Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/76/dc504f-473c-4e9f-a87a-5a08c5e97209/1/67qXdxsOsn1yFf3_ulVnft_QIKM.roa (download)

Subject key identifier:   EB:BA:97:77:1B:0E:B2:7D:72:15:FD:FF:BA:55:67:7E:DF:D0:20:A3 
Authority key identifier: 2C:E3:89:45:12:E4:87:05:A5:DB:06:09:D4:FA:C6:75:A7:50:FC:4F
asID:                     AS1239
Prefixes:
    1: 109.234.76.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/76/dc504f-473c-4e9f-a87a-5a08c5e97209/1/67qXdxsOsn1yFf3_ulVnft_QIKM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16788720 (0x1002cf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ce3894512e48705a5db0609d4fac675a750fc4f
        Validity
            Not Before: Jan  1 01:58:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ebba97771b0eb27d7215fdffba55677edfd020a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:96:e2:40:90:aa:b6:28:79:98:e8:8e:1f:
                    63:56:0e:fd:41:f3:d0:4e:d8:30:16:37:f4:04:0c:
                    a7:2e:c4:ef:3e:16:81:b4:d0:da:36:33:44:50:0a:
                    c5:c2:d1:69:88:d2:c9:c3:b0:25:b7:0f:6a:c8:49:
                    d4:58:86:a9:08:d1:1a:bd:d1:d0:92:e5:31:69:c0:
                    ca:79:78:cf:25:65:4c:f2:d2:57:a5:d5:a1:58:a1:
                    cd:33:21:38:a7:fb:eb:6e:e4:6b:6f:68:63:c2:48:
                    8f:45:b4:9f:e8:75:db:97:b1:07:5d:32:fc:93:79:
                    3f:9e:14:07:e4:39:89:23:27:e4:b9:06:3a:4f:17:
                    29:b3:c7:c6:61:95:a7:61:5c:70:e2:4b:6b:43:8d:
                    4b:52:bf:3a:53:50:b4:7f:db:4f:a6:c7:e9:4d:5e:
                    c9:b4:54:e8:7a:37:56:5e:d5:48:8b:67:e0:e5:f0:
                    47:28:dd:7e:61:c3:66:b7:5e:9d:cb:23:3c:66:9d:
                    52:90:14:43:7d:bb:2e:77:fc:7a:62:ea:03:8b:60:
                    05:b4:af:61:d8:7e:db:04:79:a1:db:4f:e2:a7:11:
                    97:ab:76:a7:3d:de:fd:bc:d2:b3:f7:e4:9d:f0:6a:
                    39:3d:70:13:68:ad:85:e3:24:df:3f:c1:3b:15:45:
                    e2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EB:BA:97:77:1B:0E:B2:7D:72:15:FD:FF:BA:55:67:7E:DF:D0:20:A3
            X509v3 Authority Key Identifier: 
                keyid:2C:E3:89:45:12:E4:87:05:A5:DB:06:09:D4:FA:C6:75:A7:50:FC:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOOJRRLkhwWl2wYJ1PrGdadQ_E8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dc504f-473c-4e9f-a87a-5a08c5e97209/1/67qXdxsOsn1yFf3_ulVnft_QIKM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dc504f-473c-4e9f-a87a-5a08c5e97209/1/LOOJRRLkhwWl2wYJ1PrGdadQ_E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.234.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:a7:24:f2:8e:bc:78:d6:80:0d:44:ca:97:97:0f:f3:c0:e9:
         54:b1:94:35:1c:50:1f:a7:4d:68:73:30:ae:c7:54:9a:39:1c:
         db:5c:2c:0d:b9:ab:11:39:26:c5:1e:b1:34:42:5f:0e:a4:15:
         c5:50:52:fc:26:4d:d2:25:07:5e:0e:92:46:61:53:b5:8f:b0:
         b4:76:6d:75:21:bc:bc:a4:c1:ff:a0:37:6c:13:2b:ba:58:b9:
         29:2e:47:a3:a8:93:14:b6:19:6b:49:e1:f5:f8:ba:45:5a:e5:
         69:e6:8f:88:07:0c:41:91:6c:de:5e:5b:40:fa:df:1a:8e:b3:
         1e:36:67:d5:b9:34:5a:ed:47:2d:b6:fc:b4:87:82:55:4e:cb:
         25:a9:73:4b:57:18:01:9c:23:06:b3:fc:ca:14:52:e8:86:df:
         ff:a8:0e:f6:f7:0d:3c:b3:66:99:86:9d:96:3e:82:38:4f:e8:
         68:a7:db:2c:c2:34:35:cc:db:d2:d1:63:7a:fe:0d:68:c1:9b:
         f8:20:35:47:c0:e6:00:38:dd:85:e2:59:f5:aa:2c:8e:a9:5a:
         2d:ea:ad:54:2b:0e:a2:50:a3:8b:e7:1f:5a:aa:b5:75:fd:4e:
         1d:70:50:9a:64:d5:2e:1c:94:9c:48:fd:67:9c:0c:56:66:78:
         e7:66:60:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 12:57:55 2022 by LibreSSL & rpki-client.