Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/_mIiV95G0yPrE-bFSZ1PtD6-qLM.roa (download)

Subject key identifier:   FE:62:22:57:DE:46:D3:23:EB:13:E6:C5:49:9D:4F:B4:3E:BE:A8:B3 
Authority key identifier: FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
asID:                     AS25369
Prefixes:
    1: 185.138.235.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/_mIiV95G0yPrE-bFSZ1PtD6-qLM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59669923 (0x38e7da3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
        Validity
            Not Before: Jan  1 11:04:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe622257de46d323eb13e6c5499d4fb43ebea8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0a:ee:43:5b:f5:b2:25:45:29:70:61:23:62:
                    b7:65:e8:38:cb:e2:7e:a1:54:3d:16:6a:3e:ef:d2:
                    f5:cc:b0:e5:58:33:b9:e3:e7:79:ee:be:ec:7d:58:
                    54:4d:40:f7:c4:67:97:dd:6c:a3:ec:1e:0c:2b:b5:
                    2b:45:4c:48:c1:8e:ba:c3:14:94:66:55:8d:67:06:
                    40:6e:68:31:aa:9f:4f:90:36:ad:4f:50:b7:f0:1d:
                    86:6e:d1:d2:ee:81:cb:04:a5:4b:c5:14:fa:5c:9a:
                    12:79:f4:40:dc:59:39:c6:91:d6:64:a0:54:b6:52:
                    88:ab:7f:88:9f:c8:39:82:59:d0:7d:2d:e8:1a:36:
                    90:c1:f4:60:88:34:d2:47:11:42:bd:ff:ea:6e:03:
                    c7:1d:05:d0:e9:31:30:60:4e:22:fd:20:92:25:da:
                    7b:7e:e5:0c:ad:76:53:70:98:af:9f:f1:54:63:22:
                    09:5d:34:27:1d:d8:f6:93:7c:ae:70:f0:00:bc:2f:
                    d4:a8:86:44:cd:93:ce:3e:68:63:ff:98:06:da:5b:
                    e0:af:19:8f:99:cf:6f:89:75:8f:bb:6b:5c:fe:a1:
                    c6:63:e2:6a:12:d1:1b:34:68:a3:2d:b9:66:af:0e:
                    a5:b5:d9:89:01:a8:fb:4e:7d:b4:1d:79:3d:ff:fa:
                    0f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FE:62:22:57:DE:46:D3:23:EB:13:E6:C5:49:9D:4F:B4:3E:BE:A8:B3
            X509v3 Authority Key Identifier: 
                keyid:FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/_mIiV95G0yPrE-bFSZ1PtD6-qLM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.138.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:a0:81:04:cd:9b:d5:63:e3:fc:7d:4b:9c:e1:f6:c0:fb:27:
         95:6a:0f:b2:25:75:6b:fd:78:5a:c8:bd:09:cb:47:d3:0b:4a:
         e5:cc:4b:db:38:39:ee:bb:6f:d6:be:f0:58:6b:ae:43:0e:27:
         fe:cd:75:e5:ba:4b:e7:f5:48:96:ed:90:db:ce:97:2c:47:57:
         88:b4:c8:50:9f:8f:43:37:8d:b9:40:01:1e:80:89:5e:c6:e6:
         d8:96:ed:d3:ff:2d:63:12:f2:e6:e5:68:78:dd:73:1e:01:0f:
         8e:a0:dd:15:30:72:4b:d9:0b:5d:ff:f2:5f:36:d4:b0:63:28:
         ec:fe:9c:bf:4a:1b:5a:6c:14:ce:c0:7c:95:a7:c2:20:b5:ab:
         3a:17:2f:bd:dd:90:88:98:db:29:c5:dd:53:97:41:6f:32:2b:
         56:06:52:a6:fa:a0:f5:a2:a0:d8:f0:b5:81:65:a5:a6:71:ae:
         86:58:c4:af:8f:e7:e2:eb:37:a6:5e:9d:d6:00:e9:fb:bb:9e:
         c9:e4:7d:95:3b:ca:73:34:16:f5:f6:00:4b:8a:fb:32:87:4a:
         87:b0:c1:05:62:eb:ce:e2:5d:b9:3c:dd:fc:6f:7e:c7:c4:29:
         a4:be:8c:48:9b:eb:15:9c:4e:59:1c:5e:a4:e8:16:f2:15:9e:
         f5:15:a9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 13:43:59 2022 by LibreSSL & rpki-client.