Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/ae/5fa10a-53ef-497c-b7fd-fd2fd3b10de6/1/I6doU9aBesfNi43VSPq-hCDUDe0.roa (download)

Subject key identifier:   23:A7:68:53:D6:81:7A:C7:CD:8B:8D:D5:48:FA:BE:84:20:D4:0D:ED 
Authority key identifier: 0B:8A:C3:88:52:02:0F:A8:BD:26:98:3A:C4:1F:B7:39:0A:97:8C:AD
asID:                     AS26636
Prefixes:
    1: 2.58.196.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/ae/5fa10a-53ef-497c-b7fd-fd2fd3b10de6/1/I6doU9aBesfNi43VSPq-hCDUDe0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147422 (0x23fde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8ac38852020fa8bd26983ac41fb7390a978cad
        Validity
            Not Before: Apr  6 16:01:45 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=23a76853d6817ac7cd8b8dd548fabe8420d40ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:59:b4:b2:a4:b0:1a:02:ed:53:15:68:76:a9:
                    e9:1e:05:55:80:ee:53:20:42:da:91:b1:1b:65:26:
                    eb:0a:92:a7:e3:65:ae:9c:c4:a8:57:23:5c:8b:b3:
                    01:73:ff:be:ff:8e:89:68:3b:2a:41:66:d9:ec:d7:
                    cd:19:0b:b6:0b:92:4e:0a:5b:e3:d3:9e:1d:96:7e:
                    3b:22:ee:f3:10:ff:14:dc:f1:22:49:be:5b:3b:12:
                    0b:29:39:25:f2:51:91:7b:c7:9c:b5:75:b5:77:c7:
                    2f:8b:05:0b:1b:57:13:3f:49:0f:d7:f1:01:d9:43:
                    5f:95:92:b4:5e:4d:83:d1:4f:f8:f7:5f:94:30:d6:
                    30:03:98:b2:11:5c:ea:bf:84:01:94:f2:dc:92:28:
                    cd:6b:15:11:03:e1:e6:80:21:e8:c1:5a:a9:db:ed:
                    bb:ec:d1:6c:08:96:b4:37:36:2b:ca:86:18:88:71:
                    03:b8:96:96:16:1c:62:ba:74:33:58:dd:6b:3f:fa:
                    4e:77:32:06:0b:17:18:e6:7e:cf:3a:c0:78:61:67:
                    b5:ff:96:7b:51:4c:fd:d7:d3:02:6c:0f:f4:c9:fb:
                    6a:30:ae:5e:ba:77:31:1e:5a:ff:0e:8e:60:1f:0c:
                    48:3e:8c:b1:35:3b:ec:19:48:b9:55:a1:20:03:39:
                    a6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                23:A7:68:53:D6:81:7A:C7:CD:8B:8D:D5:48:FA:BE:84:20:D4:0D:ED
            X509v3 Authority Key Identifier: 
                keyid:0B:8A:C3:88:52:02:0F:A8:BD:26:98:3A:C4:1F:B7:39:0A:97:8C:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4rDiFICD6i9Jpg6xB-3OQqXjK0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5fa10a-53ef-497c-b7fd-fd2fd3b10de6/1/I6doU9aBesfNi43VSPq-hCDUDe0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5fa10a-53ef-497c-b7fd-fd2fd3b10de6/1/C4rDiFICD6i9Jpg6xB-3OQqXjK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:fa:8a:fc:44:fd:e5:6a:c0:23:8d:15:01:1a:6a:e0:0f:d6:
         e4:0d:99:c7:7b:d9:37:40:55:47:b3:14:01:f0:6b:43:2c:3f:
         5b:11:33:3c:d1:b8:26:2c:c8:c2:2e:42:df:99:01:6d:6a:ed:
         03:63:64:75:50:58:56:65:c9:78:b9:fa:4a:fd:9a:b2:6c:5f:
         ed:49:0a:11:85:40:8a:51:15:ce:ef:ef:c5:ef:7c:75:78:b1:
         7a:a5:e3:6a:61:36:c7:d4:34:5b:e8:a2:2e:c5:8e:2d:f9:e0:
         2d:58:49:ca:ae:8d:b9:cd:c6:dd:2f:32:95:c6:62:f6:d3:ca:
         04:52:ad:a8:17:e3:11:47:7c:c0:13:63:b9:bd:ef:e0:ba:41:
         8e:dd:5c:ee:55:8f:b0:44:d8:f0:72:d6:97:4b:04:67:46:69:
         84:fc:17:ae:3d:37:6d:93:bc:10:7d:b9:94:ec:82:f4:e6:c4:
         f0:ce:ab:55:40:4f:b7:4a:ab:cb:cc:27:f9:fc:ae:a6:74:25:
         a0:90:75:13:77:96:cb:86:b1:37:2e:4f:72:81:23:81:b5:2c:
         12:19:ca:84:c9:53:9a:63:63:5d:6b:84:c2:35:b3:ea:45:97:
         73:df:cf:4f:11:f4:9d:84:ca:7e:c0:d5:70:2a:b5:00:b1:d0:
         af:6f:76:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Sep 23 08:53:44 2021 by LibreSSL & rpki-client.