Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/zvRWWZJOSpvNkj5Vh4L7z1fuoDQ.roa (download)

Subject key identifier:   CE:F4:56:59:92:4E:4A:9B:CD:92:3E:55:87:82:FB:CF:57:EE:A0:34 
Authority key identifier: FB:8D:C7:AE:55:E8:16:4A:71:EA:8C:5D:B3:C2:8F:FC:90:ED:F9:C9
asID:                     AS1239
Prefixes:
    1: 193.38.154.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/zvRWWZJOSpvNkj5Vh4L7z1fuoDQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20153137 (0x1338331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb8dc7ae55e8164a71ea8c5db3c28ffc90edf9c9
        Validity
            Not Before: Jan  1 02:58:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cef45659924e4a9bcd923e558782fbcf57eea034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e3:e9:9d:65:44:db:3c:85:3d:ad:a5:7c:98:
                    ed:34:47:91:b3:b3:78:d3:30:26:ed:69:d9:ce:7e:
                    3e:bd:bf:3b:5a:1a:89:35:3a:72:4d:f9:85:8d:06:
                    14:f2:90:70:b5:cf:f3:26:c9:54:cd:d7:dd:ec:76:
                    95:1f:41:60:6e:b5:a0:15:29:bb:aa:1b:5d:44:19:
                    ef:af:76:a2:2f:de:89:4c:58:e0:fb:64:0e:55:ac:
                    87:ed:bc:d3:6f:87:ce:95:bc:a3:7f:4a:44:52:9f:
                    97:06:eb:25:1c:9a:33:a4:45:1e:f3:86:9d:89:1c:
                    42:ec:97:a7:86:14:7d:3e:51:78:a8:8b:f7:e9:63:
                    9c:76:08:6e:8f:af:46:62:a1:04:09:72:c5:d5:17:
                    f3:2b:86:c2:07:aa:65:e4:71:07:8c:d4:aa:50:1e:
                    37:5b:c6:3a:0a:e8:d7:58:11:3d:aa:60:86:60:16:
                    38:b3:bc:9a:27:65:c4:37:36:01:fd:27:24:74:7a:
                    54:a0:31:5e:cb:fa:c3:9f:00:cf:5d:15:7e:0c:d3:
                    0b:61:ea:33:cb:ec:a3:e9:4b:1a:79:b8:a0:6d:41:
                    f3:22:af:b5:3b:a3:12:38:b8:6f:06:32:88:1d:56:
                    8d:6d:d1:98:9f:61:be:0e:48:c3:c0:ee:ef:cc:81:
                    8d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CE:F4:56:59:92:4E:4A:9B:CD:92:3E:55:87:82:FB:CF:57:EE:A0:34
            X509v3 Authority Key Identifier: 
                keyid:FB:8D:C7:AE:55:E8:16:4A:71:EA:8C:5D:B3:C2:8F:FC:90:ED:F9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-43HrlXoFkpx6oxds8KP_JDt-ck.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/zvRWWZJOSpvNkj5Vh4L7z1fuoDQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/1-43HrlXoFkpx6oxds8KP_JDt-ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:d9:3c:28:17:b5:4a:b9:b0:7f:38:0b:5b:3f:74:25:94:15:
         0a:27:88:f4:c9:21:0d:d2:26:96:ab:af:3d:77:0d:55:e8:49:
         9c:6a:d9:b9:c4:36:e3:68:31:d5:19:8b:a7:60:f2:e0:13:c4:
         ad:34:ec:da:d1:52:dd:eb:89:1c:2c:5d:6b:49:da:8a:c2:df:
         62:78:59:fe:62:ed:a8:f7:4a:a9:33:0a:91:5b:c5:5c:3e:64:
         15:aa:52:5a:05:98:ee:ec:b1:03:32:65:19:4a:d4:0f:48:69:
         7b:62:aa:16:60:36:19:a0:83:f7:02:d0:28:9c:2a:34:19:93:
         28:f4:5a:46:30:22:26:36:52:31:7e:05:bf:95:b5:89:d3:df:
         c5:04:11:94:ba:92:32:80:3d:7a:fe:fa:af:2f:13:2b:27:ab:
         07:ac:01:44:4e:c1:ec:18:f6:00:36:da:85:7c:92:a8:a6:a7:
         88:33:f2:ac:55:4e:f3:11:7a:ca:2f:94:2c:79:61:66:c4:5a:
         af:a0:3d:25:26:fa:c3:f6:3b:06:90:f0:49:c7:df:6b:c8:77:
         85:53:92:36:3a:43:5d:7a:cd:ab:73:5a:1f:ae:30:46:a7:17:
         da:32:40:6a:6a:e7:bd:24:69:f7:f2:16:20:74:5b:c7:bf:9a:
         5a:c8:85:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 13:31:02 2022 by LibreSSL & rpki-client.