Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/FagDihBqJQ-mPSceWLLHjCCJXgc.roa (download)

Subject key identifier:   15:A8:03:8A:10:6A:25:0F:A6:3D:27:1E:58:B2:C7:8C:20:89:5E:07 
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
asID:                     AS394648
Prefixes:
    1: 194.31.195.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/FagDihBqJQ-mPSceWLLHjCCJXgc.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67829186 (0x40afdc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
        Validity
            Not Before: Jan  1 08:03:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15a8038a106a250fa63d271e58b2c78c20895e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:40:44:75:99:60:dd:7b:9c:47:f2:08:ce:
                    02:0e:a8:0e:a5:26:60:28:ab:50:64:17:73:05:28:
                    4b:cf:eb:46:9e:f1:bd:e2:d8:36:70:58:06:a4:06:
                    1c:ce:b1:32:c7:3e:0f:ca:61:f0:2f:2f:d2:7a:49:
                    9e:ad:dd:17:39:19:bb:81:8e:4c:32:27:46:2a:71:
                    ff:96:8f:1b:71:d9:d3:67:60:03:2b:87:4c:9e:ff:
                    be:1c:2a:2f:6c:e0:d6:43:f2:b3:47:ca:a5:3c:6c:
                    9e:c8:27:4e:38:50:75:0c:df:b8:fd:af:c1:d5:37:
                    51:40:9d:0f:31:f9:c0:e9:b1:17:f7:02:e2:65:b8:
                    4f:d9:3d:f0:31:03:a7:92:5e:e8:c0:4a:5e:7e:fc:
                    4a:15:a5:38:46:3f:02:69:37:7c:04:14:df:3e:08:
                    a6:cb:f1:d5:c8:2c:c1:4f:dd:7f:01:d3:ea:6c:a4:
                    ca:65:d3:20:50:c0:00:0d:af:a1:4e:b6:73:43:4c:
                    32:7c:08:a7:52:44:4c:78:b6:38:61:44:04:4e:96:
                    3d:5a:c0:a1:cc:51:5e:e5:2d:8e:ca:cf:0d:6a:70:
                    dd:51:8d:cc:12:59:f9:00:2f:c1:5d:87:db:4a:c3:
                    e1:0c:cb:78:fc:f3:15:7a:ff:d7:7a:79:d7:fd:b3:
                    65:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                15:A8:03:8A:10:6A:25:0F:A6:3D:27:1E:58:B2:C7:8C:20:89:5E:07
            X509v3 Authority Key Identifier: 
                keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/FagDihBqJQ-mPSceWLLHjCCJXgc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:34:67:45:eb:e3:80:f6:bd:75:f3:ec:a6:af:23:66:76:f0:
         1e:48:85:86:00:14:7b:b6:e4:9c:3d:c7:63:79:98:68:a4:e6:
         5b:1d:11:88:c0:58:13:ec:b3:27:13:67:a6:df:76:9e:94:f9:
         23:b3:c7:8d:3d:a8:2e:2a:a6:0f:4a:6e:b8:51:65:a1:7d:23:
         68:f5:74:4d:43:95:af:c6:44:1d:27:66:38:c3:29:74:a1:e8:
         71:14:96:9b:22:b1:34:4f:49:61:26:db:7c:74:a1:0f:6f:e1:
         f8:9c:b8:81:2a:3e:ac:32:72:2a:07:1d:44:52:5c:e7:ae:b2:
         29:0e:5b:13:33:19:70:ef:94:eb:7e:e4:18:b4:af:3f:30:a8:
         05:99:09:c5:ad:f1:45:5e:50:28:b6:7f:3c:89:16:87:b5:6c:
         e8:85:e2:ee:4f:0a:2b:38:d9:77:56:8f:d7:5f:ae:35:9f:68:
         7f:00:f2:25:52:df:9c:3c:35:09:44:cd:6d:2b:32:b2:07:e5:
         0e:72:0e:8b:93:2b:49:bb:74:40:59:52:3e:d9:79:2a:1e:bd:
         b4:45:57:79:cf:c7:0a:99:2e:5b:b1:28:9e:45:99:81:56:50:
         dd:a4:0f:4a:23:6d:85:b5:de:d0:53:81:6d:29:7d:1f:57:74:
         2f:60:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 10:30:47 2022 by LibreSSL & rpki-client.