Route Origin Authorization
Location: rpki.ripe.net/repository/DEFAULT/ef/fe2f8b-2edd-49f8-aa30-afd3bd80d943/1/iucPUZ2ZdITMtRiYaernKCVMrs0.roa (download)

Subject key identifier:   8A:E7:0F:51:9D:99:74:84:CC:B5:18:98:69:EA:E7:28:25:4C:AE:CD 
Authority key identifier: D4:66:2D:38:DF:2B:64:28:ED:37:BC:DB:91:34:98:DC:24:57:35:81
asID:                     AS26636
Prefixes:
    1: 109.236.56.0/23 (max: 23)
    2: 109.236.58.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/ef/fe2f8b-2edd-49f8-aa30-afd3bd80d943/1/iucPUZ2ZdITMtRiYaernKCVMrs0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10153689 (0x9aeed9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4662d38df2b6428ed37bcdb913498dc24573581
        Validity
            Not Before: Feb 24 16:48:09 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=8ae70f519d997484ccb5189869eae728254caecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:d7:c2:7e:8f:5c:6b:f5:c0:54:04:55:d7:
                    0f:05:7c:9a:e6:b2:de:6d:e5:59:03:b8:fc:ac:e2:
                    b8:3f:fa:22:0a:e7:8a:bd:c6:3c:cf:7e:1b:8d:81:
                    b3:1f:d0:03:c8:43:cd:33:19:f9:85:cb:26:82:e8:
                    b5:0f:c5:fa:f7:71:0a:e2:5c:b7:6d:f6:0e:81:6b:
                    27:ce:c2:2d:d0:9b:25:21:f0:85:a2:d1:6e:78:b0:
                    2e:6f:d1:99:6d:19:ff:d7:0a:75:15:cb:41:42:40:
                    be:16:36:22:7f:ff:d8:11:49:8e:01:15:d3:47:f8:
                    27:0b:0c:3f:21:cf:8a:c7:0f:a3:bd:3e:54:07:42:
                    0b:65:39:22:f6:43:0a:5a:44:85:48:7e:98:30:d7:
                    e1:8d:c4:3e:9f:c7:08:13:d6:fc:aa:f7:fe:ca:11:
                    df:4d:ea:3b:40:63:fa:63:ab:2c:49:54:ee:51:e2:
                    bd:51:64:3b:bf:46:90:27:e1:ec:a1:c2:c6:51:d8:
                    c6:71:4f:db:d4:3d:df:81:ba:1d:c7:6c:8a:d1:69:
                    c1:b1:ce:a5:4f:99:da:78:cc:0d:35:e3:43:b0:0a:
                    a2:52:80:af:c7:fb:02:1c:c7:3c:b0:0c:04:1f:5a:
                    6d:3b:98:d9:1b:61:34:14:bf:10:13:94:2e:89:c5:
                    bf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8A:E7:0F:51:9D:99:74:84:CC:B5:18:98:69:EA:E7:28:25:4C:AE:CD
            X509v3 Authority Key Identifier: 
                keyid:D4:66:2D:38:DF:2B:64:28:ED:37:BC:DB:91:34:98:DC:24:57:35:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GYtON8rZCjtN7zbkTSY3CRXNYE.cer

            Subject Information Access: 
                1.3.6.1.5.5.7.48.11 - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fe2f8b-2edd-49f8-aa30-afd3bd80d943/1/iucPUZ2ZdITMtRiYaernKCVMrs0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fe2f8b-2edd-49f8-aa30-afd3bd80d943/1/1GYtON8rZCjtN7zbkTSY3CRXNYE.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0.0....m.8...m.:
    Signature Algorithm: sha256WithRSAEncryption
         2f:4f:14:c2:28:37:72:01:11:5b:16:19:47:81:30:65:42:b9:
         f9:16:71:63:ce:94:b9:de:11:23:06:51:ae:75:a6:e7:63:a8:
         d3:d4:20:67:f3:78:58:ad:6e:99:34:3a:8f:5a:91:61:de:0f:
         71:c0:c0:d9:47:7c:c6:3f:c3:86:72:d4:be:a7:f3:f0:c0:2f:
         c5:e9:52:92:9e:09:9d:37:c4:53:14:9b:34:90:4f:70:63:2d:
         7b:88:55:e8:a3:50:b1:29:9c:b0:79:e5:d3:40:7f:8a:42:0c:
         39:df:6f:34:ec:0d:16:24:94:45:66:10:65:8a:33:1e:35:16:
         04:67:70:9b:85:05:5c:31:a3:1a:fc:3e:6b:b8:c9:99:58:3a:
         55:38:10:bc:58:a8:ce:c0:8b:b6:96:7c:3f:36:25:04:19:cd:
         8a:c3:db:ba:51:e0:95:70:8e:20:fa:f4:ff:40:2f:ec:f9:e7:
         63:2c:2d:9d:65:93:e5:e4:d7:74:29:88:3f:f5:0a:63:91:6d:
         f8:80:d6:04:48:75:ec:c5:09:07:9c:2f:f0:09:c5:cf:7e:5e:
         20:6f:fd:b2:c3:a9:c3:5c:56:d1:55:f3:ab:51:57:88:a2:64:
         52:e4:44:86:72:80:20:b6:68:8d:34:5a:0a:cb:8a:5f:13:8f:
         0b:e5:66:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:25:43 2021 by LibreSSL & rpki-client.