Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/06z3LcDZyXhA4fzx4plgVf33fPs.roa (download)

Subject key identifier:   D3:AC:F7:2D:C0:D9:C9:78:40:E1:FC:F1:E2:99:60:55:FD:F7:7C:FB 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS396982
Prefixes:
    1: 195.85.42.0/24 maxlen: 32

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/06z3LcDZyXhA4fzx4plgVf33fPs.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394774211 (0x1787c6c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Dec 31 14:29:10 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d3acf72dc0d9c97840e1fcf1e2996055fdf77cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b4:86:d0:1a:87:4b:e3:2f:79:87:0f:74:a2:
                    3f:3e:37:19:7f:1c:20:9f:cd:12:c7:37:1d:6e:ea:
                    30:2a:ba:45:e0:78:73:4a:aa:53:94:b6:5a:70:85:
                    d7:32:36:4d:49:6a:66:75:23:d6:cd:5b:d8:8c:4d:
                    ae:6a:6e:8a:cf:f5:7c:12:63:2d:56:2e:25:69:71:
                    89:16:04:e1:62:25:da:6a:01:84:c9:98:5a:f6:2d:
                    8e:a9:e1:b6:b0:ae:98:ae:0b:4b:dc:fa:da:85:23:
                    a3:d2:aa:09:7c:25:9c:81:04:0c:ff:23:48:51:81:
                    a3:ad:97:13:e8:a4:f5:f7:b6:c1:5a:14:cb:ca:0e:
                    c3:06:04:09:7b:cf:6d:46:46:7d:ff:04:97:ea:64:
                    ee:c2:0b:b8:ed:11:68:a2:c2:2a:da:3e:ea:53:72:
                    64:1b:01:78:ba:6a:7d:09:ff:e1:c2:d1:83:1f:b6:
                    2e:b6:f8:fa:e1:ed:bf:de:ca:61:f5:70:87:08:72:
                    a9:75:86:26:55:e9:78:0c:a9:b7:34:37:69:d7:7a:
                    30:53:73:7c:e1:5f:44:1a:fa:41:e7:fc:0c:2f:7e:
                    a8:5a:55:6e:1a:ea:8e:39:ed:0d:f6:1c:0d:02:13:
                    8e:08:60:2c:fb:ca:73:c6:df:5f:8d:17:75:d8:e7:
                    5f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D3:AC:F7:2D:C0:D9:C9:78:40:E1:FC:F1:E2:99:60:55:FD:F7:7C:FB
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/06z3LcDZyXhA4fzx4plgVf33fPs.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:2c:c6:78:a3:6e:b3:bd:bb:50:1b:d8:26:d9:ce:b1:41:23:
         32:56:ff:e2:a8:08:72:af:e2:f7:a0:f0:b8:bd:af:e1:44:15:
         5d:88:c5:47:6d:ec:67:4a:e7:bc:c2:5f:bd:2d:df:6d:8f:eb:
         98:aa:6e:c6:0f:b4:1b:51:48:da:71:4b:9b:ac:17:13:0b:37:
         87:80:d2:96:5f:e8:d7:13:fe:d6:da:3f:1e:32:aa:ce:70:0e:
         b1:f9:e6:33:b8:68:cb:c7:97:b1:d5:e9:cd:6b:4b:24:3e:15:
         8f:6c:4e:d5:7e:96:ee:1b:a6:f9:9e:34:63:4d:2b:3d:3e:cf:
         01:4e:8f:d0:65:ca:e0:63:2d:34:2a:81:78:9e:6b:41:54:db:
         4a:b0:21:3a:a0:29:21:06:fb:f4:0f:47:22:7d:35:fc:e7:bd:
         37:d9:6a:98:bc:49:04:7c:36:30:40:57:f7:19:55:49:63:40:
         2d:58:2e:c3:96:2a:f3:ee:f0:b6:98:f0:0c:ce:af:3f:0b:49:
         85:61:9e:ce:8c:fe:e7:32:0c:50:42:82:47:00:8f:b5:18:d9:
         c3:74:fa:5d:9c:4f:23:00:1c:99:a3:21:f9:87:6e:c5:92:6e:
         53:ee:ab:d6:bf:93:77:ec:1a:52:5a:95:02:95:9b:8c:56:55:
         9a:c5:9a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Dec 31 16:01:15 2021 by LibreSSL & rpki-client.