Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/A2fN8ddVtToRWLEJqYzUNXcBp6Q.roa (download)

Subject key identifier:   03:67:CD:F1:D7:55:B5:3A:11:58:B1:09:A9:8C:D4:35:77:01:A7:A4 
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
asID:                     AS399746
Prefixes:
    1: 141.11.6.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/A2fN8ddVtToRWLEJqYzUNXcBp6Q.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41584214 (0x27a8656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Jan  1 08:03:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0367cdf1d755b53a1158b109a98cd4357701a7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:68:35:8c:af:31:9c:e7:3d:b5:22:75:f0:
                    24:df:42:59:90:7a:29:d3:95:4c:1e:96:ae:a2:62:
                    3c:63:a0:93:aa:5a:91:e5:b5:1d:ae:03:b5:4b:53:
                    cd:8a:19:cf:a3:1e:70:cc:01:fd:a6:1b:14:66:e4:
                    d2:3c:65:4f:bb:1f:0f:fc:62:47:61:26:63:12:7b:
                    fb:ad:ef:9c:33:60:cb:77:af:1b:45:38:04:42:fa:
                    a9:55:e7:b5:06:f1:d9:8c:09:30:5b:58:fc:4f:15:
                    6b:cf:db:1e:3e:22:8e:cc:bb:c6:b7:18:1d:44:f9:
                    17:9f:3e:41:07:9b:d2:5e:e3:d0:34:0e:3d:2e:50:
                    a2:0f:7c:1a:ff:12:6e:92:b0:d6:11:3b:46:d3:be:
                    1f:e8:62:28:8c:75:0c:cc:de:1d:00:56:bb:3d:6d:
                    33:94:87:83:90:9b:56:8b:c1:dc:df:34:7c:77:76:
                    c1:51:39:71:b2:ab:a7:b0:37:29:24:e4:1f:4d:ca:
                    4f:64:b4:a1:a0:d9:60:78:22:47:52:e0:d1:ee:32:
                    50:69:94:d2:fa:60:89:20:50:08:f4:b7:4f:65:5f:
                    06:16:74:17:7e:91:ef:3d:3f:4c:b9:0a:e7:78:cb:
                    af:de:6a:ef:15:33:cd:fb:44:cb:55:4e:f2:fc:d9:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                03:67:CD:F1:D7:55:B5:3A:11:58:B1:09:A9:8C:D4:35:77:01:A7:A4
            X509v3 Authority Key Identifier: 
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/A2fN8ddVtToRWLEJqYzUNXcBp6Q.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:7d:c6:a2:46:93:a4:62:76:83:07:57:9c:a8:59:ea:0a:f4:
         85:28:88:b1:d4:c7:d1:b0:29:a1:27:13:b7:8a:4b:3d:ef:7d:
         01:32:88:5d:82:83:a9:37:3b:61:24:7f:eb:85:55:ab:0c:ee:
         3d:3e:df:fb:05:9b:2e:c3:8c:b8:98:eb:fe:bb:09:2c:da:aa:
         23:42:d3:93:a3:8f:02:f8:68:c2:13:d6:8d:dd:b0:3c:66:a2:
         b9:85:c1:cf:4b:66:c6:97:44:04:d6:66:30:b2:ee:1c:80:93:
         95:54:00:d3:2b:3b:b6:90:90:27:30:5f:00:5c:a0:64:44:3d:
         41:f9:c2:5a:bd:4e:31:f7:bf:03:97:61:93:7a:77:48:68:0b:
         33:4a:75:6f:31:15:06:6e:18:f0:f7:da:92:37:4c:d2:ec:33:
         98:5e:e3:43:47:44:bf:24:d8:65:fa:94:65:8e:45:c2:0e:91:
         72:9a:ae:ea:87:c6:c9:35:83:87:79:e1:21:2f:d6:1c:74:74:
         77:18:04:02:0c:ce:00:8c:8d:47:d1:a0:87:0b:89:a2:ce:fa:
         16:03:f0:66:23:c9:d2:4a:ed:6e:d5:f9:c5:8e:d8:02:ab:da:
         de:58:fb:cb:e7:5e:07:55:62:da:09:9d:53:c0:06:8b:99:a1:
         44:0a:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 10:27:22 2022 by LibreSSL & rpki-client.