Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/lNCEm-7A5ZXyF7r-PMlUSbEfb6o.roa (download)

Subject key identifier:   94:D0:84:9B:EE:C0:E5:95:F2:17:BA:FE:3C:C9:54:49:B1:1F:6F:AA 
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
asID:                     AS396982
Prefixes:
    1: 185.73.224.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/lNCEm-7A5ZXyF7r-PMlUSbEfb6o.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101591269 (0x60e28e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
        Validity
            Not Before: Jan  1 08:59:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=94d0849beec0e595f217bafe3cc95449b11f6faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:41:7b:a1:00:a2:f7:0a:70:4b:3f:64:9d:ea:
                    3d:15:ab:0e:c2:9c:ce:70:58:8f:be:7b:05:e4:42:
                    f2:55:55:60:7c:21:94:32:22:d5:93:08:2d:05:04:
                    84:53:1a:22:d8:ca:b3:5b:60:5c:25:a7:bf:2c:fc:
                    28:a7:6d:26:3f:6d:21:28:16:d3:2b:d3:3a:70:d3:
                    85:cc:a2:7d:94:2a:9a:6e:e6:2e:79:32:62:e8:5c:
                    87:64:eb:10:5b:2a:42:b7:63:f0:ae:86:04:e9:3b:
                    1b:9b:69:70:6a:85:65:8a:1f:da:01:e1:a6:ba:98:
                    2d:dd:2a:8e:07:7d:08:59:e6:a6:30:24:8d:80:ed:
                    17:91:71:1e:b4:1b:80:22:81:4a:15:7b:b8:1f:30:
                    0e:91:cb:41:ec:db:54:c1:42:d5:d2:e3:28:da:8f:
                    f0:c9:b5:2c:07:23:cd:23:22:cd:80:0a:cc:eb:28:
                    f2:26:27:99:d2:ea:98:0e:ca:33:37:01:5d:0c:de:
                    c5:36:68:aa:93:7c:ca:ce:01:72:4a:76:1d:f4:f3:
                    f3:69:0c:1f:3f:0a:c4:73:b8:84:ca:3a:a6:13:be:
                    0c:88:12:2b:e7:dd:dd:73:5e:8b:5f:72:21:25:b2:
                    f0:d7:9a:fb:b4:70:3b:46:cd:1e:94:dc:56:b0:72:
                    5f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                94:D0:84:9B:EE:C0:E5:95:F2:17:BA:FE:3C:C9:54:49:B1:1F:6F:AA
            X509v3 Authority Key Identifier: 
                keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/lNCEm-7A5ZXyF7r-PMlUSbEfb6o.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.73.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:2b:f0:05:82:25:cd:c7:b4:83:f4:00:91:ac:90:e1:ae:3d:
         27:e4:4c:75:bd:ee:62:35:c4:c7:83:70:9f:9b:21:68:08:f7:
         2a:5b:f5:0d:07:07:cd:11:84:bb:2a:8c:83:54:4a:59:52:d3:
         ae:85:c5:0a:97:89:8d:a1:16:6a:55:e1:ac:6f:53:11:7b:f2:
         1d:67:fc:a6:29:45:06:37:63:db:4a:06:19:0c:d4:b6:57:25:
         63:48:b9:13:ed:d5:da:d6:60:a4:e9:15:80:ec:9a:39:82:5a:
         d7:f7:b3:3f:84:5b:c0:3f:de:f1:4a:73:59:3d:01:67:ee:4c:
         a3:7c:08:15:da:53:73:31:06:d8:0f:14:b1:b5:29:75:c7:25:
         0d:6f:1f:35:75:90:f8:e0:70:82:03:d9:fc:54:fa:de:ea:77:
         c6:24:10:3e:69:ff:b6:b5:68:de:34:4c:d2:53:d6:ea:63:c9:
         d1:98:4c:69:11:5e:70:ea:92:b4:91:b8:17:bf:31:c2:01:82:
         17:c9:73:59:7b:e8:88:a6:0c:40:b8:cd:6a:3d:03:0d:bb:c7:
         bb:b3:93:96:7f:9e:59:2a:4f:6e:61:14:32:ab:0f:e1:70:7e:
         08:70:7c:78:f8:8b:db:b0:95:cf:5b:09:2c:a5:8a:cf:05:d8:
         39:08:99:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 12:02:30 2022 by LibreSSL & rpki-client.