Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/GVyg_U3jiPs8u4qppeEa1S63XSE.roa (download)

Subject key identifier:   19:5C:A0:FD:4D:E3:88:FB:3C:BB:8A:A9:A5:E1:1A:D5:2E:B7:5D:21 
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
asID:                     AS3356
Prefixes:
    1: 193.142.36.0/22 (max: 22)
    2: 91.132.124.0/23 (max: 23)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/GVyg_U3jiPs8u4qppeEa1S63XSE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128224 (0x1f4e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
        Validity
            Not Before: Apr 19 11:26:01 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=195ca0fd4de388fb3cbb8aa9a5e11ad52eb75d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ba:84:52:a0:90:cb:97:f6:a1:67:10:b6:02:
                    91:58:4b:3c:97:8f:96:9c:70:88:b1:d2:3a:0d:70:
                    2b:0d:7f:8d:85:e7:26:a2:45:02:83:58:d3:f0:00:
                    68:ae:05:ad:85:ad:79:dc:fd:cd:a1:53:90:6f:65:
                    df:8c:e0:3f:82:4e:dc:f9:51:25:d0:3a:ab:b6:4a:
                    32:59:80:3d:ee:e4:f5:24:1d:31:9a:bb:f3:3c:9b:
                    b4:c7:74:08:30:d8:5a:9b:40:a1:a2:8d:f8:c8:ad:
                    89:bf:f6:0e:56:01:ad:9d:e7:71:05:a1:f0:00:a6:
                    94:97:9b:bd:1e:0e:94:32:6b:fc:44:59:9f:09:9e:
                    e6:42:7f:6d:d8:c5:01:c1:4a:5c:3e:9b:e5:ee:a3:
                    6d:c1:e4:cd:bb:be:7e:e4:6b:84:83:2f:64:f0:4e:
                    45:7c:3f:29:e7:13:7a:63:18:ec:2d:4d:67:1f:35:
                    0e:97:75:cd:10:9c:f5:56:b4:52:d7:a9:cc:f4:ea:
                    21:6a:80:a6:3f:52:d9:5a:d3:e6:b1:28:e9:bc:5c:
                    0b:8e:34:87:f9:fb:ed:a1:47:ee:60:d4:67:25:d7:
                    fe:9b:4b:b8:8e:d4:06:da:3b:09:3b:32:68:3a:f1:
                    df:e6:19:e2:17:3d:f4:2a:64:9c:a7:67:98:56:47:
                    b8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                19:5C:A0:FD:4D:E3:88:FB:3C:BB:8A:A9:A5:E1:1A:D5:2E:B7:5D:21
            X509v3 Authority Key Identifier: 
                keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/GVyg_U3jiPs8u4qppeEa1S63XSE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....[.|.....$
    Signature Algorithm: sha256WithRSAEncryption
         b4:14:c6:f0:98:23:3d:f4:d2:99:2b:29:5c:d9:78:6b:e8:b9:
         79:17:ad:fa:d6:cb:49:0d:bc:11:af:5b:a9:8d:0e:fd:39:8b:
         84:99:78:2b:92:89:29:fa:e1:4c:cd:fa:59:2f:bb:17:1d:db:
         8a:20:5f:72:2c:51:d2:71:f0:5d:8e:09:a9:ff:5a:b2:0a:ad:
         f0:bb:54:79:a6:45:5e:b6:c3:fa:8d:34:49:74:a7:38:b6:9a:
         8c:ab:a5:8f:c8:58:67:2d:bb:b5:66:a7:88:e1:3f:5d:0f:9d:
         85:df:d2:06:19:05:0a:d9:5a:f8:ee:3c:bb:40:c2:30:2d:97:
         57:ab:92:da:fb:42:68:51:2f:1d:c6:35:1c:73:1d:a2:69:31:
         c0:3c:32:c6:d0:7d:a1:8f:05:1a:42:08:10:49:69:72:21:9f:
         92:c2:52:a1:e9:da:42:73:cc:8f:8b:dd:dd:ec:6c:c8:43:c6:
         2b:d9:62:25:4e:3d:5a:c8:ef:be:f7:15:18:63:c1:e8:80:0d:
         4c:46:ac:8e:fe:3f:fb:ed:b9:b3:8a:b6:f8:4c:49:09:95:4f:
         6e:8d:b2:81:4c:11:62:b9:5f:e3:e5:b5:73:1d:19:09:73:83:
         75:ba:e6:fb:af:54:72:75:9b:25:b5:43:4f:05:42:e0:34:8e:
         a4:f5:63:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Jun 3 12:44:23 2021 by LibreSSL & rpki-client.