Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/3r0U67FqlwxnmJhHgFMy67o_NBo.roa (download)

Subject key identifier:   DE:BD:14:EB:B1:6A:97:0C:67:98:98:47:80:53:32:EB:BA:3F:34:1A 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS41059
Prefixes:
    1: 185.1.40.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/3r0U67FqlwxnmJhHgFMy67o_NBo.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149437990 (0x8e83e26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 08:05:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=debd14ebb16a970c67989847805332ebba3f341a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:f4:dc:0b:0a:75:c5:1f:a7:58:ee:f9:3c:
                    16:c3:cc:cc:d3:1d:4f:c8:b2:1a:18:97:86:57:41:
                    af:37:da:cd:7b:99:5b:a9:5e:5c:f7:e9:8d:6d:3d:
                    1f:55:d4:56:da:5a:cc:d6:b7:d3:54:db:2e:3b:4c:
                    fb:3e:73:2f:94:92:50:a6:26:e5:68:79:55:03:2b:
                    79:91:6a:85:1a:5e:cc:d4:6d:24:e3:6f:74:85:61:
                    32:b1:63:74:ae:04:cd:ef:07:af:7c:f2:c3:26:7c:
                    8d:26:e1:af:1c:d1:06:28:8d:a0:50:d6:01:18:f3:
                    ee:72:81:a5:dd:64:fc:66:f5:87:1d:8e:58:e1:af:
                    cd:53:11:85:f2:7f:20:ce:34:94:26:90:c9:53:5c:
                    fc:70:1b:e8:eb:3e:1f:c7:e4:d0:80:fa:c5:59:e1:
                    0a:53:0f:f5:70:5f:a1:66:d1:62:42:9a:1b:d6:9f:
                    e9:05:16:ec:62:c6:0b:e5:34:81:62:90:69:54:59:
                    a9:5d:99:3f:19:b5:75:30:d9:fb:00:c6:f3:04:42:
                    b9:ac:e0:17:3d:39:fb:84:54:47:58:18:2e:fc:93:
                    e5:49:64:8a:a0:7e:26:18:54:7e:e2:5d:bf:f1:d9:
                    5a:7f:36:cf:ff:1c:d3:69:ce:7b:5c:cb:ff:3e:00:
                    26:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DE:BD:14:EB:B1:6A:97:0C:67:98:98:47:80:53:32:EB:BA:3F:34:1A
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/3r0U67FqlwxnmJhHgFMy67o_NBo.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:b8:c7:86:8c:92:77:53:5f:23:0c:32:e2:96:b4:7c:d0:d3:
         39:68:55:fe:ff:f7:73:09:5f:4b:57:72:ca:28:c4:7a:c4:3a:
         60:e7:f8:78:b7:ba:6e:30:f4:aa:a6:42:d5:d2:26:50:cc:d0:
         17:94:5d:2c:dc:3a:a7:79:6d:80:8d:1c:61:a6:1d:d1:31:37:
         08:35:aa:c3:cb:92:00:ca:59:cf:76:ee:d0:db:4e:8f:9c:8a:
         5b:0c:38:a1:9a:b7:21:35:2c:80:ac:54:92:d7:36:47:60:a1:
         24:2d:75:82:5b:06:44:46:d8:b4:76:08:08:42:b0:28:eb:0f:
         93:ae:bf:e5:87:12:09:5f:4a:d8:e5:50:67:cb:3c:db:e5:02:
         24:88:5e:d0:89:58:38:b2:6f:34:5f:35:ee:f5:49:ac:62:8c:
         9a:9a:3f:34:c3:78:1d:f2:15:24:c5:52:ac:67:a9:d9:15:48:
         c1:1c:cb:34:d3:b6:28:bb:f0:ad:f0:2a:86:8c:03:4a:64:4f:
         be:ed:32:3c:5b:ec:0d:45:92:4f:f7:a4:55:a8:dd:81:5b:7c:
         79:c3:2a:b4:50:d3:04:63:30:3b:f0:c8:53:05:ec:29:40:03:
         76:80:32:47:66:f0:e9:26:75:bd:dc:dd:d1:1c:0d:31:f1:8e:
         a1:59:26:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 10:26:27 2022 by LibreSSL & rpki-client.