Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/0krDXXrLSuC1j-EY5dtcLERee_Q.roa (download)

Subject key identifier:   D2:4A:C3:5D:7A:CB:4A:E0:B5:8F:E1:18:E5:DB:5C:2C:44:5E:7B:F4 
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
asID:                     AS396982
Prefixes:
    1: 146.66.122.0/24 (max: 24)
    2: 146.66.121.0/24 (max: 24)
    3: 146.66.123.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/0krDXXrLSuC1j-EY5dtcLERee_Q.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110302864 (0x6931690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
        Validity
            Not Before: Jan  1 04:22:31 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d24ac35d7acb4ae0b58fe118e5db5c2c445e7bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:ad:df:1d:57:53:a4:82:51:3a:ac:84:f1:
                    87:ea:da:61:f1:2e:dd:a5:1c:f3:10:09:93:49:d5:
                    97:20:d1:a3:bc:64:a4:26:ae:fd:15:2e:2c:11:30:
                    b0:fe:d8:96:f5:8d:71:1b:2c:d8:61:9c:dd:43:20:
                    b5:67:c5:bd:fa:5e:5b:fd:2b:ce:0b:82:b1:96:0a:
                    f9:e8:58:c7:2f:30:3f:c0:8b:e3:cd:e6:26:03:f2:
                    bb:7e:b7:ea:a1:b6:f3:d9:9e:88:02:b8:28:9a:69:
                    f9:c7:cf:d2:72:69:86:09:21:80:f2:2b:59:86:9b:
                    49:a3:bf:5f:e2:77:6e:2e:17:4d:cc:ac:db:5d:cc:
                    3c:a8:6c:93:5b:58:27:6b:3c:c8:73:2b:4f:03:42:
                    ab:4a:92:62:6a:12:e4:e5:2d:d7:6b:eb:52:d3:72:
                    81:c4:ae:8b:9d:cb:ed:2c:ea:3c:c6:cb:b7:2a:b5:
                    1f:ce:24:45:94:5d:ce:f1:e3:0e:14:1d:68:6d:3f:
                    ee:0d:0e:00:f6:14:d0:d2:f2:d9:2e:fb:67:7d:1a:
                    cc:cf:fd:d4:90:f3:e2:d8:5f:b3:72:40:5e:0f:87:
                    9c:8a:c9:64:30:5f:c7:27:8f:a6:e1:d1:09:8f:ec:
                    14:c3:2f:ba:f8:1d:ac:6f:78:a7:b5:97:0d:a7:0d:
                    23:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D2:4A:C3:5D:7A:CB:4A:E0:B5:8F:E1:18:E5:DB:5C:2C:44:5E:7B:F4
            X509v3 Authority Key Identifier: 
                keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/0krDXXrLSuC1j-EY5dtcLERee_Q.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.0.....By....Bx
    Signature Algorithm: sha256WithRSAEncryption
         9b:c3:fc:c0:81:f8:a4:29:02:d7:36:68:7b:17:cd:7d:9a:4d:
         e4:ce:95:bb:29:16:1b:87:ee:1a:b6:17:fe:9b:63:2c:31:66:
         2d:cf:d1:78:b8:7f:7c:ff:d6:34:4e:ed:50:82:2c:26:34:22:
         db:0c:75:4e:c4:b0:63:66:1b:d7:cd:72:a3:33:37:71:08:a4:
         31:51:3e:3a:a0:47:eb:4f:2f:50:2a:08:d4:70:53:4b:c3:c1:
         b6:09:ae:ec:81:20:a6:3b:f6:ff:38:3f:37:6f:43:a3:d0:d1:
         f3:a3:64:a4:ac:c1:7a:75:38:30:8a:04:9a:83:8b:3b:9f:57:
         57:46:0b:53:69:c0:be:1a:a9:3c:3f:8c:b3:41:a3:63:46:a3:
         61:3c:73:b0:58:84:ef:6d:0c:64:79:a2:db:58:51:56:0f:76:
         5f:cf:ce:b9:8c:48:ed:6d:8b:d0:f9:14:cb:90:5f:ff:63:a9:
         32:c4:64:d8:61:5b:d1:32:63:99:1b:80:e1:3e:e3:64:d8:e5:
         b6:a2:9f:68:a6:f9:5c:36:c3:0d:8e:5a:83:ae:05:9c:65:c7:
         68:22:9c:f7:b4:41:0b:6c:66:ad:89:04:c7:1c:c5:43:ee:e5:
         4a:7f:fc:e9:70:07:41:4e:e3:fe:39:b0:09:ab:7c:51:9f:1d:
         23:fd:49:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Aug 2 22:05:40 2021 by LibreSSL & rpki-client.