Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/8bfhCCHpWar7xa4ZtBAh1h9PYxs.roa (download)

Subject key identifier:   F1:B7:E1:08:21:E9:59:AA:FB:C5:AE:19:B4:10:21:D6:1F:4F:63:1B 
Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
asID:                     AS396362
Prefixes:
    1: 185.129.123.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/8bfhCCHpWar7xa4ZtBAh1h9PYxs.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140048829 (0x858f9bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
        Validity
            Not Before: Jan  1 08:54:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f1b7e10821e959aafbc5ae19b41021d61f4f631b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:9b:39:7a:ca:7f:a8:ff:ff:ea:83:c8:5d:
                    a8:35:c0:d3:17:42:a8:b0:1c:b8:7a:a0:bc:3c:a7:
                    22:8e:f4:88:09:20:9b:05:6e:de:5d:9b:70:d9:2e:
                    b9:31:60:68:0b:cb:1d:7a:23:e6:38:6e:6c:c1:e6:
                    c9:8e:56:88:22:06:4c:8b:9c:b9:a7:62:11:7e:61:
                    27:df:16:d8:0c:91:41:d1:5c:ee:dd:de:56:36:86:
                    b9:77:a5:a0:ef:a1:e8:03:51:f1:64:e3:d8:e7:4f:
                    bd:24:5d:53:cd:a7:45:c1:c8:ba:0d:b0:df:8e:28:
                    eb:33:7d:48:1f:43:84:af:27:b8:1b:5a:30:a9:d4:
                    80:50:54:c3:de:92:ca:40:e7:b0:03:48:3f:1b:1c:
                    32:e2:cd:d0:4c:1d:76:dc:56:32:02:56:c6:69:e1:
                    ca:ca:8c:6e:4a:13:23:6e:f3:72:3d:4c:ca:31:95:
                    73:ce:77:3b:79:24:1e:0c:ae:8e:56:47:69:69:f5:
                    7f:de:7b:be:68:8d:c2:b1:0e:24:f5:73:ac:e9:60:
                    0e:15:bf:dc:6e:23:45:e3:99:b1:5f:00:d9:09:a9:
                    2e:f0:07:6b:3c:2d:62:fc:c1:13:0d:e0:46:79:e2:
                    dc:50:0d:fc:4f:f1:ba:06:ea:3b:ad:69:91:ec:83:
                    de:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F1:B7:E1:08:21:E9:59:AA:FB:C5:AE:19:B4:10:21:D6:1F:4F:63:1B
            X509v3 Authority Key Identifier: 
                keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/8bfhCCHpWar7xa4ZtBAh1h9PYxs.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.129.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:3d:d2:5c:44:3a:64:7c:87:f0:f6:36:5b:61:a9:c6:58:1f:
         93:96:66:e7:00:c1:9d:87:d6:06:8e:97:f9:2d:63:50:0a:f2:
         7e:c9:c1:03:3c:f5:7d:ce:66:25:0b:4d:02:fd:3c:5a:e9:a2:
         dd:76:94:ee:f5:9e:db:02:3c:b3:37:8a:d4:0a:24:96:b2:f1:
         8d:44:d5:4e:c1:d6:28:f2:2e:b4:20:88:f3:2e:3a:0e:fe:37:
         a4:68:e3:7c:c2:e3:ee:8e:0e:c1:67:6f:9d:12:da:50:5a:cd:
         d1:6b:65:62:53:14:59:bd:93:06:5a:a7:8a:15:04:c8:03:48:
         5c:09:bf:09:d0:2f:62:26:3d:3d:c5:83:52:6c:78:75:0c:91:
         dc:5f:a2:0e:77:84:6f:fe:9c:a9:da:25:37:1f:62:7b:e4:be:
         04:ac:88:eb:b7:aa:25:cc:db:99:c2:6e:71:2b:f9:a3:3b:ac:
         ed:86:25:be:e1:c7:9e:23:86:4e:8b:fd:10:3a:10:c2:ac:c8:
         5e:14:ba:f3:e3:c7:db:4b:af:6b:26:e1:e0:92:69:44:28:31:
         a0:d2:77:77:e5:10:8f:01:fd:fe:c0:67:bb:b4:e4:9e:c0:7c:
         ae:61:59:73:f6:62:51:c6:7a:36:93:f6:44:52:17:f9:08:21:
         ef:f5:25:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 12:06:02 2022 by LibreSSL & rpki-client.