Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/00/a45867-3f5e-454e-aa1c-9e1161b44622/1/_AARFVaCy_sFEoRIWAf3v7nsDEw.roa (download)

Subject key identifier:   FC:00:11:15:56:82:CB:FB:05:12:84:48:58:07:F7:BF:B9:EC:0C:4C 
Authority key identifier: 7E:4C:0E:45:30:7D:F8:C8:EC:4C:8D:4F:F0:A3:24:A3:25:84:9C:8C
asID:                     AS834
Prefixes:
    1: 213.232.238.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/00/a45867-3f5e-454e-aa1c-9e1161b44622/1/_AARFVaCy_sFEoRIWAf3v7nsDEw.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168665 (0x292d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4c0e45307df8c8ec4c8d4ff0a324a325849c8c
        Validity
            Not Before: Sep 21 09:10:37 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=fc0011155682cbfb051284485807f7bfb9ec0c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:fd:88:2a:d4:89:05:75:91:bd:e4:8d:a9:
                    c9:9f:d8:07:70:e2:38:21:23:a7:84:6b:7e:64:df:
                    f6:39:f7:aa:d3:e8:11:d5:81:bc:62:f7:ec:e0:2f:
                    67:19:61:9d:27:4a:27:f4:67:4d:ef:56:c0:14:32:
                    c3:80:ff:4f:92:99:19:fe:8e:0d:bd:ec:4b:26:00:
                    20:51:09:e1:f5:c2:be:43:38:21:de:f4:bc:2b:da:
                    65:46:db:77:9f:6e:02:a2:2c:33:5a:76:1a:07:03:
                    04:8c:3d:e8:3a:0b:86:1c:65:05:7d:d3:6f:e0:f1:
                    d9:73:9f:7b:cc:a4:8d:5a:21:41:74:44:41:83:54:
                    cc:5c:80:bb:04:63:96:04:b8:e4:0a:b7:f4:17:af:
                    da:cd:04:7d:12:67:da:a8:88:ed:06:3f:6b:da:b6:
                    c4:12:d9:c6:b0:f5:d3:33:df:68:82:4c:aa:80:0b:
                    ee:5e:63:e7:2c:1b:f8:4b:87:d8:c2:8e:8c:38:f7:
                    24:a7:65:08:8c:ef:b1:58:88:96:39:c7:a1:f1:25:
                    cc:e3:b8:fa:06:87:62:43:b3:5b:ed:fc:2e:da:bb:
                    48:75:5d:62:57:0a:45:67:63:0e:f6:10:dd:80:ec:
                    33:de:15:d9:d6:1d:7d:5e:58:6c:c5:c9:dd:a3:ad:
                    25:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FC:00:11:15:56:82:CB:FB:05:12:84:48:58:07:F7:BF:B9:EC:0C:4C
            X509v3 Authority Key Identifier: 
                keyid:7E:4C:0E:45:30:7D:F8:C8:EC:4C:8D:4F:F0:A3:24:A3:25:84:9C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkwORTB9-MjsTI1P8KMkoyWEnIw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a45867-3f5e-454e-aa1c-9e1161b44622/1/_AARFVaCy_sFEoRIWAf3v7nsDEw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a45867-3f5e-454e-aa1c-9e1161b44622/1/fkwORTB9-MjsTI1P8KMkoyWEnIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.232.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:20:d2:f1:05:37:c0:7e:1d:34:b8:e0:41:d4:ad:13:28:0f:
         46:b8:17:56:da:16:9a:06:3f:eb:d1:9a:b1:0f:93:e0:00:02:
         ef:80:d2:f6:4a:81:cb:77:b7:2c:be:2e:e6:7a:0e:33:4a:b1:
         2e:d1:b8:3e:3f:62:d4:2a:71:2b:f4:c7:1f:c8:a7:ee:87:32:
         47:52:71:41:26:39:49:ad:e4:d7:b3:b7:d8:da:3f:3b:10:cc:
         dd:80:8e:3c:33:e2:89:f2:c3:ca:5e:01:67:25:b6:2c:8f:29:
         87:b0:4c:57:13:5b:a4:ff:5f:14:c1:44:55:a8:ae:b1:96:fe:
         60:9f:50:b9:f0:45:a2:99:46:85:e8:a2:6a:e3:3a:5e:a4:cd:
         57:a0:8f:98:34:98:bc:03:ad:d4:34:35:6a:f4:b6:f0:ae:35:
         16:37:ab:84:88:20:45:85:e1:2d:00:a4:b2:f9:1f:59:4a:cc:
         e6:b5:9f:dd:f1:0c:67:94:56:e8:e6:c0:41:c8:fb:8e:05:cd:
         b8:d9:1b:03:5f:3b:06:b8:c8:24:68:03:56:6b:88:ba:dc:c6:
         55:82:a4:c1:29:ff:83:09:08:b4:7b:6e:5a:a8:90:d8:ed:39:
         11:54:e1:4a:f3:44:91:f1:74:46:85:26:b3:b0:f9:10:2c:12:
         d4:97:16:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:02:31 2021 by LibreSSL & rpki-client.