Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/BHagoPvbDuFyn12CxPlQN9P5io0.roa (download)

Subject key identifier:   04:76:A0:A0:FB:DB:0E:E1:72:9F:5D:82:C4:F9:50:37:D3:F9:8A:8D 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS131477
Prefixes:
    1: 185.188.5.0/24 (max: 24)
    2: 185.255.152.0/23 (max: 32)
    3: 185.255.153.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/BHagoPvbDuFyn12CxPlQN9P5io0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262612460 (0xfa725ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 06:55:05 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0476a0a0fbdb0ee1729f5d82c4f95037d3f98a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:31:3e:da:03:a5:af:74:75:29:0c:69:d4:
                    da:61:c4:bd:2a:ac:cd:15:8a:84:3f:92:ee:29:f6:
                    da:0d:b0:40:a6:18:a3:1b:3e:7c:a5:fe:14:d0:4a:
                    61:4e:06:1d:0b:13:01:ae:16:a4:a8:ae:7c:43:d6:
                    52:f2:d9:b5:c4:05:87:b4:a1:32:0f:2b:0e:b6:08:
                    ff:ed:5b:f8:89:fd:44:d2:34:b0:6f:f0:ac:bf:29:
                    dd:fc:03:8a:40:3c:c3:b7:88:ba:5c:9f:fc:b6:4d:
                    31:e5:09:9a:40:5f:10:7a:10:38:00:4b:35:f0:5c:
                    1d:65:21:9a:37:ed:8d:4b:ce:ea:02:65:0c:5e:3d:
                    21:8c:07:00:80:51:84:5a:13:35:22:95:e5:bf:4d:
                    16:45:f3:4b:af:03:d4:ba:5a:01:21:ac:c8:7f:10:
                    7c:39:e6:3e:c1:05:2f:c5:02:b2:98:2c:e6:23:65:
                    dd:e8:95:e9:f4:ea:e9:67:22:e1:7e:41:35:56:c1:
                    d5:94:6a:a1:69:ad:39:44:ff:78:72:fd:4a:03:a6:
                    08:b6:32:03:94:20:92:d7:8f:28:83:07:d6:89:b9:
                    ff:33:b9:b8:77:7a:e4:af:b2:d3:a3:0d:32:22:b9:
                    57:34:4c:73:b3:2c:16:31:e6:d1:7e:13:fe:0f:49:
                    43:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                04:76:A0:A0:FB:DB:0E:E1:72:9F:5D:82:C4:F9:50:37:D3:F9:8A:8D
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/BHagoPvbDuFyn12CxPlQN9P5io0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.5.0/24
                  185.255.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:e4:b7:6a:a6:69:43:8a:69:3a:c7:10:e6:c2:c7:0b:9e:a5:
         20:a7:af:37:e3:44:7b:8a:8f:82:9c:99:13:2b:71:c4:dc:00:
         3f:db:df:48:fa:9e:b6:73:78:cb:f9:74:3d:47:a6:3a:11:5f:
         ee:fb:ac:b1:db:5a:99:31:2e:92:11:e4:80:26:26:0c:6b:b7:
         9a:89:3c:54:04:19:14:2c:d2:b6:cf:af:5a:24:ce:56:72:24:
         03:ac:7c:37:59:fd:ab:ce:36:fc:ae:c4:07:91:f3:a5:91:f7:
         89:bc:75:2a:3a:4a:68:99:7a:f3:dd:5b:4d:95:a5:17:fa:f9:
         ec:f3:7e:27:d7:80:e3:c8:7c:ea:06:f0:e6:f9:e4:c9:7f:da:
         80:0a:58:dd:89:08:60:51:0c:bc:ed:b3:bd:3a:42:0d:f3:17:
         8c:d9:58:fc:f6:b3:84:86:97:cf:a7:98:67:5c:8b:b9:eb:75:
         39:5b:0c:28:d0:4e:7a:bb:69:a1:59:0c:42:c3:47:40:ba:4b:
         b7:19:1a:95:0a:2b:6c:ee:dc:a2:a4:0c:9c:f2:aa:a0:2c:ee:
         82:ba:7d:73:ee:20:70:9c:79:ed:75:6f:1f:57:47:1e:14:b8:
         7d:8f:39:bd:81:37:a0:30:ed:a2:a7:29:ee:e9:72:fe:e7:7e:
         77:11:57:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:04:52 2021 by LibreSSL & rpki-client.