Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/Yyh-_Ntj6RI7hHlkJlMkXhCPMFw.roa (download)

Subject key identifier:   63:28:7E:FC:DB:63:E9:12:3B:84:79:64:26:53:24:5E:10:8F:30:5C 
Authority key identifier: 71:F6:CF:04:6D:C0:06:0C:C5:3F:39:A9:4F:62:55:7E:F0:0A:89:93
asID:                     AS397423
Prefixes:
    1: 147.78.100.0/22 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/Yyh-_Ntj6RI7hHlkJlMkXhCPMFw.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5409764 (0x528be4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71f6cf046dc0060cc53f39a94f62557ef00a8993
        Validity
            Not Before: Jan 20 12:04:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63287efcdb63e9123b8479642653245e108f305c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:63:8c:88:a4:77:f7:ea:ff:68:2d:66:b9:4f:
                    dd:62:ab:6a:21:d7:46:e3:a4:8a:62:27:59:ee:86:
                    31:2a:83:66:39:6c:d6:d1:36:a8:b6:b8:2a:06:98:
                    6d:ad:3c:69:f6:ac:0c:4c:5e:59:a0:5f:20:00:b6:
                    21:0f:18:44:f7:e8:87:46:39:82:34:ba:05:0c:f7:
                    26:67:2e:72:99:36:a6:d2:d7:d8:b0:d4:cd:63:6e:
                    a8:66:fb:69:7e:40:06:27:86:19:f7:c8:f3:da:39:
                    99:05:cc:44:19:1e:de:fd:7c:0e:18:5d:66:3f:16:
                    53:9f:f3:d9:61:9d:c7:74:c1:35:90:ac:55:d4:9f:
                    8b:5d:a5:3c:bd:24:43:c9:a2:71:3f:d8:62:60:b4:
                    85:28:be:17:d1:48:b4:5e:3d:7f:f6:21:a3:0c:02:
                    96:6d:8c:dd:2c:8e:7d:00:e8:84:c7:31:18:f0:b1:
                    98:15:1a:7c:42:da:81:d3:a0:c5:e8:7f:be:34:de:
                    d4:69:c0:a5:f8:31:f1:71:db:ed:7b:3e:56:38:26:
                    30:5b:b7:d1:e5:0a:3e:19:c8:eb:2b:6e:47:81:1f:
                    e0:93:ef:bf:9f:b6:f2:04:52:67:05:a6:8c:ce:95:
                    77:30:52:29:4a:1b:18:6f:cd:54:c7:e4:7d:e3:e9:
                    0a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                63:28:7E:FC:DB:63:E9:12:3B:84:79:64:26:53:24:5E:10:8F:30:5C
            X509v3 Authority Key Identifier: 
                keyid:71:F6:CF:04:6D:C0:06:0C:C5:3F:39:A9:4F:62:55:7E:F0:0A:89:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfbPBG3ABgzFPzmpT2JVfvAKiZM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/Yyh-_Ntj6RI7hHlkJlMkXhCPMFw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/cfbPBG3ABgzFPzmpT2JVfvAKiZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:04:f5:9b:ae:44:b7:fb:75:69:f4:ba:09:01:d9:5d:e2:aa:
         03:d9:1e:b8:f1:bc:42:c1:06:a3:dd:0e:1d:e6:98:70:44:cb:
         7a:ea:be:63:65:32:3d:a8:30:bb:16:b2:7c:d6:39:70:0b:a4:
         3a:0a:5c:01:a4:48:a9:e5:df:86:32:f1:4b:83:f3:24:32:08:
         39:fb:2a:16:e6:af:3a:e2:7f:4f:9f:36:f0:42:a1:a7:09:f9:
         99:6e:4b:34:67:d5:eb:74:84:34:62:0e:f8:25:77:9f:de:d7:
         76:d1:c2:1c:e5:dc:ec:6e:61:1f:ed:b4:92:c1:96:9c:71:2b:
         4f:44:39:6a:67:fd:91:00:7d:fa:5e:c5:9c:c6:74:0a:50:9e:
         0c:2a:21:66:95:f3:3f:45:18:c0:79:f4:8b:bd:bf:e6:56:65:
         c5:dd:75:6a:b0:6b:66:d6:ae:87:77:d2:fb:e6:a7:77:5a:1a:
         4f:78:8b:be:21:4f:da:80:ae:00:37:9a:56:40:c0:99:bc:04:
         ae:cb:88:dc:82:73:14:d7:b9:63:f2:48:38:e3:9b:6c:76:6c:
         8c:56:40:c7:92:fb:76:e7:a2:30:69:4f:25:f0:ed:ba:ae:f0:
         36:77:56:7c:39:39:4e:ef:88:97:78:eb:23:c0:2d:6c:2f:1d:
         58:89:26:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Jan 20 15:01:27 2022 by LibreSSL & rpki-client.