Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/92/a11fdb-24f8-46f8-9b92-2c5511ec611e/1/fDkO_47uL8fO9KAmVnPZT0-5gGg.roa (download)

Subject key identifier:   7C:39:0E:FF:8E:EE:2F:C7:CE:F4:A0:26:56:73:D9:4F:4F:B9:80:68 
Authority key identifier: D7:EE:11:82:39:B7:28:7C:CF:4D:B1:D1:37:63:D0:D0:11:98:78:C4
asID:                     AS26636
Prefixes:
    1: 194.156.188.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/92/a11fdb-24f8-46f8-9b92-2c5511ec611e/1/fDkO_47uL8fO9KAmVnPZT0-5gGg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79592771 (0x4be7d43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7ee118239b7287ccf4db1d13763d0d0119878c4
        Validity
            Not Before: May 25 05:16:29 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=7c390eff8eee2fc7cef4a0265673d94f4fb98068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4c:06:b8:35:1a:25:69:7a:d7:df:c0:74:58:
                    8b:ce:10:09:86:61:5c:8e:1d:45:f6:30:cc:05:00:
                    ac:c6:7b:07:dd:1e:b0:02:05:d7:03:84:55:88:cd:
                    39:db:2f:90:7f:e4:2c:36:7c:9f:d3:dd:15:44:b3:
                    02:69:0d:a2:b1:6f:5c:fa:54:73:99:a7:87:06:86:
                    e0:a9:9c:26:77:1f:bd:ba:07:09:c3:26:90:a4:72:
                    b0:fd:26:2b:b3:9a:5d:db:32:c9:68:b4:6a:12:38:
                    57:f5:81:d5:53:5b:4d:6d:f2:8e:4d:90:ad:02:8d:
                    4a:31:85:90:4d:6d:a2:70:d1:24:6d:4d:7d:f9:e0:
                    12:2e:71:4c:bd:2d:a4:4d:b9:69:7b:c4:d6:c6:72:
                    ca:c5:b6:05:76:08:cc:2e:8c:74:fa:26:e0:9d:fa:
                    fc:39:05:2d:93:a5:30:8e:9c:3c:71:a6:52:8c:11:
                    7b:4b:07:70:bb:cb:19:d6:0d:ef:b9:e7:8c:bc:03:
                    8d:ac:bb:94:21:1f:06:cd:4e:ed:96:b5:3d:39:60:
                    30:35:54:a1:af:89:5a:5f:d5:25:11:0d:27:fb:bd:
                    2f:69:af:dc:9e:c5:b3:d6:75:24:0d:82:23:19:7f:
                    41:3b:f8:18:f0:49:3a:3a:1c:20:77:6c:bc:89:c3:
                    0d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7C:39:0E:FF:8E:EE:2F:C7:CE:F4:A0:26:56:73:D9:4F:4F:B9:80:68
            X509v3 Authority Key Identifier: 
                keyid:D7:EE:11:82:39:B7:28:7C:CF:4D:B1:D1:37:63:D0:D0:11:98:78:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-4Rgjm3KHzPTbHRN2PQ0BGYeMQ.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a11fdb-24f8-46f8-9b92-2c5511ec611e/1/fDkO_47uL8fO9KAmVnPZT0-5gGg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a11fdb-24f8-46f8-9b92-2c5511ec611e/1/1-4Rgjm3KHzPTbHRN2PQ0BGYeMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:d5:cf:9d:1b:93:86:fe:c3:5b:5b:e3:16:9c:9f:55:17:7d:
