Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/07/4d1fd7-712e-4b5c-b1f4-5bf4231dce17/1/j_liD1T4BN5AXztDvVF4Xclc2rA.roa (download)

Subject key identifier:   8F:F9:62:0F:54:F8:04:DE:40:5F:3B:43:BD:51:78:5D:C9:5C:DA:B0 
Authority key identifier: F8:A9:F4:AD:A6:D3:D3:FD:82:0F:66:D7:47:8D:54:B9:8D:4E:2B:1E
asID:                     AS26636
Prefixes:
    1: 193.56.238.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/07/4d1fd7-712e-4b5c-b1f4-5bf4231dce17/1/j_liD1T4BN5AXztDvVF4Xclc2rA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42659381 (0x28aee35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a9f4ada6d3d3fd820f66d7478d54b98d4e2b1e
        Validity
            Not Before: Apr  7 15:40:59 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=8ff9620f54f804de405f3b43bd51785dc95cdab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e0:96:a1:9f:17:50:43:4d:cc:0f:bd:86:d4:
                    5e:73:e3:31:db:c0:79:66:98:5b:54:e0:2c:3e:74:
                    41:f4:57:8e:98:c5:97:c6:5d:59:fe:d9:4a:93:04:
                    12:e5:37:64:f4:84:3c:87:d5:bb:33:08:14:e6:0f:
                    b3:a8:55:98:82:17:43:c1:62:88:71:4a:55:dc:48:
                    a1:60:0e:6e:be:d7:c6:bb:0e:e5:e7:1a:02:fc:0d:
                    3c:d0:85:39:0a:63:4b:f3:fc:d5:aa:76:22:e8:dd:
                    c6:41:ba:2f:6c:4d:27:78:a0:f3:2f:b0:12:f5:f3:
                    06:e7:f2:4a:8d:31:13:b8:a3:f9:f2:7e:bb:e5:23:
                    b8:9f:10:c4:ea:8d:66:6e:be:78:9b:90:dc:d1:87:
                    3b:d5:6d:72:d8:d9:0e:a4:a6:5e:da:0d:16:df:39:
                    94:e0:9d:f0:62:56:d6:39:86:7d:16:5b:8e:5f:e1:
                    5f:0e:a1:5f:0b:1e:b0:12:fe:2d:08:e1:ea:1d:47:
                    16:98:e4:14:37:2c:a1:d0:db:03:08:fd:6e:8b:c7:
                    50:d3:b1:94:2c:7a:7d:25:8a:14:75:8e:70:f9:37:
                    af:36:0e:fa:b7:93:ef:7a:d9:2a:af:0e:a5:4f:21:
                    2b:81:85:34:28:e2:45:bc:39:95:06:f7:e8:fa:ef:
                    04:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8F:F9:62:0F:54:F8:04:DE:40:5F:3B:43:BD:51:78:5D:C9:5C:DA:B0
            X509v3 Authority Key Identifier: 
                keyid:F8:A9:F4:AD:A6:D3:D3:FD:82:0F:66:D7:47:8D:54:B9:8D:4E:2B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kn0rabT0_2CD2bXR41UuY1OKx4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4d1fd7-712e-4b5c-b1f4-5bf4231dce17/1/j_liD1T4BN5AXztDvVF4Xclc2rA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4d1fd7-712e-4b5c-b1f4-5bf4231dce17/1/1-Kn0rabT0_2CD2bXR41UuY1OKx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:4d:a8:92:7a:55:12:42:f4:1b:0b:25:f1:87:0c:c9:c6:61:
         f3:13:5c:3e:4a:39:93:79:12:f0:4e:f5:77:ab:d0:5e:31:00:
         24:6a:7e:a6:c0:9d:37:8b:c4:df:c9:59:fa:80:56:54:23:69:
         f0:74:ae:ef:a5:f8:4a:8f:e3:c9:3b:cc:4b:17:d1:31:d0:38:
         b3:45:a0:7c:ef:d0:50:11:68:51:eb:cb:ad:0a:ef:dd:c8:22:
         d5:01:eb:c0:33:14:70:82:17:8b:24:1f:c5:5f:77:85:fe:bb:
         11:57:91:63:a2:cc:fa:76:21:70:c8:bd:9e:2a:30:0a:37:b4:
         7c:94:67:4f:28:c7:38:02:2c:0f:12:a9:5d:26:a6:17:16:3c:
         89:69:59:3f:a2:ba:14:80:f9:60:ff:6e:98:0b:d0:39:4a:ea:
         68:49:17:71:ed:9f:31:bd:d8:79:19:b0:71:82:f8:f1:5d:f4:
         05:0d:9b:f0:51:c0:8d:51:84:e5:4e:f0:bc:73:e4:7d:28:bb:
         43:59:b8:62:ff:ed:f4:b8:f6:a7:65:f6:0b:d5:de:0d:b1:3c:
         c6:53:21:08:61:c9:f6:6e:fe:86:3c:5d:93:48:1a:cc:f3:34:
         12:3c:cc:17:b2:47:9f:bc:be:11:5c:f1:99:8f:02:c7:bc:ab:
         18:fe:ba:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:04:28 2021 by LibreSSL & rpki-client.