Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/l-LEBlBeeWrwSyomw87l-Z8GGXY.roa (download)

Subject key identifier:   97:E2:C4:06:50:5E:79:6A:F0:4B:2A:26:C3:CE:E5:F9:9F:06:19:76 
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
asID:                     AS6939
Prefixes:
    1: 185.68.47.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/l-LEBlBeeWrwSyomw87l-Z8GGXY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214496581 (0xcc8f545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
        Validity
            Not Before: May 10 09:30:35 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=97e2c406505e796af04b2a26c3cee5f99f061976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4f:12:b6:e3:97:7b:7e:4f:57:00:32:fc:7c:
                    8a:3d:8b:ba:d9:8b:32:ff:17:c6:aa:f7:7e:99:14:
                    53:5d:1b:35:ff:09:f6:37:32:08:b6:6f:22:7e:f0:
                    83:01:ad:b2:6c:c6:ed:27:af:b7:22:89:0a:b4:51:
                    8b:19:e4:89:69:84:d5:59:aa:5f:c3:64:33:56:df:
                    15:bd:47:5f:fa:7d:fa:6a:e9:ac:f6:86:c1:81:ad:
                    cb:b1:14:74:aa:37:49:4f:d2:ad:71:54:fa:fa:4f:
                    a9:87:eb:f4:fe:c8:d9:64:d4:08:2e:2c:30:f2:38:
                    99:ab:a0:46:2f:b0:56:c2:ce:5c:f9:80:40:f8:fc:
                    5f:2d:86:4c:bb:31:47:33:64:c4:17:fb:06:37:e1:
                    bb:c8:39:e2:d3:43:cd:81:18:6f:f0:10:57:2b:25:
                    5e:40:72:e5:5b:e1:d7:69:b2:6a:22:71:92:a6:8f:
                    f9:04:bd:ff:73:b5:39:38:3f:09:38:8e:22:16:71:
                    4f:70:1f:90:62:2e:a3:78:8f:5d:ff:54:57:f7:c0:
                    9c:c6:3b:b5:41:3a:11:a4:5f:53:b1:49:24:4c:17:
                    df:1e:15:c8:2a:a2:47:20:dc:62:62:e5:86:2c:23:
                    d1:96:40:b5:dc:dd:39:02:51:80:f6:f3:06:83:7c:
                    76:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                97:E2:C4:06:50:5E:79:6A:F0:4B:2A:26:C3:CE:E5:F9:9F:06:19:76
            X509v3 Authority Key Identifier: 
                keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/l-LEBlBeeWrwSyomw87l-Z8GGXY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.68.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:72:7c:9e:45:a2:1b:d7:a6:de:90:7e:6a:2c:cf:6b:ed:b1:
         57:e0:3f:90:da:9f:10:52:98:92:1f:46:b9:5a:a6:b8:92:a9:
         35:61:d2:7c:1d:6e:09:5e:39:55:e1:88:ad:b2:21:ea:25:40:
         39:e9:d6:d4:0e:c4:df:7c:27:c5:6b:80:37:80:60:44:bd:9a:
         7b:e1:0a:ef:a9:20:75:13:73:ce:60:2f:2a:83:63:96:c2:1b:
         b7:96:70:e5:a0:d2:6c:5c:e8:8c:6f:ee:a6:68:21:37:9e:a0:
         4d:8a:9c:55:03:d4:4a:ae:79:b8:48:b0:bd:0b:bb:0d:10:c7:
         e2:29:75:d7:fd:ae:8a:a7:7f:4b:e2:33:d8:d7:7a:b5:f2:82:
         4b:2e:a2:0e:3a:15:9b:d5:52:77:09:d8:d4:63:a0:54:1c:3e:
         8b:17:53:d3:63:4a:81:db:3c:e8:39:27:8d:b5:1e:a8:cc:56:
         2f:08:2c:2c:9b:92:03:d9:39:46:a7:93:d6:df:86:ba:ef:a2:
         f2:f2:bc:77:fd:dc:10:d9:84:8b:06:f4:9d:fe:a8:94:87:9c:
         b7:59:d2:71:2b:40:c1:50:eb:10:31:d9:f4:4a:54:66:8e:d6:
         32:fb:28:cb:59:cc:70:49:0a:72:74:0f:85:3d:c7:d4:5c:e9:
         3f:ed:01:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:32:24 2021 by LibreSSL & rpki-client.