Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/irqta7-UrBXvUaSFkE5y88J2u1U.roa (download)

Subject key identifier:   8A:BA:AD:6B:BF:94:AC:15:EF:51:A4:85:90:4E:72:F3:C2:76:BB:55 
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
asID:                     AS12129
Prefixes:
    1: 176.111.221.0/24 (max: 24)
    2: 147.189.140.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/irqta7-UrBXvUaSFkE5y88J2u1U.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224382 (0x36c7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
        Validity
            Not Before: Jun 18 21:29:27 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=8abaad6bbf94ac15ef51a485904e72f3c276bb55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bc:d4:a2:97:93:c4:13:e1:45:03:92:6c:7d:
                    b1:03:28:23:a6:f2:b0:f9:fd:27:48:51:36:e4:6f:
                    61:52:ac:da:90:4e:87:3f:c7:fb:d4:fe:2a:85:52:
                    15:e0:d7:8f:80:61:8d:35:51:0f:c6:60:9f:77:d0:
                    b5:87:40:90:70:48:7d:1c:98:68:23:51:e2:52:6c:
                    f9:ac:b4:5e:08:5a:69:df:d9:97:df:c8:e0:36:e9:
                    fa:b0:8d:a8:75:4e:cf:a5:94:02:4f:63:24:aa:4f:
                    96:6c:e2:bd:6f:5b:3f:6a:de:44:b9:e4:05:84:91:
                    d3:97:ea:cb:4c:e8:f8:76:86:e2:c0:d1:c4:8b:99:
                    e1:57:47:40:c0:53:c1:69:a6:3e:b8:c3:de:98:13:
                    1a:87:11:18:69:72:6b:c0:36:c5:82:9f:ba:87:2d:
                    cf:04:14:eb:d1:91:8c:c5:ba:2b:31:bc:52:b3:6a:
                    3e:0c:5e:75:ce:3b:c4:c4:e9:61:bd:6a:d4:0e:5b:
                    a3:e8:01:a5:73:65:59:27:cf:ca:c5:e7:3c:7f:21:
                    20:de:22:37:d0:40:e9:d5:0c:36:62:6c:d8:c5:b5:
                    70:64:bb:71:20:d1:ce:45:8f:85:1e:7b:ac:e8:84:
                    9d:02:5a:40:e6:5b:0e:59:e7:d9:c7:f1:57:f0:6b:
                    fd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8A:BA:AD:6B:BF:94:AC:15:EF:51:A4:85:90:4E:72:F3:C2:76:BB:55
            X509v3 Authority Key Identifier: 
                keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/irqta7-UrBXvUaSFkE5y88J2u1U.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.189.140.0/24
                  176.111.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:98:85:75:94:3f:2c:ac:1f:e2:fa:ba:f3:a2:17:81:d6:df:
         ba:b0:3f:31:95:ba:7b:6e:e6:9e:66:1a:da:5e:df:ee:6d:be:
         97:ba:c2:5d:82:d7:4d:a5:8b:41:53:77:13:f9:10:c5:91:df:
         a8:aa:d4:8a:1d:dd:7d:bf:bc:ba:c0:0c:60:ed:c5:d1:0e:be:
         f1:bd:25:9d:0a:bd:23:b2:87:82:cc:72:ba:0b:40:e6:8d:1b:
         fc:23:08:77:d9:bb:4e:9a:9b:2b:e6:ee:60:64:62:b8:d8:a7:
         84:5c:2c:c3:a6:e9:9a:cc:ac:d8:94:12:eb:8e:eb:5c:a8:fb:
         5a:ef:c5:9e:08:9d:4e:9d:7e:c6:4d:c6:7c:4d:2e:19:7d:5b:
         32:39:c4:39:0a:d2:95:6c:3c:ca:b8:61:cb:d0:9f:f5:62:af:
         28:65:82:61:c6:90:34:aa:02:5d:66:b2:4a:10:98:15:6e:80:
         fe:5a:b0:e9:d5:89:95:82:87:e9:17:ce:09:05:a8:79:70:81:
         a0:97:74:ce:e7:e0:24:f4:79:7c:2e:9b:b6:d2:83:eb:10:b4:
         14:66:cb:9e:51:30:55:98:78:08:03:10:37:c9:4d:3f:7f:11:
         c0:dc:8f:1c:13:c2:50:76:de:9d:e1:5d:57:85:18:71:36:7d:
         c5:ac:e6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 17 17:13:56 2021 by LibreSSL & rpki-client.