Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/xreWbHjAcIcibKuObMTQasPqsRg.roa (download)

Subject key identifier:   C6:B7:96:6C:78:C0:70:87:22:6C:AB:8E:6C:C4:D0:6A:C3:EA:B1:18 
Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
asID:                     AS174
Prefixes:
    1: 185.189.173.0/24 (max: 24)
    2: 185.189.172.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/xreWbHjAcIcibKuObMTQasPqsRg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212217317 (0xca62de5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b
        Validity
            Not Before: Jan  1 01:05:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=c6b7966c78c07087226cab8e6cc4d06ac3eab118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:86:01:37:5a:20:98:9b:4c:15:13:b4:fc:b8:
                    65:73:55:b9:1a:4e:6b:03:ce:27:a5:12:58:f2:52:
                    05:7c:1d:76:c2:4d:01:e1:6a:d1:05:a5:4e:4c:5c:
                    13:12:5f:1a:fc:d5:4a:d0:2c:24:52:d1:c1:28:70:
                    5f:50:63:f2:59:22:35:bf:b3:a8:ad:43:23:f6:d0:
                    fe:f4:e1:2c:59:29:ec:c5:30:8f:dc:2b:58:4b:48:
                    f6:45:7c:f2:0e:f2:3c:58:0f:84:a3:ea:a4:c5:9d:
                    e9:8c:71:f8:86:8c:be:bd:3b:f2:f2:8b:23:10:86:
                    7c:29:71:f6:4b:39:b9:a3:07:36:04:be:f9:40:c4:
                    30:a0:fe:0d:8f:25:4a:46:6a:9f:46:65:af:f2:0e:
                    b4:b6:f4:45:1e:e0:c5:a3:9f:f4:ba:57:8f:06:b6:
                    2b:f8:ec:ce:39:88:ca:ac:48:41:62:8b:e8:69:8a:
                    ff:b5:f9:44:3a:b0:4d:e9:4c:2d:28:54:8b:d9:a7:
                    85:a0:a1:46:be:1c:a8:88:14:71:e9:b9:28:79:22:
                    93:ed:b2:88:a9:ca:5c:0c:2f:9e:61:28:36:85:a4:
                    ba:7b:0d:ac:9d:73:c2:49:3d:e3:b9:6f:fa:d6:d3:
                    3e:cb:2f:38:4a:db:58:c0:13:8b:81:3c:89:df:76:
                    13:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C6:B7:96:6C:78:C0:70:87:22:6C:AB:8E:6C:C4:D0:6A:C3:EA:B1:18
            X509v3 Authority Key Identifier: 
                keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/xreWbHjAcIcibKuObMTQasPqsRg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.189.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:95:b9:6c:62:83:e0:a5:5b:90:a6:1e:6f:49:80:79:02:c1:
         df:62:e3:a1:12:fd:86:b8:04:66:6c:fc:43:a3:11:d5:78:e1:
         ac:6f:ae:24:20:6c:69:11:c2:be:16:20:82:74:d9:82:61:6b:
         f3:81:fb:20:42:f0:85:98:da:dd:c9:cd:74:12:3d:12:31:9e:
         a4:4f:c0:1a:71:64:3d:a9:62:98:e8:8a:ce:c4:c7:69:9c:72:
         93:39:7e:b3:48:ae:1d:59:b0:6a:3c:c0:79:0c:15:27:9b:28:
         66:bc:62:dd:f0:14:eb:c0:db:74:51:c6:cd:aa:6f:04:5d:af:
         54:30:6e:c2:65:ff:b4:03:32:83:78:1d:85:8e:36:32:ef:2a:
         96:a4:7b:c8:16:5c:76:64:04:72:1f:79:55:f3:48:2a:8a:25:
         e9:e8:7e:7d:7b:04:de:0a:e8:2d:96:fe:10:18:28:f2:e3:c6:
         bb:8b:8d:af:9b:e8:6c:48:cd:17:1c:3b:9a:c4:b4:68:7c:86:
         8b:e8:2a:ff:e6:c1:06:70:db:4c:ec:89:ab:9c:27:73:90:d5:
         14:e7:4c:30:74:2c:5b:32:8f:41:c0:76:ff:30:b3:0b:59:2b:
         97:7e:58:a0:a3:b9:e0:7d:75:5f:cd:56:25:b0:2b:04:fe:2c:
         b0:55:3a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 11:56:21 2021 by LibreSSL & rpki-client.