Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/nGJi6CSXZdHWraAPWUi1oVPrgXA.roa (download)

Subject key identifier:   9C:62:62:E8:24:97:65:D1:D6:AD:A0:0F:59:48:B5:A1:53:EB:81:70 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS39018
Prefixes:
    1: 185.193.38.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/nGJi6CSXZdHWraAPWUi1oVPrgXA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286410354 (0x11124672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Feb 23 10:39:03 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9c6262e8249765d1d6ada00f5948b5a153eb8170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f3:5c:29:db:bc:47:eb:fd:5a:d3:bf:29:3a:
                    8f:a0:55:21:15:6d:0d:33:82:02:34:c0:23:35:14:
                    8f:ba:85:e5:e5:e8:2d:69:59:d3:a6:51:50:2a:19:
                    89:b7:7c:c2:80:f0:d2:a6:07:82:d7:2f:2f:1b:6c:
                    51:1a:0f:06:33:ca:03:71:52:b5:74:87:93:16:fa:
                    53:03:1d:e1:81:8d:b8:7c:db:78:90:02:63:ed:09:
                    db:ac:31:22:aa:83:2f:be:da:d8:7f:0b:8c:1f:8b:
                    53:88:35:46:94:a6:72:05:24:24:36:2c:76:66:ce:
                    cb:0d:9e:d2:cb:5a:c3:33:79:25:a3:8b:06:19:71:
                    d9:5e:df:ca:b8:2e:7e:40:3f:c6:85:3d:ea:f2:6f:
                    ee:ae:2a:79:66:3d:0a:e7:74:19:bf:48:be:65:ca:
                    35:92:ee:80:3b:2a:7d:cf:14:1d:b8:02:73:55:18:
                    b7:c7:2a:d8:47:b0:4b:f2:86:ad:33:fe:3b:3b:6a:
                    4d:4e:f5:da:a4:cf:4d:86:ca:58:ae:1f:25:35:07:
                    59:32:28:af:3d:1f:dd:5e:12:8d:a1:ea:41:65:49:
                    54:fd:bf:99:d0:be:44:16:16:ad:02:ad:0e:17:80:
                    1a:ad:53:2c:16:d6:c7:de:69:bb:85:ea:3b:1b:ca:
                    79:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9C:62:62:E8:24:97:65:D1:D6:AD:A0:0F:59:48:B5:A1:53:EB:81:70
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/nGJi6CSXZdHWraAPWUi1oVPrgXA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:0d:13:6a:e3:84:94:9d:6e:85:aa:0f:04:79:cf:5f:f2:4e:
         d5:86:49:5f:cc:19:21:fb:a5:78:cc:a4:13:78:11:1b:79:23:
         f8:c6:f5:3d:28:c0:f9:3b:10:25:9f:3c:b3:af:f9:ee:a0:de:
         a8:71:c7:7a:24:cb:d4:49:e2:a7:2a:45:ea:12:50:47:b6:59:
         a5:a8:49:8c:80:54:37:23:a4:5a:f4:9a:60:4e:bf:69:83:cc:
         fa:97:a7:26:fd:9c:8d:0c:94:08:b6:c3:df:47:7a:40:24:7c:
         05:ea:b8:16:d6:cc:74:22:95:25:9d:22:60:38:eb:ce:d7:aa:
         21:a6:a6:73:d2:92:ff:77:e9:96:a8:38:aa:33:8d:a2:e8:1d:
         5c:cc:22:c2:e8:b8:2f:4d:eb:b6:c1:bb:e8:6d:97:3d:37:f7:
         28:46:40:2c:ca:37:29:80:0d:e8:09:5a:4a:10:bb:34:8b:1a:
         1f:56:9f:97:9b:8a:ac:4f:77:af:df:0e:95:c3:86:19:ce:11:
         dc:72:08:38:89:3a:67:78:0d:ef:e4:f3:ea:d3:a1:b5:49:f7:
         32:46:4c:70:c5:a1:5e:c5:5b:f8:1a:02:e2:de:c1:63:f2:5e:
         42:8f:38:01:6f:2d:7d:1e:e7:09:6b:c0:de:75:4e:fe:49:1e:
         5d:3f:a8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:05:01 2021 by LibreSSL & rpki-client.