Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/5f/cf5815-4e7d-4eaa-ae85-38a2c111dc4b/1/tGd-hDpX1xrusuozzy2Oz2VYKSs.roa (download)

Subject key identifier:   B4:67:7E:84:3A:57:D7:1A:EE:B2:EA:33:CF:2D:8E:CF:65:58:29:2B 
Authority key identifier: 2D:52:D3:B8:40:BD:CF:55:D2:69:DA:96:D1:C5:55:E1:A0:D6:EE:2C
asID:                     AS26636
Prefixes:
    1: 147.78.126.0/23 (max: 23)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/5f/cf5815-4e7d-4eaa-ae85-38a2c111dc4b/1/tGd-hDpX1xrusuozzy2Oz2VYKSs.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143161 (0x22f39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d52d3b840bdcf55d269da96d1c555e1a0d6ee2c
        Validity
            Not Before: Apr  6 15:58:57 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b4677e843a57d71aeeb2ea33cf2d8ecf6558292b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cf:f0:ff:39:41:da:b9:e6:5b:c9:2c:01:ae:
                    f3:cd:1a:d5:7c:1d:e3:6b:c5:3e:ab:bc:77:3a:bb:
                    0f:e2:dd:f2:44:cc:73:8e:cd:b9:2a:f4:55:96:58:
                    96:87:c2:fc:cd:45:ef:26:c7:e1:45:d5:c6:60:3d:
                    44:6c:10:1e:12:66:66:d3:bd:6c:d6:e8:bf:b5:ca:
                    4d:39:30:14:9f:c0:79:98:6b:d8:16:85:ac:d6:39:
                    e7:d1:1f:f5:5a:e1:35:de:68:36:c8:6a:f8:e0:a7:
                    ac:3b:38:7d:33:f2:cb:84:5f:68:d1:ce:05:3f:a9:
                    3c:19:93:32:07:24:f6:b8:17:80:db:15:89:bc:36:
                    57:0d:bf:b5:c4:c9:2f:b2:56:bf:31:a0:24:f8:5e:
                    49:47:1c:e6:f0:4c:08:b4:47:0d:7f:a1:53:14:9b:
                    69:55:af:06:00:c8:ed:eb:21:1a:0f:ba:fc:2c:44:
                    e2:34:9d:62:1a:72:58:25:9a:d0:b0:c2:b4:3d:bf:
                    04:2c:ae:9b:5c:50:95:a6:3b:02:3a:db:66:5d:50:
                    c6:11:bf:01:74:a3:61:bc:c7:ad:4c:75:3f:67:d1:
                    72:96:ff:b6:63:24:88:b9:ac:5c:45:e6:77:80:64:
                    19:0b:29:69:2c:0c:ab:4e:60:2c:f0:e9:07:28:2c:
                    bc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B4:67:7E:84:3A:57:D7:1A:EE:B2:EA:33:CF:2D:8E:CF:65:58:29:2B
            X509v3 Authority Key Identifier: 
                keyid:2D:52:D3:B8:40:BD:CF:55:D2:69:DA:96:D1:C5:55:E1:A0:D6:EE:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVLTuEC9z1XSadqW0cVV4aDW7iw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cf5815-4e7d-4eaa-ae85-38a2c111dc4b/1/tGd-hDpX1xrusuozzy2Oz2VYKSs.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cf5815-4e7d-4eaa-ae85-38a2c111dc4b/1/LVLTuEC9z1XSadqW0cVV4aDW7iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:0f:bf:9c:39:fc:76:91:3b:9a:fe:8b:ad:f3:d7:04:a1:ab:
         45:61:94:f4:f4:ed:21:f9:49:a8:f6:c5:86:30:6e:2b:4c:a3:
         f3:25:6f:da:3f:77:55:ea:3f:65:e3:3c:d0:2d:e3:66:27:93:
         36:d8:2c:c4:bf:ca:21:cb:96:d4:79:57:f9:8d:0d:06:e9:24:
         53:32:5e:4f:6d:0f:2e:dd:87:1a:bc:e7:d2:df:cd:49:dd:d6:
         2e:6c:ea:e9:4f:48:ac:cf:88:0d:e1:98:33:b9:e5:89:ce:77:
         65:f9:15:d9:a1:6b:3e:e3:4d:75:10:05:c6:16:d7:16:de:c7:
         d4:ab:60:e5:d0:0f:68:e5:a1:3d:d2:2d:bc:c5:ac:9b:06:c6:
         ec:26:0e:9a:b1:7d:bc:00:09:a1:8a:32:83:30:80:57:74:06:
         2a:82:1c:87:d8:2d:4f:ef:e6:a9:37:5d:7f:33:ba:f3:55:ba:
         8f:22:20:d1:57:23:80:4b:07:41:c1:e7:b3:f5:ae:1a:3b:5e:
         98:01:fc:6d:99:0f:c4:91:19:a3:2a:8a:14:79:1e:5a:65:b9:
         34:2f:59:47:90:20:29:01:d4:6a:eb:b0:5a:99:d5:d5:d3:18:
         3f:c2:0f:6c:67:97:f1:29:c0:65:97:80:12:2d:63:dc:45:20:
         12:8c:0b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Sep 23 08:45:13 2021 by LibreSSL & rpki-client.