Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/RHlHAahpEX8kMZbY94xrTBe_E9s.roa (download)

Subject key identifier:   44:79:47:01:A8:69:11:7F:24:31:96:D8:F7:8C:6B:4C:17:BF:13:DB 
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
asID:                     AS834
Prefixes:
    1: 185.132.186.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/RHlHAahpEX8kMZbY94xrTBe_E9s.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16783690 (0x100194a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
        Validity
            Not Before: Sep 14 13:44:32 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=44794701a869117f243196d8f78c6b4c17bf13db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:6e:c7:12:50:f0:f2:64:0e:17:a4:ac:a9:
                    e0:1b:da:09:1f:32:d0:70:34:7d:49:0b:d2:6e:90:
                    1e:ec:91:a8:14:4d:85:8c:38:27:c0:a3:fd:74:b0:
                    7f:a1:44:4b:5a:57:87:84:41:89:4d:88:8b:f9:99:
                    f6:87:0c:31:d3:fe:63:86:fa:40:7f:ae:ff:57:80:
                    05:36:72:3c:1b:3b:22:2c:80:23:6d:c7:64:2d:a6:
                    bc:08:a3:0c:45:14:c7:0e:b1:25:05:48:50:79:b6:
                    ad:1a:09:4c:50:47:78:57:0d:15:1e:0d:f9:fd:28:
                    e1:8e:8a:56:9d:21:f5:36:d0:3b:b2:6f:c1:65:32:
                    50:3a:65:18:92:12:b3:f7:9a:ad:ab:26:df:28:df:
                    3c:fa:91:24:d9:8c:51:fb:be:be:ee:28:d8:fe:ea:
                    d7:43:98:78:3e:10:37:2c:96:48:d8:47:61:99:a7:
                    4e:6d:9d:12:de:30:3d:68:a2:e9:f7:8e:3d:86:0b:
                    e5:02:3f:25:fb:40:ec:1a:d4:2e:14:54:53:d1:2e:
                    4e:1b:97:16:39:1b:84:06:48:f5:54:ee:ad:9a:fa:
                    fb:69:52:02:c1:e2:5c:f2:d5:bb:e1:18:76:5e:43:
                    92:ab:8b:53:50:2b:62:12:b4:64:84:3e:cf:7d:5c:
                    75:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                44:79:47:01:A8:69:11:7F:24:31:96:D8:F7:8C:6B:4C:17:BF:13:DB
            X509v3 Authority Key Identifier: 
                keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/RHlHAahpEX8kMZbY94xrTBe_E9s.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.132.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:84:aa:ff:5e:10:85:c5:47:8d:01:e5:26:5d:17:ec:c9:32:
         fc:c2:31:57:23:8b:2a:f1:b3:6c:b1:85:55:23:c2:31:8b:b4:
         d2:d2:67:64:37:38:ec:74:0d:ec:4e:85:1f:a2:a7:07:8e:27:
         83:e8:38:6a:9f:8d:b9:aa:c6:ca:e7:3a:31:d4:25:21:94:6c:
         8e:c0:42:4f:a0:55:24:7e:f7:57:0e:f0:64:c9:e2:73:8e:2f:
         09:03:ce:66:4e:4b:b7:73:b6:05:0e:a3:30:55:46:f1:aa:2a:
         1a:12:93:0b:51:85:45:b7:e3:91:87:de:ec:11:a0:ae:0f:d5:
         1c:1e:7d:79:d3:52:7d:ac:e4:60:36:2a:8e:08:16:99:bd:09:
         a7:10:7d:ad:74:2e:12:b8:62:1e:4a:85:a7:ee:38:82:ce:0e:
         15:e7:02:35:28:c5:82:09:c7:d2:c8:2c:10:24:cd:e0:6e:ed:
         b0:ab:3e:70:71:2f:85:a0:7f:02:17:1c:f9:24:e2:41:c1:3e:
         9a:2c:cd:d8:5d:db:8d:fd:b0:d5:26:65:74:3e:95:5d:75:c9:
         02:a8:56:ad:47:67:d6:d1:68:d9:45:1e:b9:fa:7c:ad:3a:12:
         6d:af:61:6c:ab:34:cf:48:ce:5e:60:69:87:94:03:47:cf:0c:
         fb:40:c0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:31:44 2021 by LibreSSL & rpki-client.