Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/VYI8MESwrwv7uljeTETqjds3e08.roa (download)

Subject key identifier:   55:82:3C:30:44:B0:AF:0B:FB:BA:58:DE:4C:44:EA:8D:DB:37:7B:4F 
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
asID:                     AS0
Prefixes:
    1: 185.1.109.0/24 (max: 24)
    2: 2001:7f8:c3::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/VYI8MESwrwv7uljeTETqjds3e08.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2402408 (0x24a868)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
        Validity
            Not Before: Jan  1 00:51:43 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=55823c3044b0af0bfbba58de4c44ea8ddb377b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fd:51:14:11:cf:b2:b5:14:21:d5:bc:c6:bf:
                    9c:d5:61:1f:08:60:ab:7d:21:8c:2b:51:03:fe:dc:
                    df:2c:55:88:f0:50:ac:3d:58:91:3b:95:61:26:23:
                    99:18:12:79:da:ed:d7:f9:3f:75:81:34:de:0c:ae:
                    e6:19:1c:6a:c6:0a:6c:24:86:7b:3b:b8:a4:54:71:
                    d9:e4:a5:76:d7:48:2b:a3:cb:90:56:bd:ce:c6:44:
                    d6:1a:48:6c:1b:2d:a0:50:2c:55:61:d3:94:2e:97:
                    80:f4:c0:60:90:6b:19:eb:f7:1f:37:db:9d:21:73:
                    31:9c:4a:08:bb:62:b5:2f:30:7c:59:92:23:a2:2a:
                    48:13:22:07:d5:20:1d:dd:08:d1:87:68:d2:03:bb:
                    36:cb:fb:b9:5e:fd:48:a7:be:d9:ea:ab:fe:47:e9:
                    24:06:99:a0:87:97:5f:55:66:39:ff:91:14:e9:0b:
                    e1:01:a0:ed:d1:6e:91:1a:b2:5e:f8:f3:9a:4e:2e:
                    10:56:6d:ac:0b:93:7c:8d:ff:64:3a:89:4b:c3:70:
                    db:ea:fa:13:3f:c0:5e:d3:48:82:99:c6:c3:23:c9:
                    69:ce:f4:f3:b0:a7:3a:d0:3a:57:bb:c3:4c:54:23:
                    32:8d:6c:eb:ee:8d:5b:cd:c7:31:4a:57:c0:51:87:
                    01:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                55:82:3C:30:44:B0:AF:0B:FB:BA:58:DE:4C:44:EA:8D:DB:37:7B:4F
            X509v3 Authority Key Identifier: 
                keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/VYI8MESwrwv7uljeTETqjds3e08.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0......m0.....0.... .....
    Signature Algorithm: sha256WithRSAEncryption
         9a:2d:00:e9:e4:72:3d:6e:d6:40:ef:46:3f:14:8b:08:ba:41:
         5e:18:0d:83:90:51:03:e7:83:ce:54:a3:d3:87:fa:de:20:d8:
         43:20:36:d4:37:db:f2:73:0a:e9:4d:6e:40:c1:55:fc:04:10:
         56:55:16:d5:35:a6:49:27:2c:5c:8c:c6:b8:d6:df:15:5e:f3:
         d1:90:c1:74:76:c3:61:60:85:01:16:99:eb:cd:71:41:c4:4f:
         b5:f0:66:9b:b5:cd:a2:23:65:5a:d6:85:74:6d:cc:43:2c:c5:
         4f:f6:6b:0d:52:ea:67:bd:06:d3:6a:0c:33:3f:ac:fd:35:6a:
         bf:c5:53:61:80:8a:94:28:44:30:69:c9:39:40:7e:1f:41:5b:
         4f:59:7f:be:cc:de:0e:dc:61:4a:be:0b:d1:f7:30:51:d4:fc:
         2d:e7:67:5f:5a:93:6b:ff:12:c8:9b:5a:a0:ed:4b:e9:31:3c:
         68:4d:2d:60:1c:e4:cb:81:b1:01:df:e3:6f:58:41:84:c6:b6:
         a7:65:c7:33:9b:c8:de:43:78:58:5f:41:5c:f2:69:8b:f3:38:
         4b:ae:3f:4c:12:48:b5:3d:f7:7e:95:ff:41:2d:14:8f:b2:18:
         5e:33:95:5e:60:b2:3c:51:37:36:fe:97:ff:22:ef:64:c3:86:
         1c:4b:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:30:28 2021 by LibreSSL & rpki-client.