:00:81:58:a7:51:de:89:d5:36:e0:c0:d6:26:11:
         b4:f7:43:10:88:3a:a3:1c:e4:70:81:ee:a5:80:df:65:dc:9c:
         12:72:78:48:cf:3e:a8:32:8c:29:68:7c:fd:61:ee:11:a3:0b:
         a6:a1:f8:8d:5f:b2:72:db:81:48:7d:f6:1b:54:ad:56:4f:68:
         39:14:ef:c9:3a:ae:e8:d3:fe:9e:5e:1d:4f:45:ff:c1:a7:c9:
         26:38:a6:dd:d5:b7:09:e9:85:d2:40:9f:53:13:f3:78:2a:8c:
         1d:07:3f:e7:7c:d3:5c:39:87:10:44:2a:a1:54:4e:e0:c2:c1:
         0e:c3:71:b5:d9:2b:b5:ff:fd:f1:b9:c3:e2:54:b9:26:0e:d3:
         d3:d8:6b:52:d4:7d:c1:29:61:87:6d:29:bd:71:2e:a8:f0:3c:
         34:61:4b:2d:97:38:a0:aa:ce:2b:ca:f1:6b:34:05:76:5b:1c:
         02:a7:53:08:8c:93:56:bb:04:88:3a:c0:5a:cb:37:a2:02:61:
         00:76:d9:52:b9:ef:2c:e2:8c:f8:df:f8:62:1f:e2:18:2b:94:
         a5:5f:04:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:20:12 2021 by LibreSSL & rpki-client.