Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/95/e7663a-ea48-4367-bf97-cbd4aa911592/1/SSvQ2RkGGYRx248Ks2LVvguu-MA.roa (download)

Subject key identifier:   49:2B:D0:D9:19:06:19:84:71:DB:8F:0A:B3:62:D5:BE:0B:AE:F8:C0 
Authority key identifier: 24:BD:79:4B:61:BC:F1:3E:C4:8F:EA:04:9D:DC:5E:4B:05:80:E5:F6
asID:                     AS26636
Prefixes:
    1: 2.58.200.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/95/e7663a-ea48-4367-bf97-cbd4aa911592/1/SSvQ2RkGGYRx248Ks2LVvguu-MA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99226309 (0x5ea12c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24bd794b61bcf13ec48fea049ddc5e4b0580e5f6
        Validity
            Not Before: Apr  6 16:03:27 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=492bd0d91906198471db8f0ab362d5be0baef8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:47:0d:8c:36:4c:62:23:b5:df:1c:93:66:
                    4a:58:0b:d7:4b:9c:8c:0d:56:92:de:4b:6a:d2:2a:
                    44:b9:1e:41:f3:29:f2:2a:c0:30:d5:5b:fb:63:78:
                    0a:de:c8:91:eb:51:a1:a2:c1:81:bf:da:d8:bb:7f:
                    57:ae:b7:03:28:36:f0:56:99:e8:e8:5b:03:85:74:
                    a0:5d:21:38:ac:2d:58:15:dd:cc:93:fd:a2:3e:df:
                    1e:f8:63:5f:5a:4d:50:68:9d:97:05:16:e8:03:38:
                    be:54:1e:3b:2f:3d:d8:8c:7a:3f:29:67:09:c8:36:
                    c3:53:99:c7:cd:1d:9c:36:ba:5f:ae:71:69:04:15:
                    f5:22:ad:f1:b1:a7:de:c3:e0:37:69:e4:88:43:9f:
                    fd:ca:49:75:2c:6e:93:0c:9b:5f:4f:8a:f0:50:7c:
                    76:08:9e:b1:73:09:24:4f:da:ad:9b:f6:3c:49:04:
                    ab:ad:1b:de:61:98:16:4e:9b:2e:2f:b1:1a:4e:ff:
                    ab:e1:1c:c3:24:e2:80:34:06:9c:5b:4c:c5:4a:aa:
                    53:bf:4f:49:c3:c7:ec:47:8d:a5:8d:e2:26:87:0b:
                    72:89:29:2c:c4:4a:18:5d:31:0c:30:03:2f:e7:6e:
                    06:3d:8b:f3:06:99:2a:cc:93:c0:02:5f:44:ac:28:
                    41:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                49:2B:D0:D9:19:06:19:84:71:DB:8F:0A:B3:62:D5:BE:0B:AE:F8:C0
            X509v3 Authority Key Identifier: 
                keyid:24:BD:79:4B:61:BC:F1:3E:C4:8F:EA:04:9D:DC:5E:4B:05:80:E5:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JL15S2G88T7Ej-oEndxeSwWA5fY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e7663a-ea48-4367-bf97-cbd4aa911592/1/SSvQ2RkGGYRx248Ks2LVvguu-MA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e7663a-ea48-4367-bf97-cbd4aa911592/1/JL15S2G88T7Ej-oEndxeSwWA5fY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:e4:c6:ab:32:1a:2c:45:eb:76:04:53:69:c0:f5:66:94:9f:
         80:ba:e8:fe:4c:14:b3:fb:d4:c0:b2:28:f5:48:0c:52:cf:c7:
         5e:40:77:6e:43:23:7c:a1:ef:e5:ae:e1:2c:aa:24:b2:06:50:
         47:a4:35:9f:49:c0:c4:51:73:3d:19:3a:78:fb:b3:9a:94:2b:
         f1:9d:c3:4c:49:e6:b3:70:a9:5b:a4:ff:96:e7:39:b1:07:ec:
         9a:7d:83:b5:18:d2:7a:34:d2:2d:fb:37:62:51:bf:51:4f:09:
         79:82:cb:40:33:c7:08:dd:34:31:2c:24:f6:49:ee:68:88:d1:
         26:5f:56:67:d9:44:5e:cf:c1:ba:11:ef:e0:db:81:97:83:36:
         19:1b:a2:0e:ea:ff:a7:8e:d4:7f:f4:de:33:ae:a5:e3:e7:0c:
         e3:b1:9c:dc:53:19:83:aa:34:03:b8:23:a4:dd:a0:20:06:22:
         d7:a8:cc:33:01:d1:b9:ca:ca:e8:5b:29:b2:8d:e8:4a:65:3e:
         da:b0:6f:14:91:79:23:f3:df:26:c1:fd:91:bc:0b:02:b0:79:
         06:33:83:66:d9:8e:8e:2d:8b:e2:b7:0b:f7:30:23:72:fc:56:
         3a:74:b4:dc:c0:be:69:53:5d:a9:8c:7e:a1:4b:00:31:59:30:
         8c:42:82:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:47:38 2021 by LibreSSL & rpki-client.