Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/arM7qd7GNY-U-4wH4uhRF2HS24I.roa (download)

Subject key identifier:   6A:B3:3B:A9:DE:C6:35:8F:94:FB:8C:07:E2:E8:51:17:61:D2:DB:82 
Authority key identifier: FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
asID:                     AS25369
Prefixes:
    1: 185.138.235.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/arM7qd7GNY-U-4wH4uhRF2HS24I.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43185125 (0x292f3e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
        Validity
            Not Before: Sep 16 11:50:24 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6ab33ba9dec6358f94fb8c07e2e8511761d2db82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:19:87:b6:16:ff:f7:7d:83:27:22:f3:79:3f:
                    c7:96:e6:53:00:89:86:2f:9c:eb:26:da:01:ba:c5:
                    5a:eb:f2:62:27:28:1b:db:dd:21:e1:cd:a5:ba:be:
                    60:83:39:f4:85:da:e7:06:48:f4:ff:02:8a:60:3c:
                    56:64:62:61:fb:cb:bb:90:05:ce:f5:13:b7:0e:66:
                    6f:1d:b9:d2:8b:43:be:08:f4:74:c6:e3:6d:99:89:
                    d2:a6:80:83:5c:c5:11:d7:b2:2a:09:5d:8d:f2:4e:
                    2c:b5:be:1c:03:1d:cc:cd:ab:be:c2:67:f5:7f:f7:
                    1f:38:30:0e:3b:cb:4d:95:90:a3:be:fe:4e:fb:01:
                    69:30:41:b0:2d:68:cb:b3:73:a9:16:78:c9:3d:8b:
                    98:02:e3:c6:1d:66:25:9d:bb:39:ad:8b:9d:ab:a0:
                    e7:cc:b0:32:8e:c6:d0:de:62:f2:a9:55:28:18:e4:
                    e4:7b:6e:15:37:22:be:16:77:c5:52:53:71:08:32:
                    de:99:f7:9d:1c:b9:5d:02:4e:1f:91:a3:ca:2f:c4:
                    4e:36:cb:81:ef:a1:bc:49:e7:41:d2:ab:6c:1b:bc:
                    95:e1:e0:dd:96:f4:2c:47:25:9a:18:30:42:26:44:
                    7f:7f:b5:25:a2:66:e0:df:4c:94:65:7f:7f:20:ec:
                    e7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6A:B3:3B:A9:DE:C6:35:8F:94:FB:8C:07:E2:E8:51:17:61:D2:DB:82
            X509v3 Authority Key Identifier: 
                keyid:FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/arM7qd7GNY-U-4wH4uhRF2HS24I.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.138.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:39:71:98:54:46:e4:ad:ed:5f:03:b2:64:6a:7f:0a:d3:7a:
         ae:cf:6f:1a:cf:8f:25:cf:11:2d:0c:47:37:12:fa:5a:50:4a:
         34:15:3d:89:6f:d2:04:37:b6:1c:cd:fd:c6:2b:c2:13:52:2b:
         5b:81:80:c2:b1:26:e5:a0:62:60:5c:7f:8f:ac:06:cf:16:12:
         84:79:61:26:34:12:9f:8f:1a:6c:34:5b:bf:e7:04:b9:90:92:
         62:2c:44:c2:2f:ca:02:e4:71:eb:26:78:7d:96:31:ec:09:ea:
         b6:63:b7:2c:07:8f:6a:70:08:5b:18:73:07:cc:d3:bd:fe:b5:
         f1:20:d1:05:ae:a0:5a:c8:a8:65:a2:81:fb:4d:32:7d:a7:52:
         29:52:0f:43:fb:73:c3:c3:9d:d1:9f:4e:12:4e:fd:83:f4:f7:
         9d:f1:4a:39:6f:01:ae:2a:7f:ef:45:36:8e:0a:2d:10:5c:50:
         6a:46:66:3c:4e:7d:ef:a7:93:de:0e:14:86:39:85:47:58:03:
         ec:70:30:86:0a:ed:bc:8e:7b:e2:c5:1f:21:94:ad:bf:ba:4e:
         1e:34:4f:f2:fe:84:b5:60:d8:6f:13:a5:4b:4f:64:e7:2a:5b:
         97:84:5f:fc:c9:41:2e:63:b2:25:1e:23:0d:0c:9f:08:47:f2:
         47:a8:23:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:35:09 2021 by LibreSSL & rpki-client.