Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/_S6QNscWuLXhBc-P7TJMtJIMo94.roa (download)

Subject key identifier:   FD:2E:90:36:C7:16:B8:B5:E1:05:CF:8F:ED:32:4C:B4:92:0C:A3:DE 
Authority key identifier: 02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90
asID:                     AS834
Prefixes:
    1: 188.64.142.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/_S6QNscWuLXhBc-P7TJMtJIMo94.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31255 (0x7a17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e2b228b50cdc90ee498e51bfc915997ca6c590
        Validity
            Not Before: Sep 13 11:47:22 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=fd2e9036c716b8b5e105cf8fed324cb4920ca3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:75:92:bc:de:ac:7a:45:6a:42:5c:2c:65:
                    dc:81:a2:05:7c:81:57:c3:3c:3e:b8:56:82:29:a2:
                    2d:de:55:60:a5:67:b0:ee:b9:69:8c:6a:6c:59:bd:
                    f6:da:16:0b:e4:04:1e:54:b4:41:db:f2:20:9f:27:
                    c9:6a:b6:70:96:50:81:d2:06:cc:c8:6b:80:d2:53:
                    3b:51:10:83:96:d9:3b:28:4c:8c:94:40:14:4e:bc:
                    a9:2d:a6:71:99:56:7f:80:34:2b:35:5f:a5:02:f9:
                    dc:e8:fe:fc:21:f1:b8:d2:63:f4:66:1a:f5:80:d9:
                    13:c5:7c:41:a5:7a:88:4d:6a:2e:c3:23:f0:5d:05:
                    40:c5:cc:f0:fa:d0:73:ab:c8:60:a5:cb:8e:35:51:
                    da:b1:76:ad:e5:dd:24:e3:c8:c7:7b:fa:36:fb:c1:
                    b1:9b:b0:79:69:0f:88:d6:d5:b8:f5:9c:91:3d:c7:
                    f0:e5:ff:1b:36:05:c1:67:55:d0:9b:81:ec:e7:db:
                    68:99:f5:19:ac:0f:41:79:51:b0:50:2e:78:4c:d2:
                    05:d4:34:b6:52:1e:f8:ec:4d:79:a6:27:42:48:22:
                    74:c5:6b:7c:9a:20:8e:a5:a1:77:4b:3c:ee:65:e9:
                    33:55:1b:57:b7:f2:0c:2a:02:a0:a1:c4:1f:e0:52:
                    61:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FD:2E:90:36:C7:16:B8:B5:E1:05:CF:8F:ED:32:4C:B4:92:0C:A3:DE
            X509v3 Authority Key Identifier: 
                keyid:02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/_S6QNscWuLXhBc-P7TJMtJIMo94.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/AuKyKLUM3JDuSY5Rv8kVmXymxZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:b7:10:c7:1f:ef:e8:80:65:b9:6c:57:7d:2f:5f:9a:e1:db:
         42:f0:31:b7:57:3e:f2:41:9a:8c:24:98:8a:be:a7:d8:d7:17:
         21:2b:1e:20:6b:46:cf:6f:01:f6:0c:d8:ae:0a:53:93:c1:c4:
         25:a6:85:91:64:03:10:a4:5b:7e:fe:38:3f:ff:f4:58:1a:08:
         45:bd:8e:44:04:f6:d8:f9:f3:65:06:9c:27:bc:72:4f:02:9d:
         32:fe:52:70:f2:35:e2:0f:22:34:b8:d7:79:1f:8c:ca:a4:b3:
         6f:65:43:43:99:c0:26:96:1a:4b:de:ac:39:a6:8a:d0:de:ab:
         d6:92:f1:89:d9:16:c2:29:6f:28:44:63:e2:a5:16:89:97:ae:
         96:5e:93:66:a7:4c:9d:0e:7d:ea:7f:09:b5:ae:b3:4c:df:68:
         b7:67:51:04:00:06:17:b3:7b:3c:90:d5:0f:93:c8:b5:68:72:
         37:01:d3:5b:05:9d:35:65:5b:52:96:a8:11:36:72:32:01:9d:
         f6:e7:f0:2a:c3:82:94:03:60:91:aa:a1:2d:b8:49:e6:0d:5b:
         80:af:ed:02:3e:fd:0c:0f:76:d9:ab:f8:4c:e0:23:c2:2d:ef:
         94:43:68:60:ea:06:0c:ea:14:f1:e5:54:2b:f1:3a:1d:5c:ad:
         20:b2:d1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:08:12 2021 by LibreSSL & rpki-client.