Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/OL3EnMeg0sUu1wP7zufE2FdhFf8.roa (download)

Subject key identifier:   38:BD:C4:9C:C7:A0:D2:C5:2E:D7:03:FB:CE:E7:C4:D8:57:61:15:FF 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS41059
Prefixes:
    1: 185.1.40.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/OL3EnMeg0sUu1wP7zufE2FdhFf8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95963101 (0x5b847dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 02:43:22 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=38bdc49cc7a0d2c52ed703fbcee7c4d8576115ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:32:e1:78:a8:74:cc:d1:ae:22:f8:c4:e9:
                    81:84:7b:be:ea:49:e8:ce:24:3c:a2:86:01:a3:c2:
                    19:a8:01:0e:74:5b:bc:82:dc:b0:b1:4d:19:e0:ec:
                    55:33:19:b3:2f:44:22:1b:51:02:0c:fc:57:f5:3e:
                    f5:10:a4:cd:b3:3e:5b:d5:2c:89:a6:c0:7f:96:d8:
                    2d:d2:d7:81:29:91:38:43:f0:68:01:84:ce:00:42:
                    cd:1d:7c:8a:64:da:f8:1d:3b:04:4b:73:51:08:8d:
                    23:4e:06:09:6b:82:7c:2d:61:31:20:26:ff:29:c4:
                    cf:c6:c4:06:9b:8f:ab:5d:15:d7:6b:31:84:3a:5e:
                    22:0f:08:3b:7b:fe:90:05:ca:7b:ad:05:85:d4:72:
                    98:73:2e:0a:ab:ec:79:bc:33:a9:82:3a:ad:e9:4e:
                    08:16:b7:55:16:29:64:ac:20:a5:84:69:6b:97:3d:
                    76:b4:1e:cb:a4:88:bc:bb:d8:e3:08:1d:3d:a2:69:
                    77:33:99:bf:c0:89:39:74:57:eb:1b:bf:e5:82:7a:
                    d6:b8:b7:a6:2e:86:04:00:40:d2:01:a8:69:c0:fa:
                    a2:42:40:2b:f3:6c:08:e9:fc:0c:7e:3a:32:ad:6f:
                    59:cc:b1:65:54:cc:f5:49:aa:a1:b6:ed:b2:33:e5:
                    63:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                38:BD:C4:9C:C7:A0:D2:C5:2E:D7:03:FB:CE:E7:C4:D8:57:61:15:FF
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/OL3EnMeg0sUu1wP7zufE2FdhFf8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:9f:4d:4b:12:8c:4f:35:48:8e:9b:d0:b5:25:0e:33:07:22:
         dd:8f:c2:da:ba:ea:fc:83:6a:7b:77:f2:74:62:ca:85:59:8b:
         ba:0c:ed:5d:7c:e3:6a:72:77:c8:c0:ce:06:17:3d:69:07:4e:
         58:47:67:4d:87:06:68:3d:bf:de:9c:29:22:e5:0a:cb:99:f5:
         23:85:0b:c5:f4:8a:06:4a:c4:ee:b4:f1:5a:5a:2b:be:11:55:
         6a:a6:02:5c:de:5b:71:17:a7:2a:92:59:80:28:29:0d:f0:97:
         ef:bc:dc:24:ff:a9:9a:fd:f6:7d:26:77:25:56:d1:b6:c9:30:
         06:ad:63:48:7c:9e:f3:47:9e:4d:fe:4e:b8:9f:21:49:e9:81:
         7e:9e:52:e8:64:a2:1c:de:6b:e6:7b:65:29:6a:12:61:33:c6:
         f4:d0:5c:98:69:fd:76:c3:47:b6:ab:64:51:96:1b:76:6b:1a:
         a3:5b:bb:80:d4:e6:0a:45:b5:9e:c5:c6:8e:63:b4:68:b5:61:
         61:73:86:87:b2:68:b7:29:c5:a7:5c:9d:76:48:f6:18:c4:d4:
         a3:ff:37:55:60:b4:83:a0:a8:91:a2:78:90:f1:1a:63:f2:06:
         36:7d:79:8d:51:60:d0:ef:e9:5c:75:5a:29:b1:5e:3b:b1:c3:
         7a:22:05:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:51:58 2021 by LibreSSL & rpki-client.