Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/NU52rXQ4jyeDjYYlciDWblgnWAk.roa (download)

Subject key identifier:   35:4E:76:AD:74:38:8F:27:83:8D:86:25:72:20:D6:6E:58:27:58:09 
Authority key identifier: 76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
asID:                     AS396982
Prefixes:
    1: 185.46.233.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/NU52rXQ4jyeDjYYlciDWblgnWAk.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44557799 (0x2a7e5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7699c189027e25ecc53f98b52ea65ae725d2a730
        Validity
            Not Before: Jan  1 12:54:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=354e76ad74388f27838d86257220d66e58275809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:ef:a1:44:4e:49:c0:4f:3c:bd:f0:e3:70:
                    71:59:88:b0:b3:e8:27:30:c6:aa:1b:cb:cc:28:72:
                    6f:92:15:a8:1a:11:4d:84:ff:14:da:bf:38:cb:41:
                    21:40:94:01:33:59:fe:60:55:20:24:cd:60:30:03:
                    b8:81:0b:18:11:0b:b1:70:ef:d8:a6:a8:12:50:37:
                    95:16:bd:b1:df:25:1b:b7:60:19:69:cd:cb:28:e3:
                    12:aa:94:1c:b5:0a:47:6b:0a:e6:d6:c5:7b:b9:81:
                    28:e6:21:58:90:50:13:77:f0:23:30:6c:92:76:e9:
                    25:d7:76:31:55:f5:cc:f9:35:fa:be:e5:5a:13:bc:
                    19:5e:3b:4f:95:07:44:66:58:2f:89:4b:2d:37:5b:
                    e2:57:a3:2f:6a:b2:97:da:2a:1e:64:fa:12:22:a8:
                    bd:b3:89:4e:e6:f9:a3:87:7d:da:40:17:53:99:7b:
                    a7:ee:2f:e9:a7:eb:a4:df:ec:f3:b5:53:b9:5f:43:
                    f8:03:89:8a:e7:1e:9b:1e:cf:86:49:35:7a:b1:8a:
                    6a:32:58:31:3e:ce:8e:51:6e:c9:41:26:20:0b:00:
                    17:5b:9f:66:44:f4:03:89:e3:52:35:06:8e:90:f6:
                    d5:93:52:5b:74:a0:00:fa:c3:8b:8a:2c:51:4f:8b:
                    a7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                35:4E:76:AD:74:38:8F:27:83:8D:86:25:72:20:D6:6E:58:27:58:09
            X509v3 Authority Key Identifier: 
                keyid:76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/NU52rXQ4jyeDjYYlciDWblgnWAk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.46.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:ba:d0:ff:a9:d5:03:4e:04:b2:b9:34:28:69:ae:ed:ca:36:
         12:0b:fa:48:e9:6b:53:9a:ad:e0:74:a6:df:59:be:ef:0d:4c:
         74:13:5a:d4:61:b5:91:a4:9c:44:f7:e0:3f:a3:14:ee:b5:ed:
         c1:96:9b:39:fd:3a:04:3c:a9:40:2c:c6:f5:67:03:05:19:37:
         16:87:d7:74:33:44:90:74:1e:ea:e2:f6:da:4e:c5:ea:15:ac:
         b3:95:db:5b:39:75:a9:67:0e:fe:6b:15:3a:73:33:de:83:98:
         54:0f:9a:72:6a:dc:67:4f:c0:dd:c3:35:92:54:ec:09:63:50:
         f3:fc:d7:64:13:b1:32:9a:27:32:6c:b2:fe:a0:5d:87:ad:34:
         34:71:11:ce:76:f6:e9:16:2d:05:36:ed:23:f2:f0:7b:1b:c6:
         d8:4c:cb:7d:83:e1:00:db:44:db:a2:f6:f5:56:a8:a6:1e:0d:
         c4:f3:89:15:58:89:3c:e3:2f:92:b4:e1:2b:9e:4d:e2:b4:71:
         7a:ad:d2:e9:d0:44:cc:f2:1d:72:ab:61:ed:6b:23:87:93:69:
         1d:22:61:b2:3f:81:0d:33:e4:37:c6:f3:66:03:38:d7:0d:85:
         68:66:63:b3:05:5c:b1:81:9f:d5:25:fb:6c:a4:7f:ed:a1:b8:
         d8:0a:bf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 15:27:41 2022 by LibreSSL & rpki-client.