Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/GcR6BvrxZGATGLlIcJ1ZEkWQZSw.roa (download)

Subject key identifier:   19:C4:7A:06:FA:F1:64:60:13:18:B9:48:70:9D:59:12:45:90:65:2C 
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
asID:                     AS30475
Prefixes:
    1: 147.189.136.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/GcR6BvrxZGATGLlIcJ1ZEkWQZSw.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595643 (0x1858fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
        Validity
            Not Before: Jun 18 22:02:52 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=19c47a06faf164601318b948709d59124590652c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:21:4e:b5:d7:ed:02:4a:b9:f0:55:4a:23:81:
                    12:fd:db:70:4d:4f:9c:20:2b:2f:86:0c:56:c2:ad:
                    d2:09:88:ec:71:a8:aa:f0:6c:79:80:b2:f1:65:39:
                    ff:1f:04:a9:c8:62:87:89:23:26:44:1b:12:e0:24:
                    6f:49:31:e4:b1:92:4d:01:36:d0:82:58:83:79:ee:
                    09:f0:1d:cc:25:22:66:3f:c9:d8:ed:a8:4d:4e:b1:
                    ad:f9:69:fd:ae:ff:05:be:30:f0:f6:72:f6:04:d4:
                    73:9e:18:8e:fe:84:65:37:9e:5a:af:d7:e5:d0:59:
                    79:1d:cd:a2:97:c1:4f:a1:1a:c2:7d:65:fe:b6:0a:
                    80:74:d2:21:ea:ac:b0:c0:5d:60:b5:58:a9:ff:15:
                    53:c5:b9:a9:d1:cf:7c:ff:0d:29:6a:ee:05:18:ee:
                    c6:bd:69:e3:0e:6c:fd:ab:69:63:44:95:f9:d1:95:
                    1d:0f:81:29:38:1f:63:56:4f:f5:e9:a4:c6:9e:df:
                    71:cf:4f:a2:2d:10:26:ec:e5:8b:9e:11:50:7a:b5:
                    86:7c:83:67:2a:db:5f:08:29:76:77:9a:6a:14:da:
                    64:d1:38:96:7c:a1:ff:4f:c2:bf:89:e6:dd:b5:d8:
                    54:b0:b1:41:42:1d:39:b2:0e:0e:f1:f7:8c:3a:08:
                    7e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                19:C4:7A:06:FA:F1:64:60:13:18:B9:48:70:9D:59:12:45:90:65:2C
            X509v3 Authority Key Identifier: 
                keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/GcR6BvrxZGATGLlIcJ1ZEkWQZSw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.189.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:d7:c9:82:13:72:97:21:c2:1a:76:b4:3f:19:a2:10:aa:84:
         ab:f9:69:3d:b6:cd:bf:bd:12:39:b2:9a:96:56:b0:27:92:40:
         b3:b9:68:4c:c3:fd:7e:e4:8f:09:5c:dc:1e:e5:9f:80:53:f4:
         50:85:25:eb:46:fa:82:13:6f:ad:45:c9:93:fe:6a:9e:ee:f7:
         9a:bf:32:66:be:3f:ca:04:43:86:5a:4e:c9:75:7f:b7:2c:32:
         35:b0:e2:ee:7b:8a:46:75:85:a6:31:84:be:44:6a:13:75:cc:
         de:49:9b:66:70:a9:25:88:43:87:2b:80:33:95:0f:f0:33:0f:
         07:c8:1f:c5:77:4a:3d:c7:1a:18:b1:58:5e:91:ce:12:cc:d5:
         51:e8:06:29:a3:9c:78:8a:2b:d7:ea:83:34:4f:d9:e7:f6:a9:
         c0:2f:2d:4d:b1:b9:5a:0f:26:c8:06:9a:87:73:4f:ca:87:af:
         a8:bb:8e:4f:e5:ad:08:2a:93:08:be:3e:45:9c:15:ce:4f:45:
         c0:71:bd:67:72:64:4b:05:01:e0:c4:11:d9:71:24:f9:31:39:
         45:23:bc:00:60:47:50:21:7c:d8:ba:3a:78:53:73:3a:f3:09:
         d3:b2:86:39:7b:75:86:c7:da:11:18:6c:0b:04:26:d4:2e:72:
         e8:71:20:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:48:19 2021 by LibreSSL & rpki-client.