Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/S1GDYlXOMMytN3ZbuUYHPuuP6ZY.roa (download)

Subject key identifier:   4B:51:83:62:55:CE:30:CC:AD:37:76:5B:B9:46:07:3E:EB:8F:E9:96 
Authority key identifier: A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76
asID:                     AS395651
Prefixes:
    1: 185.38.241.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/S1GDYlXOMMytN3ZbuUYHPuuP6ZY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286673200 (0x11164930)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61ada61202413cd8fca2f49742527ad021f9676
        Validity
            Not Before: Jan  1 09:56:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4b51836255ce30ccad37765bb946073eeb8fe996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:97:a7:00:db:08:b6:e4:ec:31:0e:b7:67:
                    67:f3:e3:41:14:25:84:2e:49:74:82:f4:13:9d:68:
                    cd:d9:07:dc:d1:1b:f9:cf:44:80:8b:1b:b5:37:9c:
                    47:e4:af:d7:c2:a4:14:6d:0a:fc:88:86:c5:57:4a:
                    46:c7:78:2d:8c:5c:64:96:82:ff:9c:a5:95:e0:52:
                    03:5f:66:f8:52:28:73:71:0f:b4:68:95:b5:b5:cb:
                    64:4b:60:d4:84:ff:1a:8a:2f:12:3b:4a:86:ee:21:
                    49:db:05:34:e0:a4:e5:76:43:7b:8b:cb:2f:38:f1:
                    9a:15:3a:dd:69:ba:b1:33:93:57:d6:fd:32:53:60:
                    69:be:cd:fc:b2:a8:67:67:ef:a8:5b:a5:5b:a4:16:
                    60:d2:f8:a1:50:8b:20:5e:cb:c2:2b:57:5e:d8:29:
                    60:00:e8:b2:c5:a8:46:67:4f:9c:79:64:5a:47:d5:
                    35:10:b8:d2:52:f7:fa:bf:a0:6a:d5:9f:14:75:6c:
                    ac:94:24:f5:2d:fc:22:72:4a:41:d2:bd:4e:28:61:
                    f8:64:39:03:cf:42:14:45:25:87:84:8a:1f:a9:04:
                    45:51:31:a4:a2:4a:32:7c:1b:bd:36:cb:7a:31:6d:
                    d1:33:43:4f:4a:f1:25:26:d2:08:70:1c:b5:a4:92:
                    7d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4B:51:83:62:55:CE:30:CC:AD:37:76:5B:B9:46:07:3E:EB:8F:E9:96
            X509v3 Authority Key Identifier: 
                keyid:A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/S1GDYlXOMMytN3ZbuUYHPuuP6ZY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:f3:c0:1e:6c:d6:38:18:06:fe:1b:7f:38:de:f9:c0:4d:62:
         0c:3e:f2:d8:2c:56:bf:5b:70:1d:b3:76:d8:c8:70:63:16:53:
         5c:20:9f:b5:aa:e2:a1:eb:60:fc:a0:ac:ea:3c:d7:e6:3d:74:
         da:92:cb:47:23:fa:42:50:ac:ed:d2:ae:30:c5:5f:57:57:96:
         65:a1:d7:01:c7:a3:66:9b:3f:4e:d8:d9:d2:1e:87:00:67:c3:
         e8:14:6e:79:9b:27:0b:17:4f:85:1a:bf:d5:01:33:1a:b7:17:
         be:81:f0:86:a6:89:93:bd:05:bc:fc:d2:eb:61:55:ee:9d:23:
         5d:d8:ae:27:00:01:07:7c:d7:79:33:a6:d7:82:d1:e7:39:53:
         42:86:2a:ad:f5:b6:e7:6f:3d:40:99:b4:ce:d2:73:6d:fc:62:
         15:72:a6:54:fa:58:10:dc:bf:3e:c5:13:78:b9:e6:9d:43:42:
         c1:48:b4:36:48:af:d3:35:07:a6:a8:93:9d:2f:ae:27:bc:3a:
         6a:b7:34:4a:17:7c:d8:e9:aa:02:c0:50:0a:86:0e:3d:05:ab:
         50:ab:49:8c:d0:45:57:b3:9f:c2:ca:0e:91:31:4b:eb:49:4a:
         d3:9f:b9:09:46:bc:a6:65:d0:40:d3:21:b4:1a:02:c1:43:34:
         98:b3:0b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 12:07:21 2022 by LibreSSL & rpki-client.