Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/48/fbb438-aa2d-4e1d-9c1d-9d8bd6c15174/1/9CUYSXSFxMaFSXZgcu4Jpzd5dKA.roa (download)

Subject key identifier:   F4:25:18:49:74:85:C4:C6:85:49:76:60:72:EE:09:A7:37:79:74:A0 
Authority key identifier: AC:B2:C7:79:91:BA:E8:16:AE:7E:C4:BE:06:F4:92:38:DF:5A:AD:73
asID:                     AS174
Prefixes:
    1: 193.148.12.0/23 (max: 23)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/48/fbb438-aa2d-4e1d-9c1d-9d8bd6c15174/1/9CUYSXSFxMaFSXZgcu4Jpzd5dKA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91299192 (0x5711d78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb2c77991bae816ae7ec4be06f49238df5aad73
        Validity
            Not Before: Jun  9 18:14:16 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f42518497485c4c68549766072ee09a7377974a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:75:bd:6c:71:c9:6c:e0:85:aa:ed:0f:a2:35:
                    3a:38:f3:87:01:1b:b2:64:79:54:23:88:56:48:70:
                    31:23:dc:30:bf:30:8b:df:f3:e9:30:f8:9e:f5:b8:
                    65:cb:73:a4:5f:b7:26:76:65:10:f9:6a:f0:05:f7:
                    ee:e6:c4:a7:61:9f:b8:15:91:87:69:6c:13:7a:b0:
                    e2:c9:24:97:0b:91:28:5b:31:7c:6a:81:e3:9a:0d:
                    12:1c:3e:ce:ce:a6:f9:ed:f5:4a:cf:bc:61:ca:2d:
                    29:c5:16:7e:59:cb:b1:0a:15:85:10:dd:53:c5:6e:
                    69:56:3b:f2:db:5f:e3:e3:5d:34:30:95:04:bf:35:
                    4c:8d:20:93:31:2a:29:f3:18:36:22:5a:a2:87:ae:
                    2a:4b:2a:7b:80:3e:7d:05:bc:b6:07:09:de:76:30:
                    12:08:ef:46:a6:64:30:2a:5c:ae:8d:32:ed:a2:aa:
                    95:48:a3:1d:f7:ae:b0:34:d1:5c:c7:02:41:60:c5:
                    39:25:f2:e3:50:fb:92:fc:fa:2b:8e:a4:6d:1c:9b:
                    fb:38:c1:da:fb:01:09:89:3d:79:4b:00:39:9e:54:
                    eb:20:d6:52:4b:8b:e8:43:fd:a6:c5:83:cc:fa:2f:
                    66:1b:f7:5b:fd:9e:f7:68:fa:48:10:25:52:96:42:
                    09:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F4:25:18:49:74:85:C4:C6:85:49:76:60:72:EE:09:A7:37:79:74:A0
            X509v3 Authority Key Identifier: 
                keyid:AC:B2:C7:79:91:BA:E8:16:AE:7E:C4:BE:06:F4:92:38:DF:5A:AD:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLLHeZG66BaufsS-BvSSON9arXM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fbb438-aa2d-4e1d-9c1d-9d8bd6c15174/1/9CUYSXSFxMaFSXZgcu4Jpzd5dKA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fbb438-aa2d-4e1d-9c1d-9d8bd6c15174/1/rLLHeZG66BaufsS-BvSSON9arXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.148.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:75:67:4c:26:32:c1:96:ca:63:6f:02:1d:af:ea:1f:a4:62:
         0e:5a:3d:f9:22:10:a4:e9:e1:ea:e3:95:fb:27:d1:28:55:c6:
         8e:db:b4:f7:8a:74:53:a2:c5:21:71:98:56:53:20:b9:d5:06:
         1b:08:e4:8c:7c:1d:b3:53:52:f0:00:b6:63:b3:31:a0:28:cc:
         5c:b6:de:a0:2d:ef:de:11:44:23:92:b5:bd:82:83:17:d4:87:
         f4:fe:66:87:b4:5c:0f:2f:3d:b6:3a:85:c1:09:f3:91:03:f5:
         1b:d0:e5:2e:6b:3f:99:9c:f7:be:66:1f:ac:93:c1:35:71:c8:
         61:14:a3:5d:5c:0a:33:63:c0:41:31:f0:86:cc:6a:c6:82:35:
         a3:80:02:fe:30:60:45:bf:0f:2d:36:99:67:cc:2f:bd:b9:3f:
         89:16:f3:94:9b:2d:a2:0c:24:be:fe:a2:b5:ca:9d:b6:5a:f6:
         d9:ba:9b:ab:04:a7:b8:30:f4:99:61:6b:70:0e:96:da:b2:00:
         c6:70:64:d6:bd:ed:a7:ce:51:4f:7a:c1:f6:21:1d:8c:5a:d7:
         cb:f6:50:5b:57:f8:2c:12:b1:f7:1d:b3:5e:fe:ab:4f:8d:e9:
         fe:bd:24:06:0c:d5:d0:cb:9c:7b:7b:31:08:08:cc:fa:62:7d:
         49:f9:0d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 11:52:48 2021 by LibreSSL & rpki-client.