Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/ff/c2cc64-2bb5-4ef8-9e21-f2ba24eff25d/1/ZZ2EmYWkAwTk7h2ZglsRMw2pG80.roa (download)

Subject key identifier:   65:9D:84:99:85:A4:03:04:E4:EE:1D:99:82:5B:11:33:0D:A9:1B:CD 
Authority key identifier: 3C:AB:86:F6:F9:D9:3A:C3:54:A6:6E:23:44:4C:62:77:20:14:BE:DC
asID:                     AS174
Prefixes:
    1: 212.102.102.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/ff/c2cc64-2bb5-4ef8-9e21-f2ba24eff25d/1/ZZ2EmYWkAwTk7h2ZglsRMw2pG80.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30195541 (0x1ccbf55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cab86f6f9d93ac354a66e23444c62772014bedc
        Validity
            Not Before: Jan  1 07:39:23 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=659d849985a40304e4ee1d99825b11330da91bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f6:77:08:54:69:b8:be:9f:3f:a7:a3:f4:9d:
                    50:df:e8:35:9d:b5:fc:f6:64:37:e1:47:ba:b0:c9:
                    bc:9a:59:2a:69:66:bd:50:ba:be:ea:58:25:40:43:
                    ff:cb:dd:6d:1e:99:d1:48:d3:93:ee:48:51:a7:18:
                    46:25:8e:29:73:78:6a:aa:d4:a2:29:b7:a1:07:05:
                    30:ca:99:5d:8f:ef:3c:9b:ff:74:28:0f:19:d9:08:
                    60:5a:d4:4f:0a:41:dc:57:5e:b6:d3:9e:53:1e:e6:
                    69:e8:04:07:33:79:28:6a:fa:47:7c:5a:90:ee:27:
                    d4:f2:33:97:bf:8e:10:76:9f:47:8b:eb:47:f8:9a:
                    2d:9d:37:4c:dd:13:dc:0a:47:68:2a:d6:d1:e6:31:
                    5c:20:7d:42:d3:ef:77:ca:ac:b0:6b:08:d4:91:3d:
                    ec:3c:11:cb:ef:23:96:6b:d8:67:cb:55:df:d3:b2:
                    99:69:67:11:95:1a:d2:2e:da:fd:ec:c4:bf:5c:30:
                    fc:c4:a3:e1:7a:3f:d8:68:f7:da:d2:45:93:15:d2:
                    02:0b:16:90:e5:92:cf:71:07:20:0d:e9:86:e5:dc:
                    3b:e0:47:b5:37:24:21:a8:a3:94:45:fe:e7:e0:e6:
                    39:ff:5e:64:98:2e:52:fd:47:7b:29:c6:da:8b:28:
                    d6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                65:9D:84:99:85:A4:03:04:E4:EE:1D:99:82:5B:11:33:0D:A9:1B:CD
            X509v3 Authority Key Identifier: 
                keyid:3C:AB:86:F6:F9:D9:3A:C3:54:A6:6E:23:44:4C:62:77:20:14:BE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKuG9vnZOsNUpm4jRExidyAUvtw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c2cc64-2bb5-4ef8-9e21-f2ba24eff25d/1/ZZ2EmYWkAwTk7h2ZglsRMw2pG80.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c2cc64-2bb5-4ef8-9e21-f2ba24eff25d/1/PKuG9vnZOsNUpm4jRExidyAUvtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.102.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:1e:11:51:b4:6a:ef:83:a1:ae:f0:54:57:94:ef:45:47:2b:
         26:bd:4c:bf:c9:e5:05:f6:bc:ce:84:2d:23:be:16:c4:de:64:
         9c:3e:7c:56:ce:a8:11:67:1a:b8:e8:af:9e:f0:fe:a4:c9:01:
         75:2e:8f:56:2c:74:1b:39:71:26:f5:23:e4:cc:4d:75:f3:9c:
         06:7b:f0:43:fc:4b:4a:22:60:21:61:36:63:c5:27:63:e7:a1:
         50:e9:bb:2d:b9:19:b8:1e:79:69:36:37:3d:57:87:52:a7:df:
         a9:e4:7d:36:46:15:64:8d:51:b7:34:cd:02:92:fd:a5:11:89:
         33:63:3c:22:d1:1d:d5:79:5d:41:eb:5e:dc:6a:1a:8f:a6:6d:
         ad:d9:72:c1:17:20:97:05:56:ef:09:4e:5f:89:0b:64:60:ce:
         69:28:1d:65:df:a4:b6:37:10:21:f9:19:97:2a:e1:d3:f4:c8:
         c0:04:55:00:87:f5:ef:8b:4c:86:8f:7d:44:1d:a0:9f:03:57:
         c4:52:99:6e:0f:0b:7e:b6:eb:5e:26:7d:24:77:f3:df:4b:c2:
         9e:ed:da:ff:55:75:72:bd:aa:11:5f:f8:10:68:72:c7:6b:8a:
         40:ca:5a:48:75:69:01:ff:3d:ff:25:3e:50:3a:9c:a9:2f:bb:
         40:62:0c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 12:16:53 2021 by LibreSSL & rpki-client.