Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/bRGyqMqZZg3_NGFkHbuL30PGnAI.roa (download)

Subject key identifier:   6D:11:B2:A8:CA:99:66:0D:FF:34:61:64:1D:BB:8B:DF:43:C6:9C:02 
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
asID:                     AS1880
Prefixes:
    1: 192.67.58.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/bRGyqMqZZg3_NGFkHbuL30PGnAI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492242419 (0x1d5705f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
        Validity
            Not Before: Jan  1 06:37:50 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6d11b2a8ca99660dff3461641dbb8bdf43c69c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:29:57:75:2d:93:97:88:51:fe:46:76:3b:
                    71:13:43:16:1c:7d:a1:9e:a8:65:16:ce:d9:80:80:
                    ec:52:2f:c9:3a:8e:b9:8c:d8:a3:b1:9f:00:7e:e7:
                    8c:b7:8e:d2:74:f4:0b:9b:f0:c7:5f:2f:25:26:66:
                    fd:b9:c4:d8:b6:34:de:ea:38:73:ac:37:93:c9:46:
                    79:aa:76:ca:14:7c:ce:7a:4c:65:42:c7:f8:45:2c:
                    43:b7:a5:8a:93:67:11:5e:fa:54:25:fe:2a:fb:98:
                    02:a6:b9:88:0c:df:bc:6e:4d:3d:8b:6b:ec:c2:6d:
                    52:3d:fa:d6:bf:e9:f9:cc:91:3d:1c:90:80:48:d5:
                    6b:cd:5b:58:17:73:25:a8:93:f4:7c:95:8f:6a:59:
                    f4:4d:0b:6b:94:7a:65:84:82:e6:c4:e9:42:58:ad:
                    15:01:d4:40:32:b8:15:7d:b2:6b:1e:26:21:77:2a:
                    5d:63:93:42:5e:7a:48:b9:2a:43:ce:70:26:69:46:
                    90:c4:e7:92:82:e0:d2:c4:31:ba:be:7b:b0:26:a5:
                    d2:a4:d3:7c:52:4d:36:96:98:73:7a:3e:80:ce:22:
                    b9:7c:76:62:d1:d3:aa:fb:50:6c:62:c3:68:e2:d7:
                    2e:07:04:11:87:e6:76:71:65:b7:5c:2a:d4:12:e5:
                    9c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6D:11:B2:A8:CA:99:66:0D:FF:34:61:64:1D:BB:8B:DF:43:C6:9C:02
            X509v3 Authority Key Identifier: 
                keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/bRGyqMqZZg3_NGFkHbuL30PGnAI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:7b:e8:e8:6f:e3:53:3c:f4:c5:7c:11:ac:f6:72:b6:7a:66:
         98:72:78:a9:50:e8:92:be:0f:41:d3:d7:0c:cc:df:74:41:6a:
         66:a5:a8:9e:2e:d2:1e:96:49:7e:69:6b:d7:5c:6c:5f:d5:7c:
         04:ec:cb:74:50:d1:e3:b0:0a:5d:c5:a8:58:1c:9b:c3:69:b1:
         f9:81:a0:9b:26:4c:26:7c:82:68:78:8f:72:74:e1:d4:c7:8e:
         e1:ce:a7:5d:d7:e8:b2:ab:da:b8:9c:cc:48:06:a2:cf:49:ec:
         f5:92:53:1c:c9:30:93:15:3d:41:88:04:ac:f7:fa:73:b5:e9:
         75:71:58:c6:d3:d8:7c:37:f0:dc:8d:c1:38:5c:42:55:26:cb:
         87:22:03:e0:1f:f4:97:42:53:6c:ee:b0:4f:29:b1:0c:f4:06:
         66:5e:65:dc:b0:e3:9a:18:63:fd:db:3c:bd:1f:25:a4:7f:7d:
         b1:a7:24:93:b2:ee:a7:45:8a:2c:13:24:6e:7a:0c:13:7a:03:
         53:bd:73:ff:41:49:05:97:79:ef:91:72:6a:0a:8a:66:21:49:
         3a:09:77:72:61:25:6c:d4:b1:4d:65:08:71:b7:74:04:12:a3:
         52:20:13:7e:9f:57:4d:2f:73:dc:fc:0c:8f:61:d8:9e:90:b3:
         29:68:f1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:49:50 2021 by LibreSSL & rpki-client.