Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/KCVguhS2uqZSAYxMx4cRY6X3LU4.roa (download)

Subject key identifier:   28:25:60:BA:14:B6:BA:A6:52:01:8C:4C:C7:87:11:63:A5:F7:2D:4E 
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
asID:                     AS174
Prefixes:
    1: 185.150.204.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/KCVguhS2uqZSAYxMx4cRY6X3LU4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112824140 (0x6b98f4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
        Validity
            Not Before: Feb 19 07:09:54 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=282560ba14b6baa652018c4cc7871163a5f72d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:25:7d:c7:82:1b:df:ec:9c:ab:da:41:b7:a3:
                    70:ef:0c:b9:38:bb:67:2a:e2:2d:1c:fa:5d:b2:c4:
                    99:f9:52:d7:40:5b:1a:97:36:fd:61:da:58:0c:97:
                    ac:95:54:dd:b3:bf:2f:3c:67:01:da:b8:93:a8:df:
                    40:bc:d9:3f:e4:ae:d3:eb:6c:70:a2:60:72:38:95:
                    49:90:37:42:7f:d4:fe:9a:d4:7d:e8:50:fd:11:ce:
                    53:d9:cd:f6:60:76:d6:30:c1:c3:fe:58:09:85:3b:
                    f6:ae:5c:68:df:81:d0:10:f7:85:7c:c3:cf:4b:cc:
                    cb:51:71:c1:81:9b:0e:c3:e9:7a:02:4c:d8:34:73:
                    50:d8:85:9c:2d:a8:28:e3:37:71:5f:b4:20:d7:fd:
                    62:07:72:de:14:3c:95:91:8e:14:88:07:14:e1:64:
                    10:be:db:09:2c:fb:59:d2:f7:51:07:9f:c6:4a:c1:
                    60:69:8e:d3:17:9f:31:a1:31:08:fc:0d:22:e4:90:
                    30:4c:df:c8:8f:0e:8b:10:b3:5c:fe:92:8b:f1:64:
                    c2:ad:c8:85:d6:e7:c8:be:e1:1d:d9:9b:11:3d:9a:
                    d8:0d:5a:f8:c7:a5:b1:e1:33:a3:af:c6:24:54:a0:
                    e3:db:20:0c:89:d7:51:67:44:c8:c3:2a:5f:b2:1f:
                    8b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                28:25:60:BA:14:B6:BA:A6:52:01:8C:4C:C7:87:11:63:A5:F7:2D:4E
            X509v3 Authority Key Identifier: 
                keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/KCVguhS2uqZSAYxMx4cRY6X3LU4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.150.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:3b:25:18:84:db:6c:6f:30:86:83:9e:ba:9e:2c:e2:b0:52:
         52:b7:07:4f:79:ad:cf:0d:d6:8d:e4:39:5a:ec:e8:a9:09:26:
         24:ff:fe:4e:0e:62:f6:68:39:ec:c9:fc:d6:04:9b:0d:a0:69:
         2f:da:10:34:64:5f:da:95:c5:b4:0a:a2:6d:b8:9f:71:67:a6:
         2d:3a:40:6a:09:25:0e:1d:82:81:0b:d9:f0:7f:34:00:09:e5:
         a5:de:c6:d6:56:e6:21:6c:21:94:0c:60:1f:ca:ea:45:6c:53:
         08:3a:d2:5e:f6:ae:36:f8:86:52:b1:50:b3:19:aa:9e:1b:71:
         fd:ff:81:9e:47:61:ef:88:8c:a1:a5:ed:d4:fe:01:a5:49:03:
         62:57:28:6f:00:d0:2c:41:bf:3f:b1:4a:29:5e:b4:6e:d8:71:
         e0:93:44:cf:e9:47:6e:26:85:0e:9e:a0:cd:70:73:8d:ae:dd:
         8f:99:97:1a:aa:93:a5:0b:b1:92:f8:93:27:56:77:7a:9d:2f:
         47:70:f1:14:7a:14:f9:4b:a3:10:4c:31:11:6e:84:25:c9:43:
         e1:b8:01:dd:45:a6:4a:e6:11:72:41:90:48:f2:50:00:ad:5b:
         fd:b2:4f:6b:64:4d:be:ce:01:78:4b:2e:b9:aa:c5:18:99:a7:
         d2:ca:81:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 11:52:25 2021 by LibreSSL & rpki-client.