Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/YMwfjFyJhtT0U14aztT4LSJrnYg.roa (download)

Subject key identifier:   60:CC:1F:8C:5C:89:86:D4:F4:53:5E:1A:CE:D4:F8:2D:22:6B:9D:88 
Authority key identifier: 93:41:0B:61:A8:02:5A:52:6F:23:BC:20:02:41:79:D3:22:DB:16:CE
asID:                     AS397373
Prefixes:
    1: 62.192.170.0/23 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/YMwfjFyJhtT0U14aztT4LSJrnYg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113283653 (0x6c09245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93410b61a8025a526f23bc20024179d322db16ce
        Validity
            Not Before: Jan 17 15:01:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=60cc1f8c5c8986d4f4535e1aced4f82d226b9d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:62:5f:75:da:60:95:c1:d5:10:ba:c9:d6:e5:
                    52:1c:3d:31:6c:89:d2:47:38:50:5b:b0:d2:ff:75:
                    fd:e2:a7:61:65:a2:eb:df:f4:6c:4b:f8:60:aa:d8:
                    e0:d8:ce:be:0b:a3:6a:03:16:c0:31:4b:5f:ef:94:
                    8b:a4:a5:bf:03:b5:31:bd:61:74:77:4c:f6:31:75:
                    8f:89:57:cc:01:91:8f:8b:4a:3e:b4:1f:55:69:5b:
                    d7:c4:93:4b:68:b4:ea:56:ee:b5:84:98:e5:36:56:
                    fd:ff:d3:61:77:94:45:c6:98:6f:df:6f:0e:90:18:
                    19:64:95:40:6f:28:d1:f2:7f:38:d6:d9:59:cd:3c:
                    a8:8d:48:2f:40:d8:f2:4a:3a:e1:4f:9d:01:52:e1:
                    d9:5d:ad:fa:f9:cd:f3:d2:42:75:ed:ab:9b:31:d5:
                    05:ce:51:19:24:6e:de:e3:74:14:fc:7c:3a:17:eb:
                    88:c3:b0:81:9d:9a:6f:6f:67:2f:d2:0d:34:08:f2:
                    0b:95:41:06:b9:ae:7c:ab:a0:3b:b6:17:f9:49:e9:
                    35:9e:43:92:64:0b:86:2a:d4:a2:15:10:f5:55:0e:
                    de:ce:f4:f7:61:aa:ca:a9:0f:a3:c9:fc:92:e7:77:
                    a5:13:e9:75:8f:bd:20:55:3e:e4:0d:33:20:63:4c:
                    ea:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                60:CC:1F:8C:5C:89:86:D4:F4:53:5E:1A:CE:D4:F8:2D:22:6B:9D:88
            X509v3 Authority Key Identifier: 
                keyid:93:41:0B:61:A8:02:5A:52:6F:23:BC:20:02:41:79:D3:22:DB:16:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0ELYagCWlJvI7wgAkF50yLbFs4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/YMwfjFyJhtT0U14aztT4LSJrnYg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/k0ELYagCWlJvI7wgAkF50yLbFs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.192.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:fb:f6:e4:e4:f2:39:0c:86:96:45:b1:c6:27:b5:d4:dc:3c:
         d4:14:1e:35:aa:a6:76:bc:80:6c:11:65:48:4f:36:d4:ed:f9:
         be:67:73:b1:b0:4b:5d:79:b8:41:27:97:2e:92:34:93:03:30:
         39:a8:e3:56:65:ad:3e:87:71:30:99:8d:e2:08:3b:d0:3e:7e:
         a0:a5:8d:3c:5c:73:73:a1:91:50:2b:9d:0a:e8:ca:a9:f6:be:
         11:16:3b:46:e0:cc:81:f8:d6:cf:42:58:8a:06:04:f1:af:e6:
         c9:30:d9:5c:48:82:6c:18:6a:75:7d:6f:fd:c2:51:f7:63:78:
         44:54:22:bf:6f:e4:3a:f1:77:71:11:63:f9:e6:1c:ec:96:2b:
         dd:be:17:f3:7d:0f:38:88:4d:de:49:00:af:88:f4:a2:ee:1e:
         a4:bc:77:bf:e5:18:41:2e:3a:8e:f6:a9:3a:83:68:88:3d:14:
         96:71:3c:3c:f1:63:ab:28:0f:11:10:d5:26:28:d3:eb:73:17:
         63:be:1f:ec:36:e6:66:47:b8:c8:1e:ce:11:84:c4:91:46:42:
         8a:96:c2:44:9e:0b:0e:50:cc:79:56:19:27:10:d9:23:70:bb:
         f9:09:af:2c:c6:66:68:3b:54:02:6d:be:99:1b:ed:5f:24:a1:
         3e:4b:44:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Jan 17 16:30:51 2022 by LibreSSL & rpki-client.