Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/yH_9FfPgMJKBnp1gOeTvMDsOkSw.roa (download)

Subject key identifier:   C8:7F:FD:15:F3:E0:30:92:81:9E:9D:60:39:E4:EF:30:3B:0E:91:2C 
Authority key identifier: FF:79:97:EF:7F:7F:1E:1D:A1:0E:5C:1D:98:EA:31:47:4B:6D:BB:11
asID:                     AS1239
Prefixes:
    1: 193.163.127.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/yH_9FfPgMJKBnp1gOeTvMDsOkSw.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36160513 (0x227c401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff7997ef7f7f1e1da10e5c1d98ea31474b6dbb11
        Validity
            Not Before: Jan  1 06:52:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c87ffd15f3e03092819e9d6039e4ef303b0e912c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ec:2b:7f:2e:e3:00:2c:8e:bd:7b:42:01:20:
                    95:69:dd:8c:09:b3:ec:c6:06:c2:69:e0:1b:42:b2:
                    45:9e:e5:9e:ca:af:1e:6a:c2:48:e3:15:c1:03:28:
                    30:75:86:c6:1a:22:b5:30:89:b9:6a:1b:12:4d:ee:
                    27:a8:cb:bc:72:e3:24:b8:bb:ca:c9:c5:fd:cf:96:
                    0c:21:24:33:68:6e:74:7c:14:b4:83:2f:2c:8e:96:
                    34:fa:ba:d1:e8:e9:47:8b:b2:86:21:31:99:2c:24:
                    82:9d:0a:de:80:2e:45:f2:d1:b1:ad:bd:a4:38:b6:
                    ac:74:db:54:36:33:67:c8:c4:02:bf:c3:45:3d:d1:
                    fb:e2:53:4d:e2:f5:70:56:1f:8b:88:56:78:1d:71:
                    1b:08:ef:17:55:cf:5e:52:9c:08:b3:d6:57:89:cc:
                    6c:8e:2a:ae:c1:10:69:7e:cc:6e:2b:bb:7d:e4:5a:
                    47:9d:7f:32:46:3f:2c:12:72:55:1d:e6:56:d0:b7:
                    1a:92:72:62:31:ac:3a:b1:72:89:5d:de:b5:9f:ee:
                    0e:f8:e2:54:62:e2:b6:66:c6:7d:f3:71:05:78:1b:
                    50:ea:4a:92:cb:8a:40:b5:af:10:cb:37:0b:f8:e6:
                    9c:3a:ce:e2:1f:d0:ad:1a:99:9b:33:32:ab:7e:e9:
                    cf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C8:7F:FD:15:F3:E0:30:92:81:9E:9D:60:39:E4:EF:30:3B:0E:91:2C
            X509v3 Authority Key Identifier: 
                keyid:FF:79:97:EF:7F:7F:1E:1D:A1:0E:5C:1D:98:EA:31:47:4B:6D:BB:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3mX739_Hh2hDlwdmOoxR0ttuxE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/yH_9FfPgMJKBnp1gOeTvMDsOkSw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/_3mX739_Hh2hDlwdmOoxR0ttuxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:41:d1:cd:d2:40:6d:2d:d2:ca:4f:63:ce:d2:f1:92:db:b6:
         96:81:2b:02:95:af:46:f3:80:88:7d:21:7a:7b:72:ad:8c:2f:
         2d:fa:f2:43:44:6d:9f:be:73:98:ab:8e:f9:4f:e8:5b:5c:cc:
         97:96:75:13:93:c3:16:42:43:d5:d0:3f:53:d4:a1:59:61:5a:
         a3:5c:3b:80:81:22:e1:e3:e7:44:41:cc:e0:32:ac:e1:a5:d4:
         30:5d:7b:45:d0:96:82:62:b7:c0:2e:fd:8d:23:0a:69:73:c7:
         b5:0c:7d:dc:4d:4e:a8:a3:51:af:42:36:2e:5a:0c:7c:1d:5f:
         f5:c1:e6:7b:bd:3a:aa:00:6c:2f:6f:8a:82:bf:df:9d:45:6a:
         fb:bd:ce:7b:d0:11:4c:82:ff:bc:24:f2:96:b9:87:41:a1:5a:
         04:6b:b3:57:35:b8:fa:72:6b:aa:da:63:fa:df:ff:bd:7b:36:
         1b:c8:61:2b:9b:d8:6c:b5:c9:9b:5e:88:de:91:27:d2:8b:88:
         d3:9c:04:22:35:e8:09:8f:11:7b:07:7f:e9:70:45:d9:41:d6:
         24:48:e5:6a:d0:90:ec:04:c0:cb:36:88:90:1c:61:c4:63:bb:
         75:da:95:dd:10:72:84:42:a1:43:a5:7d:17:e3:15:17:bd:a8:
         47:c9:ba:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 13:07:53 2022 by LibreSSL & rpki-client.