Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d3/23af3e-f014-475c-8afb-c9a065455d7d/1/3LYgPVI-CJSGBRwBxZsCv8ZqKrI.roa (download)

Subject key identifier:   DC:B6:20:3D:52:3E:08:94:86:05:1C:01:C5:9B:02:BF:C6:6A:2A:B2 
Authority key identifier: BE:0F:C0:DF:3C:F0:70:25:53:24:BB:28:CE:50:2B:D7:99:0D:CB:12
asID:                     AS399471
Prefixes:
    1: 194.113.226.0/23 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d3/23af3e-f014-475c-8afb-c9a065455d7d/1/3LYgPVI-CJSGBRwBxZsCv8ZqKrI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5328304 (0x514db0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be0fc0df3cf070255324bb28ce502bd7990dcb12
        Validity
            Not Before: Oct  5 05:41:53 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dcb6203d523e089486051c01c59b02bfc66a2ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bb:a4:0b:a6:3a:0f:18:73:1c:e7:3b:ed:75:
                    a9:73:b2:f3:47:33:26:30:e9:d7:59:d6:b3:aa:4d:
                    21:84:8b:ab:f5:84:1b:43:84:56:50:ac:e1:cc:73:
                    04:6e:27:17:eb:4e:ba:66:50:62:b8:f0:35:c2:1b:
                    d5:64:a1:61:cc:31:e6:60:93:40:4a:71:54:ab:dc:
                    af:db:71:e6:18:23:46:89:cb:d8:19:88:c6:90:d9:
                    60:35:43:1e:bd:ab:09:af:40:3f:23:22:8b:ec:af:
                    ad:2f:08:ea:f3:e5:ab:a2:50:37:7d:63:11:60:30:
                    bd:5a:22:71:19:24:ac:95:1b:2c:53:7d:22:bd:77:
                    3b:84:07:81:e0:c9:1a:47:07:1f:17:1c:86:6c:80:
                    8c:42:ad:8e:45:55:3b:cf:1f:f4:2e:86:85:a6:9e:
                    a3:38:56:66:30:25:b0:0e:5c:84:67:3f:1a:9e:e2:
                    71:c4:40:d3:74:59:2b:48:24:da:94:7c:71:ae:b2:
                    a3:d7:de:9d:ff:04:2d:5b:c9:b3:02:b4:1f:21:98:
                    1b:0f:b8:6d:36:94:e4:7d:6e:a5:6a:05:46:4a:61:
                    50:e2:27:38:80:db:9d:a0:12:cd:17:d0:0c:ae:57:
                    d5:60:10:7d:a2:a1:cf:e1:a6:1a:c5:ff:d3:39:fd:
                    53:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DC:B6:20:3D:52:3E:08:94:86:05:1C:01:C5:9B:02:BF:C6:6A:2A:B2
            X509v3 Authority Key Identifier: 
                keyid:BE:0F:C0:DF:3C:F0:70:25:53:24:BB:28:CE:50:2B:D7:99:0D:CB:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg_A3zzwcCVTJLsozlAr15kNyxI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/23af3e-f014-475c-8afb-c9a065455d7d/1/3LYgPVI-CJSGBRwBxZsCv8ZqKrI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/23af3e-f014-475c-8afb-c9a065455d7d/1/vg_A3zzwcCVTJLsozlAr15kNyxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:59:30:d5:cd:44:c7:4c:58:3f:2a:b9:9c:72:88:21:55:4c:
         2c:3c:06:ee:af:b8:82:e0:ae:04:87:63:47:2f:cb:cb:63:30:
         c3:91:b2:4a:5d:21:2f:b7:2c:99:8f:1d:a9:1d:b2:0f:2f:4d:
         26:8f:0d:1f:f2:82:8f:31:b4:28:12:71:3d:8d:7b:f8:c7:db:
         b5:1a:10:f2:5d:d3:53:ae:4e:48:e1:75:1b:63:17:4f:17:13:
         18:ff:5a:01:a2:eb:52:2b:4b:25:61:5f:5c:f6:c5:6b:47:5b:
         43:d4:74:37:0d:6d:87:53:30:ea:31:7b:d1:d1:62:ea:b7:f9:
         f5:c3:54:aa:31:ea:3a:a4:0d:3a:42:f7:52:61:0b:31:a2:d6:
         ac:ed:e1:c5:c0:05:ae:6f:cb:aa:51:8b:7a:01:fb:d3:a2:3a:
         16:fc:4e:f7:cd:1e:9a:35:bb:ac:6f:d6:07:1f:c6:9b:60:81:
         c4:77:f2:44:ee:b6:ac:95:cb:8e:8f:58:9d:75:d4:76:45:99:
         55:b1:b8:65:7d:4a:b3:20:be:36:eb:1b:ea:1d:56:30:95:89:
         42:e5:36:0a:87:15:13:ab:79:d0:b0:92:fd:00:09:59:91:20:
         c0:3d:aa:1f:99:65:03:ac:00:cf:db:4c:90:a2:71:20:78:19:
         ec:32:7b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Oct 5 07:42:00 2021 by LibreSSL & rpki-client.