Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/nCrENobIajoSvqNjchuKoAUmTcQ.roa (download)

Subject key identifier:   9C:2A:C4:36:86:C8:6A:3A:12:BE:A3:63:72:1B:8A:A0:05:26:4D:C4 
Authority key identifier: FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
asID:                     AS400040
Prefixes:
    1: 185.138.232.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/nCrENobIajoSvqNjchuKoAUmTcQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54083221 (0x3393e95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
        Validity
            Not Before: Nov 26 17:48:15 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9c2ac43686c86a3a12bea363721b8aa005264dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f9:23:03:35:c6:58:e7:7d:1d:e1:90:6a:65:
                    26:e5:39:71:a0:24:0b:aa:c5:fe:dd:1e:80:02:32:
                    71:40:5a:b6:16:20:c0:91:f8:b4:dd:e7:24:37:b0:
                    42:cf:06:41:fb:6b:f7:0a:0f:75:b8:c8:97:db:bc:
                    ae:ee:2b:2a:ed:e5:90:02:87:5b:3f:38:ff:f0:e0:
                    14:6a:87:4c:3f:66:8a:0a:86:71:ac:cc:b3:be:4b:
                    c4:a4:93:73:b0:f2:65:b3:a3:6a:da:ce:ea:63:58:
                    2d:41:f2:12:c3:11:25:2a:a1:f2:78:18:de:ae:46:
                    ca:84:86:2c:e1:bb:43:ac:d9:36:07:8b:3c:ce:91:
                    24:13:8d:24:67:16:06:0d:d0:b7:9e:b8:ba:54:bc:
                    15:7a:08:32:ca:b3:94:59:0d:c3:b1:60:fe:c9:8b:
                    7f:75:53:20:a2:72:b2:1d:ea:47:2c:53:f5:a6:97:
                    89:f3:90:de:3c:57:34:d7:25:4c:95:4a:31:9a:9c:
                    6f:fc:32:e7:47:40:35:93:90:5e:d1:87:54:a9:83:
                    c4:13:38:cf:47:c8:68:00:19:e8:35:b1:16:a2:65:
                    b4:39:6f:56:2e:9d:24:7d:30:f6:36:de:59:c9:d6:
                    99:a4:2c:da:34:e9:d4:22:70:8e:59:6f:c8:cd:01:
                    41:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9C:2A:C4:36:86:C8:6A:3A:12:BE:A3:63:72:1B:8A:A0:05:26:4D:C4
            X509v3 Authority Key Identifier: 
                keyid:FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/nCrENobIajoSvqNjchuKoAUmTcQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.138.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:f9:82:ee:8a:25:5f:9b:58:b6:c4:f6:1f:75:d3:a0:68:a0:
         db:ed:c4:58:45:cb:8e:25:02:7e:62:c3:d2:f8:ff:cc:54:d2:
         d5:c5:20:44:58:3d:91:a2:d1:f9:cf:71:fa:16:fe:c0:f2:a4:
         a9:a6:5c:8f:53:08:18:55:97:bc:6c:91:d6:21:3c:85:64:ce:
         ef:ad:ef:91:ff:6d:c2:27:e3:1f:3a:36:ba:3e:8f:21:ab:f7:
         3c:cf:4e:a3:1b:9b:8f:b7:59:8b:5d:74:6b:f9:18:de:57:f1:
         d0:45:02:ea:ce:53:7d:76:54:d4:45:53:cc:d0:5f:08:70:bb:
         23:72:bf:7e:81:51:a8:95:49:9a:38:ef:86:a8:7f:5e:12:4c:
         59:58:8c:4e:74:49:29:e6:30:c3:da:78:ba:2f:ee:ad:85:56:
         5b:54:f4:5d:f0:73:79:b9:a0:32:97:e1:f7:68:9b:fe:79:1c:
         10:4a:1f:5a:c7:49:82:fb:51:a6:f0:01:93:d9:5f:21:48:ff:
         32:90:48:9d:e5:83:cd:98:2f:5a:7e:93:d6:79:c3:56:b3:04:
         ee:0b:93:e0:26:23:ac:6b:7c:4b:20:c1:cf:8f:cc:ab:40:9c:
         1a:de:c0:4d:70:44:90:13:a4:4b:e2:5e:fd:c0:37:86:5d:db:
         d3:64:e9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Nov 26 20:20:10 2021 by LibreSSL & rpki-client.