Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/KcqIp0FENx4E95ANPOeYDts9F6I.roa (download)

Subject key identifier:   29:CA:88:A7:41:44:37:1E:04:F7:90:0D:3C:E7:98:0E:DB:3D:17:A2 
Authority key identifier: FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
asID:                     AS23470
Prefixes:
    1: 185.138.233.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/KcqIp0FENx4E95ANPOeYDts9F6I.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19697143 (0x12c8df7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
        Validity
            Not Before: Apr 10 12:20:54 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=29ca88a74144371e04f7900d3ce7980edb3d17a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:19:95:7b:29:25:8d:7a:77:e2:f3:4a:a0:c4:
                    6d:30:81:c4:7c:d7:6c:d8:a9:92:33:73:85:38:68:
                    c4:61:0f:14:1d:00:54:86:fe:33:4a:ec:62:b8:96:
                    e5:20:38:7d:ed:36:f1:27:d8:08:33:20:69:34:62:
                    12:47:63:c1:db:d7:2a:aa:8c:c6:58:d8:1d:3c:8d:
                    6c:a4:a2:f2:45:7b:ac:f4:27:32:66:34:b3:3b:ab:
                    54:b3:13:ba:13:1b:51:08:50:ef:e2:6d:89:b8:ad:
                    62:d2:d8:e4:2d:d5:14:67:fd:23:ca:2c:6e:66:ea:
                    3f:83:ab:89:83:23:db:27:20:f7:be:bb:be:61:96:
                    c8:88:73:3f:d4:4d:db:a2:c0:44:08:33:2b:3e:8a:
                    42:4b:82:30:ca:03:89:0d:19:34:aa:45:c2:7f:e7:
                    0d:05:26:f1:fc:7f:da:37:63:90:81:13:fc:60:86:
                    e2:2d:c0:f5:ac:07:b8:97:93:c7:c5:cb:62:8c:f7:
                    13:cf:23:02:5b:e4:90:6c:d8:dc:18:cc:09:05:0e:
                    f3:99:61:39:fe:74:8a:ec:dc:9d:7e:f3:01:29:ae:
                    bc:d3:2f:ba:aa:12:31:33:8e:6d:9e:b4:b7:71:87:
                    8d:3d:67:12:74:ad:eb:30:48:85:1c:3f:c1:f0:7c:
                    11:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                29:CA:88:A7:41:44:37:1E:04:F7:90:0D:3C:E7:98:0E:DB:3D:17:A2
            X509v3 Authority Key Identifier: 
                keyid:FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/KcqIp0FENx4E95ANPOeYDts9F6I.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.138.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:d9:a6:c1:5d:ea:a1:8b:e0:4e:82:b3:7f:39:94:71:0b:d3:
         a3:68:d9:9f:e2:a6:f8:a0:0a:9b:3a:3b:28:12:cb:07:d0:f5:
         f0:be:f7:78:4c:e1:0c:b4:2a:7c:49:26:bd:02:df:f1:0d:05:
         56:61:16:0f:de:81:52:a4:3f:f4:e9:95:d3:82:a1:42:00:b0:
         b7:89:12:95:37:39:db:d8:39:aa:97:e3:b1:ed:05:0e:05:38:
         a2:16:c3:1f:de:1a:70:36:87:14:b4:5f:cf:65:2d:58:e4:fc:
         cf:25:7f:8f:8c:e4:92:37:0d:d2:a7:8e:1e:ab:c9:59:bc:b7:
         be:a8:35:b5:06:c2:b2:df:6c:d7:fe:95:b2:eb:75:e0:d7:a9:
         76:8f:0b:13:b1:d6:c6:d3:d6:e1:3b:cd:01:9d:49:37:36:9e:
         03:d9:79:e8:c7:29:cc:0a:0b:5f:ed:86:b2:a0:8b:87:f8:d6:
         94:83:9f:38:2b:32:1a:77:0a:88:18:64:fc:60:82:4b:dd:77:
         54:fb:52:e1:73:8a:ea:4c:b1:f5:08:0d:e3:91:ab:2d:f3:da:
         da:60:88:f6:e6:f9:27:71:ab:63:bb:db:2b:62:3d:dc:c5:37:
         13:89:24:56:f3:66:8e:2f:81:91:01:be:ea:3c:3a:dc:7b:e6:
         46:72:6b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:35:09 2021 by LibreSSL & rpki-client.