Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/MctQTbYiFJ-sORrppEazcW4S748.roa (download)

Subject key identifier:   31:CB:50:4D:B6:22:14:9F:AC:39:1A:E9:A4:46:B3:71:6E:12:EF:8F 
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
asID:                     AS0
Prefixes:
    1: 194.116.96.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/MctQTbYiFJ-sORrppEazcW4S748.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211479537 (0xc9aebf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
        Validity
            Not Before: Jan  1 03:03:58 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=31cb504db622149fac391ae9a446b3716e12ef8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:d9:97:bb:96:7f:9c:03:fc:2a:47:05:4d:
                    b6:63:63:58:64:3e:96:3c:e6:b2:c9:5a:f4:3f:d3:
                    db:a6:b2:85:b8:d1:87:eb:e9:ad:ef:37:bd:c8:d2:
                    54:c0:3c:25:29:fe:8b:0f:be:28:44:2e:df:23:48:
                    b4:55:f6:c7:73:db:3f:9f:4f:5f:94:69:1c:3e:0d:
                    1e:b3:02:3b:91:18:ab:ac:b7:ce:b6:10:36:a0:db:
                    eb:e8:cc:32:4b:1a:1a:05:ef:64:4a:e6:8a:05:98:
                    6e:6d:7a:05:82:3d:b7:04:4b:7d:9b:f1:66:82:94:
                    39:ad:7e:8f:6f:07:5b:08:0d:39:bf:fe:42:fc:a2:
                    eb:3c:cd:aa:45:0a:ac:de:9e:6c:34:12:18:7a:29:
                    d6:7f:e6:5a:5f:b4:ab:57:db:f1:19:8d:5e:30:25:
                    83:ff:58:a5:9a:c5:83:89:8f:cf:52:15:34:82:cc:
                    01:62:07:23:c2:33:f6:dc:01:8f:c7:74:19:bd:b8:
                    d6:86:42:fd:04:36:ad:7d:15:1e:35:8e:09:87:76:
                    23:ec:25:e7:03:e3:8a:30:4a:82:62:38:f4:99:58:
                    81:1e:7f:5f:09:05:fd:aa:fb:44:af:8a:a9:1b:cf:
                    cc:7f:43:8c:2c:5a:d7:98:b5:09:f5:22:67:bc:81:
                    f2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                31:CB:50:4D:B6:22:14:9F:AC:39:1A:E9:A4:46:B3:71:6E:12:EF:8F
            X509v3 Authority Key Identifier: 
                keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/MctQTbYiFJ-sORrppEazcW4S748.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....t`
    Signature Algorithm: sha256WithRSAEncryption
         40:b4:eb:35:d1:73:c7:a0:33:e9:53:88:4b:ef:4f:0b:85:81:
         6a:b5:1b:a7:9a:31:63:b5:1a:46:42:58:98:77:dc:4c:d6:78:
         db:89:c6:77:a1:e7:ec:cb:5e:f8:67:8e:db:72:cd:ac:50:91:
         5b:85:b8:e8:a6:67:b2:14:45:d7:cc:03:2e:15:f7:c7:0a:fd:
         78:c5:5f:ea:f2:b1:3d:91:71:e5:d9:98:44:d9:ef:42:f7:d1:
         2d:87:1e:88:02:04:8a:00:e9:ae:16:78:e1:ce:db:57:2f:84:
         0f:96:07:c3:39:64:62:4b:84:fa:3a:ef:b0:75:60:d0:74:62:
         40:fe:48:e1:99:c4:85:90:fb:ee:8c:ac:4d:44:d8:32:6f:66:
         f7:8d:5b:f5:20:cf:af:db:7f:9e:71:d4:f4:b6:22:53:2e:d4:
         f1:6d:71:80:12:d9:66:4a:b8:18:5f:72:fe:5f:21:bd:d0:b4:
         8d:fa:61:81:86:85:e2:3c:9c:3f:09:41:b7:de:4f:ad:67:3c:
         ec:ac:ab:13:27:6c:42:68:f9:3d:1c:51:e0:10:7a:35:e9:51:
         d6:50:5a:92:a6:97:ce:20:70:70:7b:47:5e:02:91:3c:04:4e:
         bb:e3:4a:8f:66:4d:0e:b5:98:64:10:ef:77:2a:c4:70:49:65:
         b8:83:31:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:15:57 2021 by LibreSSL & rpki-client.