Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/qmIcIGG5p-xdJdgoPfzoqxmtE0E.roa (download)

Subject key identifier:   AA:62:1C:20:61:B9:A7:EC:5D:25:D8:28:3D:FC:E8:AB:19:AD:13:41 
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
asID:                     AS396982
Prefixes:
    1: 188.244.120.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/qmIcIGG5p-xdJdgoPfzoqxmtE0E.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13162335 (0xc8d75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
        Validity
            Not Before: Jan  1 09:04:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa621c2061b9a7ec5d25d8283dfce8ab19ad1341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9b:8a:ad:c7:52:df:e1:11:38:21:73:d0:90:
                    03:84:5c:4c:d2:ab:bc:a9:cb:36:63:8a:19:17:19:
                    f2:fc:15:ec:f8:8f:36:6e:07:26:5c:56:9d:51:41:
                    cf:3d:ba:9a:ee:f0:1b:0d:da:b2:ab:fb:12:b8:8d:
                    76:c9:52:14:2f:cf:3a:50:e6:58:a8:fb:f2:71:42:
                    2c:64:f0:0d:ac:52:df:75:03:e5:d1:ec:46:82:2c:
                    fa:eb:40:01:be:d8:bf:9d:66:f5:0f:c2:0d:36:70:
                    0d:b0:59:b9:fe:3b:17:5b:fc:a7:03:23:18:04:80:
                    cb:e5:fd:d3:08:4b:d7:08:75:69:df:1f:c5:31:a4:
                    61:81:f5:a0:7f:95:d9:b7:85:e9:86:37:08:de:3b:
                    85:0b:15:e0:eb:29:4b:ec:e9:98:27:ba:ea:08:66:
                    13:d5:73:42:41:94:0e:47:5f:84:28:69:c2:92:90:
                    f1:f2:30:97:64:cf:1b:66:81:1c:bc:b5:b5:fa:6d:
                    c9:91:44:d5:f7:aa:39:c1:b6:cd:fb:5a:51:11:0c:
                    21:13:ff:ec:1c:b7:78:e6:69:d7:09:4a:47:33:92:
                    9e:45:03:55:c4:03:74:66:b2:5c:62:03:33:4e:fd:
                    ec:58:8d:57:ef:79:93:37:53:ef:3f:5a:77:bb:c3:
                    e1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AA:62:1C:20:61:B9:A7:EC:5D:25:D8:28:3D:FC:E8:AB:19:AD:13:41
            X509v3 Authority Key Identifier: 
                keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/qmIcIGG5p-xdJdgoPfzoqxmtE0E.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:f3:4b:b8:b5:3c:8e:6d:c6:67:09:27:67:96:a2:9f:c9:af:
         10:d2:b5:5a:e3:c3:73:e8:ce:07:73:e0:16:0d:18:11:cc:66:
         e5:52:bc:d0:75:c7:c2:77:f0:4b:ca:65:40:59:58:e5:32:31:
         05:bc:2f:ef:f8:d8:06:ea:92:e3:28:54:a3:05:b2:69:bd:ab:
         c2:52:85:6d:e1:10:a7:ae:06:07:25:44:65:f0:4b:37:cf:ed:
         c2:35:f3:07:cb:25:0c:3f:4a:52:ce:7c:a1:f1:40:cb:87:8e:
         6f:59:72:6f:62:e8:5b:0f:22:91:26:49:af:a8:be:c7:52:6f:
         44:69:3f:74:32:97:4c:9c:e6:e0:2b:83:57:ec:42:74:59:e1:
         a3:1a:c5:ad:24:84:ee:56:ce:d3:d7:90:1b:71:db:8f:44:58:
         90:07:41:cb:93:5a:2f:b1:54:eb:69:28:46:b3:2c:af:a8:90:
         a2:89:e9:23:8b:14:c6:a4:30:fe:c2:9d:ee:85:f6:e7:3e:ba:
         97:6d:4e:fc:40:3a:3b:9b:dd:68:f8:52:01:87:a3:4a:db:7c:
         82:34:ae:8f:f9:df:f2:f0:38:89:97:38:48:79:20:df:69:7f:
         e8:c1:90:22:63:46:ec:74:b5:b4:1a:0b:bd:4c:73:41:e6:c9:
         86:68:41:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 12:08:30 2022 by LibreSSL & rpki-client.