Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/DalJ-qBxavp42_FlWc57oZhqXo4.roa (download)

Subject key identifier:   0D:A9:49:FA:A0:71:6A:FA:78:DB:F1:65:59:CE:7B:A1:98:6A:5E:8E 
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
asID:                     AS834
Prefixes:
    1: 178.212.230.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/DalJ-qBxavp42_FlWc57oZhqXo4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126504 (0x1ee28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
        Validity
            Not Before: Sep  6 15:33:13 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0da949faa0716afa78dbf16559ce7ba1986a5e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c3:7e:8f:80:78:f3:2f:0a:ad:42:03:c4:47:
                    d8:f1:07:d4:1e:bd:d6:00:84:a4:cb:1a:30:13:37:
                    67:8d:40:0a:29:1b:71:00:da:68:b3:27:f3:28:0b:
                    ee:c2:ef:66:a9:bc:a1:bf:76:3c:16:11:14:55:0c:
                    e7:26:72:b0:62:e3:da:f0:27:b6:a2:02:84:96:bf:
                    b2:ab:e2:44:f7:a8:2a:87:b4:b0:7f:71:e3:eb:0e:
                    6f:0b:56:b3:4b:c3:40:48:73:9c:eb:20:bd:46:41:
                    9d:9d:22:4d:69:6e:cc:7a:a2:4a:82:8a:1a:b3:b4:
                    21:08:3b:0e:d6:69:de:37:e2:51:f6:f6:02:db:7a:
                    c0:b0:51:8d:7b:e1:77:15:61:2b:4a:5a:ca:0a:70:
                    f4:75:ec:09:2d:94:e6:4a:bf:bc:10:7c:e4:84:4e:
                    94:19:a0:f1:89:83:0d:e2:97:bc:19:78:e9:c5:43:
                    47:f1:4a:e3:92:20:40:7b:c1:8f:48:84:d3:32:05:
                    b6:40:3d:64:c0:53:55:90:65:ca:f0:26:18:f2:4e:
                    ec:51:dc:57:3c:73:47:1a:a6:30:0c:5f:b0:a2:f8:
                    a3:35:c5:5b:e7:a4:b0:9a:25:d6:97:56:0a:3e:4f:
                    39:95:b4:11:ee:fc:91:cb:99:64:2c:82:e3:0a:c8:
                    81:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0D:A9:49:FA:A0:71:6A:FA:78:DB:F1:65:59:CE:7B:A1:98:6A:5E:8E
            X509v3 Authority Key Identifier: 
                keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/DalJ-qBxavp42_FlWc57oZhqXo4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:ad:85:dd:fb:2f:a1:92:77:80:cc:c2:20:a1:43:0e:66:0b:
         39:73:33:c0:62:88:03:21:77:13:ac:20:d6:0f:6d:f0:15:63:
         d1:b3:53:cd:95:76:03:ae:28:5b:7c:c3:4b:2f:08:1f:c6:a1:
         29:64:2f:d6:03:36:ad:7b:ca:4c:78:78:34:1b:51:86:18:4d:
         49:e7:b2:38:a6:f4:4e:c3:f7:a8:ba:e3:25:2b:be:94:16:3a:
         09:fb:a1:f2:1c:20:59:14:e4:d5:f3:d5:00:be:a4:0e:e7:91:
         38:98:d9:df:ef:42:cb:de:fe:02:90:ed:c9:aa:39:0c:a0:17:
         6d:ac:88:75:64:f3:45:bd:ec:d3:a5:a4:38:4f:a5:0a:62:c7:
         b3:80:4d:e8:5e:e8:cb:16:10:d4:63:7f:86:bf:2f:db:6b:ce:
         d7:68:6a:2d:2a:9f:22:ec:3b:2c:3e:80:62:8e:8a:e0:ea:5d:
         d8:33:ed:ef:1f:b4:33:0a:ee:af:5c:98:ba:51:36:fe:e0:42:
         bf:da:bd:8d:44:9f:02:9e:19:f3:86:c6:d7:32:15:67:d6:26:
         ea:c8:ed:51:b2:0b:b3:92:31:d3:a9:f5:5f:9d:0d:56:6b:74:
         f6:03:a4:f3:06:fa:6d:24:a6:88:f8:50:bb:9c:e4:47:9a:b6:
         7b:1e:4e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:00:46 2021 by LibreSSL & rpki-client.