Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/OrbTDamzepFHy0HglNpCA9C1PMw.roa (download)

Subject key identifier:   3A:B6:D3:0D:A9:B3:7A:91:47:CB:41:E0:94:DA:42:03:D0:B5:3C:CC 
Authority key identifier: 14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
asID:                     AS0
Prefixes:
    1: 185.90.119.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/OrbTDamzepFHy0HglNpCA9C1PMw.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37307751 (0x2394567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14fb7c3336acd4189d3fac639a280d9b0020f298
        Validity
            Not Before: Jan  1 04:18:52 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3ab6d30da9b37a9147cb41e094da4203d0b53ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:27:99:f5:c2:1d:e9:9c:6f:f3:c1:df:ea:
                    5f:2b:8c:24:6e:ff:eb:7a:71:c9:91:57:59:90:bc:
                    30:c3:c5:0b:f1:13:8c:6d:6f:13:25:81:08:54:d3:
                    26:c9:52:f3:93:b1:c7:cd:1e:a1:cd:89:f6:0d:f7:
                    6a:d2:90:73:f9:27:37:92:3a:36:36:67:d9:df:b5:
                    d9:51:57:66:ba:d9:47:db:ff:92:f6:b3:76:45:0e:
                    44:56:f9:3a:9d:5e:9d:fb:b0:92:11:56:de:90:b0:
                    0b:95:95:ca:00:ca:d0:45:89:89:04:b0:77:00:7a:
                    f8:6c:c7:31:19:bf:35:91:21:e1:50:7f:e4:65:c2:
                    6a:08:1f:76:12:99:fe:9b:bd:6b:8f:b2:a6:d3:d2:
                    fd:39:7a:18:c6:d8:1d:85:99:f5:1d:77:ce:91:1b:
                    24:c1:78:dc:e0:9b:80:86:d0:4c:4e:51:4f:c6:c5:
                    c7:42:3e:64:47:a1:86:6c:3c:13:18:af:3a:40:97:
                    ac:a7:51:94:56:c6:3e:d1:e7:45:6a:96:05:11:8f:
                    ee:98:7f:b4:46:fb:06:52:a7:8b:e3:01:65:16:46:
                    4a:7a:74:c0:1a:2d:1d:e1:e9:a8:af:69:c8:06:45:
                    a8:81:6b:50:d6:0c:da:d1:9f:80:eb:85:e9:b9:63:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3A:B6:D3:0D:A9:B3:7A:91:47:CB:41:E0:94:DA:42:03:D0:B5:3C:CC
            X509v3 Authority Key Identifier: 
                keyid:14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/OrbTDamzepFHy0HglNpCA9C1PMw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....Zw
    Signature Algorithm: sha256WithRSAEncryption
         17:eb:df:b7:76:b2:eb:46:7d:42:8b:ac:0f:3a:44:7e:ee:e7:
         ae:5e:e2:5a:58:79:6d:11:f9:2a:b6:fe:3e:67:41:35:8a:96:
         57:9f:b5:a5:70:f2:12:e0:e8:4e:a7:d2:19:c0:7a:e2:af:24:
         e1:c8:5e:38:ec:30:eb:41:f7:cb:df:1f:74:d8:6a:43:c4:f5:
         d0:d5:5c:18:81:21:44:75:5a:fd:01:d5:6c:ca:97:9b:13:63:
         9f:52:40:aa:2e:2d:fb:93:7d:a2:93:49:fa:3f:fd:9b:dc:96:
         03:d6:11:d8:56:43:cc:a2:d7:02:ab:b8:b1:75:bc:73:de:a1:
         5f:e6:05:7b:dc:1a:ec:34:be:92:15:3a:21:46:e2:f4:f2:32:
         9c:b5:fe:f4:45:76:fa:12:2b:0b:00:6b:d2:a3:65:0f:be:1a:
         51:47:bb:3f:32:2c:42:c1:08:51:89:e4:de:27:50:43:c8:ff:
         11:80:b2:1b:6a:5a:5d:71:99:a1:fd:53:f4:96:56:90:e4:58:
         51:53:2b:be:82:51:80:6c:9a:5c:93:1d:db:85:a3:60:75:97:
         a6:72:49:e1:72:5e:a2:0b:7c:be:21:f4:16:04:dc:a6:a0:8c:
         d5:a1:ea:aa:b8:30:b3:cf:0d:61:56:ed:ca:a9:3e:f4:76:f0:
         d3:12:b1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:21:00 2021 by LibreSSL & rpki-client.