Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/dsA5M2KGMW87dK5h1CMdkiV0G8k.roa (download)

Subject key identifier:   76:C0:39:33:62:86:31:6F:3B:74:AE:61:D4:23:1D:92:25:74:1B:C9 
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
asID:                     AS399641
Prefixes:
    1: 141.11.176.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/dsA5M2KGMW87dK5h1CMdkiV0G8k.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13408808 (0xcc9a28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Aug 23 08:44:54 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=76c039336286316f3b74ae61d4231d9225741bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4d:44:b2:28:54:61:6a:ab:55:fd:6c:0a:04:
                    44:21:76:c6:96:e4:c4:a7:f1:36:91:43:e2:e1:11:
                    b7:7c:40:d8:cf:98:19:3a:76:dd:5f:c1:eb:8b:9c:
                    3b:6d:ec:88:dc:87:7f:30:7e:6e:62:5a:23:c8:57:
                    e5:01:a9:29:cc:15:83:f0:db:68:f4:f4:1d:df:c4:
                    02:d9:1b:9b:78:90:be:ac:c8:7b:78:83:4f:a8:91:
                    3c:6b:fa:81:a8:c6:ac:66:03:12:a5:a9:48:5f:d8:
                    0b:01:91:96:cc:26:54:5c:55:65:42:eb:46:05:a1:
                    80:23:86:06:01:02:40:f5:fe:3e:fe:eb:62:96:0c:
                    bc:fd:68:34:26:cc:47:c0:9a:9e:d4:a2:39:45:de:
                    58:b6:29:63:cc:71:08:e3:44:09:ab:1c:6a:ab:46:
                    c7:c3:08:eb:c1:48:59:fc:48:cb:68:ec:b8:8d:7f:
                    f6:ec:ba:c3:be:80:da:2a:3a:c5:02:01:2b:17:10:
                    eb:53:9a:fc:00:ec:65:6a:31:21:c5:2f:9b:af:83:
                    29:25:08:a3:dc:58:b5:b0:35:1c:3b:ba:aa:a2:d8:
                    c9:a1:09:bf:c4:fd:05:60:00:41:ca:c2:30:aa:28:
                    74:a0:21:41:a6:1d:ea:1f:c6:85:40:b3:18:37:18:
                    2f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                76:C0:39:33:62:86:31:6F:3B:74:AE:61:D4:23:1D:92:25:74:1B:C9
            X509v3 Authority Key Identifier: 
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/dsA5M2KGMW87dK5h1CMdkiV0G8k.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:a7:10:2a:b2:51:e9:5f:68:7a:e0:ea:fe:31:2d:8d:5b:db:
         ad:73:62:c0:18:72:d6:62:88:79:df:3f:08:87:f5:48:26:5b:
         27:8b:15:c8:a5:56:7c:3e:60:82:6c:93:45:b8:59:bc:81:86:
         5a:cf:d0:c4:76:72:d1:3e:25:4c:88:df:61:e0:91:a9:d3:88:
         f7:f9:93:a2:4e:86:32:01:5a:81:8d:1a:b1:4f:2b:32:a1:11:
         0d:c7:4a:fe:01:dd:af:a2:fb:88:d6:18:78:24:06:7b:a9:1a:
         84:7d:7b:14:d1:71:dd:90:0c:fa:b6:b5:88:f0:38:11:8c:30:
         60:0e:34:b4:2a:b7:c9:66:9e:74:9e:65:8c:f7:a6:cc:6b:6b:
         f9:fa:16:e2:90:f8:b3:21:91:c3:61:9c:d1:1a:56:49:3d:d2:
         d5:a2:57:31:b2:1f:f0:97:f9:d2:ba:7c:db:0d:27:c2:eb:6a:
         ed:40:88:dc:7d:33:03:b9:ff:5f:c1:51:41:01:ff:76:b3:25:
         4c:ae:31:e8:20:14:f5:06:25:2c:fe:e8:06:9b:0e:85:bb:93:
         25:38:f0:02:db:b6:7b:3f:1f:1f:2f:d8:1b:7a:ba:0d:21:c7:
         0c:78:9d:46:33:98:30:b8:3b:80:b6:c1:a3:15:2e:91:63:c6:
         60:a1:7a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:55:01 2021 by LibreSSL & rpki-client.