Route Origin Authorization
Location: rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/iNlSAMYjxx9P7d6BoJ899Gls6jI.roa (download)

Subject key identifier:   88:D9:52:00:C6:23:C7:1F:4F:ED:DE:81:A0:9F:3D:F4:69:6C:EA:32 
Authority key identifier: 50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23
asID:                     AS133846
Prefixes:
    1: 2.56.10.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/iNlSAMYjxx9P7d6BoJ899Gls6jI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110606546 (0x697b8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
        Validity
            Not Before: Jan  1 02:14:52 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=88d95200c623c71f4fedde81a09f3df4696cea32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:80:25:3e:01:da:05:e6:18:4b:55:54:51:c0:
                    0c:fc:1f:f1:f4:49:fd:d4:df:4b:54:d6:ff:74:c4:
                    76:82:61:c6:c6:fd:8b:08:8f:42:7f:71:3c:6d:89:
                    27:e4:67:e5:09:53:4b:83:77:0e:c4:cd:0e:b1:09:
                    b0:59:55:ff:21:12:9f:f1:2c:42:88:f1:7b:97:ff:
                    79:03:5c:7a:cf:92:59:cb:98:4f:68:f4:23:5f:42:
                    e5:23:94:a5:fc:50:bf:56:bc:f3:c9:6a:93:3c:1d:
                    48:0d:26:8a:99:08:e0:14:79:5f:98:68:f5:27:ea:
                    19:1c:6e:da:1c:d8:52:b9:71:6f:60:d6:38:5e:ce:
                    6d:0a:96:14:c1:47:13:c1:0d:0e:a0:5c:f3:04:b1:
                    a7:d9:31:1f:b0:46:14:87:25:49:1c:8d:be:fa:87:
                    65:89:69:40:70:93:e3:12:0e:f1:5e:3d:0d:2f:dc:
                    78:2b:68:3a:00:d2:ee:a0:c5:55:47:29:0f:3e:be:
                    fc:45:70:7c:61:15:80:f1:59:d1:ec:e5:89:45:1e:
                    46:79:63:5e:e8:93:76:47:e3:91:48:60:d0:5c:89:
                    72:34:90:a4:1e:26:75:f1:ae:60:88:b1:a4:52:78:
                    c7:8f:f8:e4:94:7d:6f:72:9e:c5:00:95:11:b8:50:
                    b7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                88:D9:52:00:C6:23:C7:1F:4F:ED:DE:81:A0:9F:3D:F4:69:6C:EA:32
            X509v3 Authority Key Identifier: 
                keyid:50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer

            Subject Information Access: 
                1.3.6.1.5.5.7.48.11 - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/iNlSAMYjxx9P7d6BoJ899Gls6jI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ULkKXhWLoJCP3IPMQkP-QMbatCM.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0.....8

    Signature Algorithm: sha256WithRSAEncryption
         79:48:0e:3b:07:8d:8f:e4:6b:18:c1:f9:df:9b:ce:b8:3b:52:
         75:06:53:61:ba:13:94:18:56:c7:c4:27:f2:01:2e:8f:30:34:
         da:2c:7d:00:ea:54:4f:b0:7f:3a:36:fb:49:77:9b:c1:c9:bb:
         5e:e0:c2:b5:94:9f:b1:09:23:df:1b:9b:52:17:85:d7:3b:fa:
         6c:f0:72:19:e7:0c:28:e2:06:c3:dd:72:9b:ad:08:a8:a9:29:
         34:d4:33:78:26:8a:fe:35:96:b6:da:cf:d8:8f:2f:c4:92:94:
         96:6b:df:52:9f:a1:f9:09:e0:be:2e:e2:88:ac:15:5c:72:c1:
         13:ed:0d:23:2e:1e:75:5d:b8:24:21:d2:69:14:20:0c:a2:f8:
         3a:ac:d8:ef:79:c5:8d:29:04:19:96:6f:f9:18:46:de:e1:96:
         f3:f4:5b:05:7c:6a:cc:7d:77:90:9c:2e:8c:9e:b4:65:34:93:
         cf:7a:32:6d:9a:92:f3:3a:0c:fb:d4:65:b6:e8:b0:7c:d9:22:
         d3:3f:ba:98:66:26:9f:74:0b:fb:1e:f3:75:2b:05:99:e3:e3:
         74:4f:c1:e7:7e:c1:ab:73:56:28:2f:39:02:9b:f3:b3:b8:f7:
         b8:5f:e6:08:c4:0b:4e:d1:05:6e:ad:f6:34:3d:4e:f6:b4:7f:
         15:a5:75:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----