Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LZ_c5r9YgAarnduoDwbZF8XJORI.roa (download)

Subject key identifier:   2D:9F:DC:E6:BF:58:80:06:AB:9D:DB:A8:0F:06:D9:17:C5:C9:39:12 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS204526
Prefixes:
    1: 194.34.230.0/24 maxlen: 32

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LZ_c5r9YgAarnduoDwbZF8XJORI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381432574 (0x16bc32fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Nov  3 10:22:02 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2d9fdce6bf588006ab9ddba80f06d917c5c93912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:d0:10:87:59:21:cf:67:c4:7d:eb:82:1f:
                    88:c0:4e:ff:7d:1b:cc:c1:a2:c0:9c:c5:e4:0e:9c:
                    08:86:14:ba:f2:ec:c6:38:b6:08:d9:56:e2:b8:19:
                    76:32:55:54:21:0d:cf:b5:bf:c7:9a:15:68:d1:ef:
                    3c:62:53:80:27:d2:9d:dc:8f:9e:a2:fe:21:54:dd:
                    6f:b0:31:4b:f6:d8:ee:43:49:15:fa:1f:82:1b:68:
                    73:99:95:63:c2:cb:14:64:56:59:59:1c:30:95:41:
                    8e:35:0d:3f:28:e8:0a:a7:5f:17:6e:5f:49:ee:3d:
                    04:d4:e1:95:fc:8a:1b:6e:14:21:25:c1:4c:b9:79:
                    98:b8:41:d5:62:7e:1b:73:a1:2c:78:32:e0:1a:6b:
                    e4:7e:de:e7:b5:4c:29:ea:24:2b:f8:2a:17:eb:51:
                    8d:cc:b8:43:db:ee:17:29:19:b1:87:88:45:f2:09:
                    e3:98:0a:ce:94:3c:97:6c:b8:94:4d:78:b3:69:c6:
                    69:1f:af:63:7a:c2:66:29:45:64:70:e4:19:9e:c7:
                    20:b4:d8:6d:0d:d8:6a:e0:81:2e:c4:7a:16:65:33:
                    bf:26:4c:98:aa:bb:d5:c3:bc:1c:35:87:37:cf:62:
                    72:d0:4f:03:b2:20:d5:c9:08:77:97:28:91:45:77:
                    90:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2D:9F:DC:E6:BF:58:80:06:AB:9D:DB:A8:0F:06:D9:17:C5:C9:39:12
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LZ_c5r9YgAarnduoDwbZF8XJORI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.34.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:dd:d3:a2:7e:8c:4b:ae:2b:ae:a5:d6:ab:76:61:1b:db:05:
         2d:22:2c:e6:2e:6c:4c:eb:39:19:49:b9:08:ee:d5:e7:0d:1d:
         0f:14:f9:c3:ce:07:52:59:6d:29:e1:a1:9c:2b:bb:f8:2c:e6:
         9f:20:ae:1c:d3:1c:84:ad:be:38:cc:a2:2a:29:d2:89:a7:16:
         28:24:54:dd:72:bb:69:15:89:8a:22:c0:1b:58:f0:04:12:ce:
         9d:52:93:e8:23:0d:65:26:d5:32:2b:9b:1a:88:df:62:f3:53:
         d1:2c:4e:6a:1f:0d:a0:10:c1:5a:13:ea:64:97:0c:30:dc:35:
         2f:a9:08:90:86:44:67:ea:89:73:7b:65:d0:41:2c:48:cd:5b:
         c5:da:be:c4:0c:3e:3e:eb:63:de:bc:49:c9:e9:78:d2:ec:fc:
         c8:ad:e0:7d:8f:49:e3:41:42:d5:3a:aa:e3:ee:c1:53:96:d2:
         b9:86:48:d5:a0:46:85:cc:23:f4:6e:ed:b8:df:a3:03:47:fc:
         0a:28:68:2f:e4:f4:31:78:c5:e2:85:05:0b:b8:99:bf:1c:04:
         1e:6a:f8:4c:b7:d3:f0:e9:a6:18:44:7b:55:5d:59:e7:e2:c4:
         7d:ac:3b:dc:47:af:28:a3:af:5d:a0:a0:30:f5:4e:c3:ba:ea:
         b2:87:98:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Nov 3 12:36:45 2021 by LibreSSL & rpki-client.