         1d:d6:ef:c5:c5:cb:42:a5:49:33:1e:b5:1b:5d:4f:fc:d2:37:
         78:cc:e5:1a:44:95:6f:4b:07:a8:b7:d1:c7:c3:2a:91:7b:dc:
         ce:20:e6:23:ea:8e:d6:f7:c7:4f:8f:b4:39:7f:6c:5f:d5:bb:
         c9:24:8f:a9:61:5a:92:ab:c2:ce:b6:7e:8c:97:6d:56:26:88:
         e9:21:cb:d3:39:9b:5c:9b:ff:5b:7c:10:b5:18:d3:c2:0b:56:
         56:ec:59:22:76:77:eb:94:f0:20:ce:e1:f0:9e:e5:cd:ee:15:
         d8:6f:33:24:a4:ef:dd:fe:6a:5a:d0:5b:84:f6:1e:84:a9:d0:
         f3:69:42:fe:24:0b:5a:c9:d6:fa:1f:41:f6:8f:13:f1:9e:3f:
         b7:b8:03:d5:35:e7:46:b2:2f:ee:82:a1:7b:ef:3d:62:1d:eb:
         4c:04:26:4e:57:71:bc:9b:10:0b:ce:43:e2:25:b5:5c:a8:68:
         a7:79:9b:6b:39:ff:d3:bc:da:af:58:64:26:95:2f:79:a7:3a:
         01:47:f8:9b:ed:ff:fb:c7:05:84:23:5d:7a:da:53:88:b0:d3:
         1f:58:2e:c2:8d:75:2c:50:b2:29:78:ff:1c:fd:d5:41:f3:63:
         c9:ec:8b:9b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBL59QzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
N2VlMTE4MjM5YjcyODdjY2Y0ZGIxZDEzNzYzZDBkMDExOTg3OGM0MB4XDTIxMDUy
NTA1MTYyOVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2MzOTBlZmY4ZWVl
MmZjN2NlZjRhMDI2NTY3M2Q5NGY0ZmI5ODA2ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOdMBrg1GiVpetffwHRYi84QCYZhXI4dRfYwzAUArMZ7B90e
sAIF1wOEVYjNOdsvkH/kLDZ8n9PdFUSzAmkNorFvXPpUc5mnhwaG4KmcJncfvboH
CcMmkKRysP0mK7OaXdsyyWi0ahI4V/WB1VNbTW3yjk2QrQKNSjGFkE1tonDRJG1N
ffngEi5xTL0tpE25aXvE1sZyysW2BXYIzC6MdPom4J36/DkFLZOlMI6cPHGmUowR
e0sHcLvLGdYN77nnjLwDjay7lCEfBs1O7Za1PTlgMDVUoa+JWl/VJRENJ/u9L2mv
3J7Fs9Z1JA2CIxl/QTv4GPBJOjocIHdsvInDDXMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR8OQ7/ju4vx870oCZWc9lPT7mAaDAfBgNVHSMEGDAWgBTX7hGCObcofM9N
sdE3Y9DQEZh4xDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtNFJnam0zS0h6UFRiSFJOMlBRMEJHWWVNUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTIvYTExZmRiLTI0ZjgtNDZmOC05YjkyLTJjNTUxMWVjNjExZS8x
L2ZEa09fNDd1TDhmTzlLQW1WblBaVDAtNWdHZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIv
YTExZmRiLTI0ZjgtNDZmOC05YjkyLTJjNTUxMWVjNjExZS8xLzEtNFJnam0zS0h6
UFRiSFJOMlBRMEJHWWVNUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMKcvDANBgkqhkiG9w0BAQsFAAOC
AQEAOdXPnRuThv7DW1vjFpyfVRd9HdbvxcXLQqVJMx61G11P/NI3eMzlGkSVb0sH
qLfRx8MqkXvcziDmI+qO1vfHT4+0OX9sX9W7ySSPqWFakqvCzrZ+jJdtViaI6SHL
0zmbXJv/W3wQtRjTwgtWVuxZInZ365TwIM7h8J7lze4V2G8zJKTv3f5qWtBbhPYe
hKnQ82lC/iQLWsnW+h9B9o8T8Z4/t7gD1TXnRrIv7oKhe+89Yh3rTAQmTldxvJsQ
C85D4iW1XKhop3mbazn/07zar1hkJpUveac6AUf4m+3/+8cFhCNdetpTiLDTH1gu
wo11LFCyKXj/HP3VQfNjyeyLmw==
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:46:38 2021 by LibreSSL & rpki-client.