Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/Ou9kkk62gpynK7uf5K7Duds1_KI.roa (download)

Subject key identifier:   3A:EF:64:92:4E:B6:82:9C:A7:2B:BB:9F:E4:AE:C3:B9:DB:35:FC:A2 
Authority key identifier: F7:ED:6E:06:64:36:E0:A0:B6:17:47:49:55:A8:A7:58:E6:E3:5D:76
asID:                     AS400039
Prefixes:
    1: 146.19.92.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/Ou9kkk62gpynK7uf5K7Duds1_KI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8030138 (0x7a87ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ed6e066436e0a0b617474955a8a758e6e35d76
        Validity
            Not Before: Jan  5 10:02:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3aef64924eb6829ca72bbb9fe4aec3b9db35fca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:73:8b:50:ba:14:9e:f6:56:3d:03:ec:ea:21:
                    5c:2e:8e:8b:e1:1b:6b:17:e8:63:fa:25:12:40:a9:
                    09:77:5c:8c:af:af:7c:82:96:a5:b1:68:a0:70:60:
                    32:02:81:ee:42:f6:0c:3f:3f:f1:84:2a:a3:6d:eb:
                    54:4d:22:17:3c:c3:79:02:14:cd:2e:43:c1:41:df:
                    85:7d:4c:e4:4a:47:97:04:e6:04:d2:06:63:b6:2f:
                    44:d0:6a:17:cf:99:c6:a1:6b:d1:c1:ef:bd:62:6d:
                    3c:fd:bc:53:b9:e8:15:a6:a7:35:c8:4e:ed:cb:44:
                    4a:99:c8:17:85:39:d1:aa:98:d0:40:f4:b2:cd:ba:
                    3d:5d:6e:3c:70:3b:73:ce:3d:09:02:1d:34:23:21:
                    ca:4b:11:74:88:7e:62:a0:c0:42:6d:7d:cb:63:1e:
                    26:e5:89:06:61:92:0b:9d:51:57:62:41:db:e4:2b:
                    92:64:68:1c:cb:c3:4f:34:4d:1b:d5:c3:33:dc:86:
                    b6:0e:2e:f2:fe:27:ed:a4:41:9d:50:7f:19:95:56:
                    00:1e:a1:ae:ad:9f:95:b4:c1:af:58:d0:2a:9e:90:
                    21:01:fa:33:01:61:77:68:67:a1:78:32:12:a7:fe:
                    8d:bf:db:2a:cf:28:58:dd:d3:01:79:a7:58:2e:55:
                    0a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3A:EF:64:92:4E:B6:82:9C:A7:2B:BB:9F:E4:AE:C3:B9:DB:35:FC:A2
            X509v3 Authority Key Identifier: 
                keyid:F7:ED:6E:06:64:36:E0:A0:B6:17:47:49:55:A8:A7:58:E6:E3:5D:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-1uBmQ24KC2F0dJVainWObjXXY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/Ou9kkk62gpynK7uf5K7Duds1_KI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/9-1uBmQ24KC2F0dJVainWObjXXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:fc:6c:a5:9b:18:44:2f:98:3f:4b:45:24:19:01:85:ca:b0:
         a6:6f:70:27:fc:da:3a:d5:72:12:f1:97:ef:75:12:26:6d:ce:
         34:67:3a:ad:64:63:7d:68:e4:57:41:5e:c0:7c:71:29:c4:72:
         9b:cf:0f:25:e7:54:a1:29:28:28:94:76:5e:24:1c:4b:36:43:
         eb:98:9b:5b:3d:15:cb:f4:a0:01:11:4b:d2:a8:1d:9f:c5:43:
         2b:e4:27:95:1d:9b:82:e4:c8:0a:80:e6:fe:82:d8:66:b2:92:
         ca:33:fc:a4:99:02:5e:92:e3:6b:58:e6:40:9e:a1:75:9f:e9:
         91:91:e5:b3:86:6a:00:dc:5e:6b:cf:e1:0a:64:2e:a7:7a:ae:
         7b:d7:c1:43:5a:ba:48:a2:a1:d2:c4:7a:a3:d5:2f:24:7b:42:
         5a:24:9b:b9:61:7d:9a:8e:6d:6d:98:59:8f:00:cc:61:83:e4:
         02:5b:10:dd:e8:52:20:4e:11:f5:c9:9d:5e:a8:5d:c1:ad:97:
         ef:85:e8:51:7a:0e:ec:95:ee:a3:c7:9f:5c:6a:40:59:a8:e7:
         22:f6:6b:50:98:c9:b1:a3:52:e6:99:c8:56:e7:27:71:6e:64:
         06:f3:01:10:f9:17:52:95:d4:53:15:71:bd:02:66:da:63:c7:
         b7:54:a7:5f
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDeoe6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY3
ZWQ2ZTA2NjQzNmUwYTBiNjE3NDc0OTU1YThhNzU4ZTZlMzVkNzYwHhcNMjIwMTA1
MTAwMjA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzYWVmNjQ5MjRlYjY4
MjljYTcyYmJiOWZlNGFlYzNiOWRiMzVmY2EyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1nOLULoUnvZWPQPs6iFcLo6L4RtrF+hj+iUSQKkJd1yMr698
gpalsWigcGAyAoHuQvYMPz/xhCqjbetUTSIXPMN5AhTNLkPBQd+FfUzkSkeXBOYE
0gZjti9E0GoXz5nGoWvRwe+9Ym08/bxTuegVpqc1yE7ty0RKmcgXhTnRqpjQQPSy
zbo9XW48cDtzzj0JAh00IyHKSxF0iH5ioMBCbX3LYx4m5YkGYZILnVFXYkHb5CuS
ZGgcy8NPNE0b1cMz3Ia2Di7y/iftpEGdUH8ZlVYAHqGurZ+VtMGvWNAqnpAhAfoz
AWF3aGeheDISp/6Nv9sqzyhY3dMBeadYLlUK1QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFDrvZJJOtoKcpyu7n+Suw7nbNfyiMB8GA1UdIwQYMBaAFPftbgZkNuCgthdH
SVWop1jm4112MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
OS0xdUJtUTI0S0MyRjBkSlZhaW5XT2JqWFhZLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZi83YzExMzEtOTY2Zi00M2FmLThmNGMtYzNmYmM4ZDhmOTY2LzEv
T3U5a2trNjJncHluSzd1ZjVLN0R1ZHMxX0tJLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83
YzExMzEtOTY2Zi00M2FmLThmNGMtYzNmYmM4ZDhmOTY2LzEvOS0xdUJtUTI0S0My
RjBkSlZhaW5XT2JqWFhZLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNcMA0GCSqGSIb3DQEBCwUAA4IB
AQDI/GylmxhEL5g/S0UkGQGFyrCmb3An/No61XIS8ZfvdRImbc40ZzqtZGN9aORX
QV7AfHEpxHKbzw8l51ShKSgolHZeJBxLNkPrmJtbPRXL9KABEUvSqB2fxUMr5CeV
HZuC5MgKgOb+gthmspLKM/ykmQJekuNrWOZAnqF1n+mRkeWzhmoA3F5rz+EKZC6n
eq5718FDWrpIoqHSxHqj1S8ke0JaJJu5YX2ajm1tmFmPAMxhg+QCWxDd6FIgThH1
yZ1eqF3BrZfvhehReg7sle6jx59cakBZqOci9mtQmMmxo1LmmchW5ydxbmQG8wEQ
+RdSldRTFXG9AmbaY8e3VKdf
-----END CERTIFICATE-----

Generated at Wed Jan 5 11:33:06 2022 by LibreSSL & rpki-client.