Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mzPZ9m0TRAgyyn6fmmHFFmpc1e0.roa (download)

Subject key identifier:   9B:33:D9:F6:6D:13:44:08:32:CA:7E:9F:9A:61:C5:16:6A:5C:D5:ED 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS25926
Prefixes:
    1: 185.120.7.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mzPZ9m0TRAgyyn6fmmHFFmpc1e0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259380466 (0xf75d4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 06:54:31 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9b33d9f66d13440832ca7e9f9a61c5166a5cd5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:de:0f:0a:6a:31:b0:01:05:83:77:70:ea:37:
                    03:88:f7:f7:66:d8:c3:7a:05:95:fb:e2:86:46:b1:
                    47:73:60:96:59:3f:9a:7e:e3:f4:e7:a5:31:90:56:
                    b9:fd:6a:ee:a7:08:c5:53:2b:6c:cc:a7:65:bf:1d:
                    a7:d3:fe:0d:9b:65:78:26:b2:3a:15:43:8a:b6:9e:
                    1a:50:9f:75:d4:2a:86:ee:06:5e:21:38:43:66:60:
                    a8:19:a3:4d:1e:67:68:04:a0:52:42:1a:a4:7b:c8:
                    05:16:c5:ac:02:c7:a7:56:10:c5:a6:76:e7:a0:13:
                    39:3a:e7:85:bb:54:3c:ec:cb:0a:e0:91:9d:20:8b:
                    59:76:0a:40:ed:f3:6b:7a:63:59:0d:4a:5e:ca:84:
                    a8:af:e5:bc:ed:f1:74:37:b4:6a:f8:49:3d:2e:a3:
                    e1:9a:02:68:2f:ac:31:bd:81:55:53:47:04:d0:03:
                    83:02:3e:8e:0c:8f:cd:ac:75:ae:79:56:f1:7c:d3:
                    4e:c9:19:e4:c7:ef:8f:c9:11:46:56:fc:44:e7:2b:
                    d1:06:ec:98:1e:0b:5e:47:fd:d3:58:1a:ee:53:84:
                    7b:bc:f9:83:37:59:bb:20:62:07:85:1f:c8:c9:17:
                    14:8d:16:da:6e:c7:30:f2:c7:8b:88:8e:57:c0:18:
                    d6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9B:33:D9:F6:6D:13:44:08:32:CA:7E:9F:9A:61:C5:16:6A:5C:D5:ED
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mzPZ9m0TRAgyyn6fmmHFFmpc1e0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.120.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:38:3c:0e:f8:62:dd:1f:a1:2b:9a:e8:04:58:b5:5d:a4:fb:
         d0:7f:a5:d9:d3:32:0a:07:66:2b:7f:01:99:1e:db:a5:41:47:
         48:67:bc:d7:60:25:0a:fe:e9:83:df:35:8a:19:1d:ff:33:83:
         a2:11:ea:da:ce:49:38:2f:04:64:66:54:5a:1a:89:a9:43:0a:
         27:cd:62:13:de:22:12:bb:6f:af:e4:a8:63:71:b2:81:b1:96:
         c4:c3:56:f5:af:9c:ff:7b:9b:c1:89:5a:6a:5b:78:99:98:60:
         80:cd:67:db:c7:43:cc:d9:81:53:e2:b8:f7:b4:4c:8d:91:2c:
         18:2a:02:c4:a0:d4:2b:90:90:5b:9b:95:d2:e5:50:d7:7e:d5:
         e4:bb:c9:41:6e:cd:60:a3:ba:db:07:35:1b:33:2b:b9:34:17:
         e6:5e:81:a8:6f:56:c8:8c:65:2b:34:95:49:62:ab:83:ed:19:
         c4:79:a0:52:15:ac:33:be:17:3a:17:fd:e1:27:52:c5:26:e2:
         df:33:81:98:40:68:7d:ad:ab:24:56:59:99:cd:21:1c:43:d5:
         23:95:f0:07:55:f8:6f:e1:2f:0b:e3:99:5b:85:52:65:49:01:
         93:97:07:99:72:ff:9f:08:1e:0b:a7:be:55:e5:0d:38:c7:86:
         7b:3b:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:05:01 2021 by LibreSSL & rpki-client.