Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/ryZu85jQF5W7ZUIMGFb7k-GiLJM.roa (download)

Subject key identifier:   AF:26:6E:F3:98:D0:17:95:BB:65:42:0C:18:56:FB:93:E1:A2:2C:93 
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
asID:                     AS396982
Prefixes:
    1: 195.149.126.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/ryZu85jQF5W7ZUIMGFb7k-GiLJM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115365 (0x1c2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
        Validity
            Not Before: Jan 11 11:10:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=af266ef398d01795bb65420c1856fb93e1a22c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f7:50:92:15:79:51:81:ed:ae:14:18:d9:85:
                    f8:b3:ab:78:dc:da:80:ac:9c:61:05:3e:41:11:e8:
                    8d:bc:a2:c9:01:17:9b:1b:2f:35:f1:42:6c:39:7b:
                    12:45:88:ab:83:b0:13:46:16:93:70:fe:b7:62:de:
                    b5:f9:fb:e0:b0:b0:9c:13:dc:67:cf:3b:80:ea:aa:
                    24:94:07:7b:e8:a8:43:56:bf:65:d0:d3:a7:be:5b:
                    f6:31:f2:dd:ad:78:96:d8:8c:93:24:e7:c1:95:0c:
                    06:8a:1b:d1:4e:a2:5f:83:5f:86:a3:ac:fb:a6:08:
                    73:6b:c9:b1:a3:cc:cb:cd:a6:fd:27:ea:44:53:16:
                    5a:f9:59:e1:72:a0:09:c0:38:ba:40:08:9a:26:03:
                    62:e2:f2:ff:cb:94:67:86:db:5b:19:e3:b1:7d:58:
                    04:40:d5:c9:6a:7e:d0:01:6b:78:6b:b8:ad:3b:3a:
                    4c:f0:c0:54:7f:7f:a6:e4:b4:e8:a5:59:33:53:5f:
                    30:2b:14:f4:f7:ac:15:a5:43:bb:58:34:f2:9a:5e:
                    e5:be:8b:06:64:41:01:9d:63:84:78:01:19:62:63:
                    36:60:86:b5:2b:20:1f:d1:26:5e:92:54:48:7d:43:
                    c1:27:ea:4a:7e:00:09:6d:76:e8:5b:de:16:1f:47:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AF:26:6E:F3:98:D0:17:95:BB:65:42:0C:18:56:FB:93:E1:A2:2C:93
            X509v3 Authority Key Identifier: 
                keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/ryZu85jQF5W7ZUIMGFb7k-GiLJM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.149.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:b1:96:18:28:90:53:24:69:a8:fd:9c:64:92:b3:8e:05:66:
         c3:15:4f:eb:40:d2:da:a2:95:a0:97:7c:53:54:7f:41:f6:0d:
         d5:80:66:4a:53:27:8f:21:c3:a7:cb:9f:d9:b5:41:4c:37:79:
         0c:1f:f4:f6:b9:2c:06:04:76:42:0d:f6:d2:18:59:70:78:68:
         97:1b:f1:fe:a3:76:3b:07:8a:1c:4c:01:27:a2:fd:2c:2f:67:
         25:36:a5:f2:87:ae:88:42:46:61:49:e0:25:9a:97:4d:67:72:
         70:38:8f:24:b8:28:9b:4e:ab:49:ca:17:73:9d:8f:03:bc:c1:
         84:e4:03:41:f0:87:66:fe:f2:1d:de:02:35:9a:68:da:d3:db:
         39:16:6a:8c:44:4b:77:01:fc:95:80:ff:55:60:fe:29:eb:a5:
         df:4b:ea:0b:1a:56:14:8a:1f:65:bf:63:78:41:a7:55:de:de:
         77:f6:a2:e6:e6:db:2c:9e:21:d6:81:6b:1b:c1:06:b2:e9:1b:
         7e:39:92:b9:1d:07:77:1a:71:66:ac:92:5a:10:69:07:4d:de:
         99:42:4d:a6:84:71:2e:0c:9d:f6:f7:d4:c0:a5:fd:ac:58:03:
         86:e9:5d:99:57:a9:a9:93:7f:3e:f1:ba:75:c8:28:cb:8e:38:
         67:c5:4e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 11 13:41:00 2022 by LibreSSL & rpki-client.