Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/BwQyMbHI7PwnmSubURPn2m4o7oc.roa (download)

Subject key identifier:   07:04:32:31:B1:C8:EC:FC:27:99:2B:9B:51:13:E7:DA:6E:28:EE:87 
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
asID:                     AS397423
Prefixes:
    1: 78.142.218.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/BwQyMbHI7PwnmSubURPn2m4o7oc.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34252524 (0x20aa6ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
        Validity
            Not Before: Jul 25 04:49:38 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=07043231b1c8ecfc27992b9b5113e7da6e28ee87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:0c:74:79:2e:76:bc:38:b6:46:0c:0e:c1:
                    42:b1:7c:c9:01:ef:f0:55:05:1f:16:0a:d8:b1:8e:
                    b7:da:36:ff:f8:59:5d:18:e8:e4:a9:b7:c5:d7:ba:
                    35:3c:18:cf:d8:d7:91:6b:30:f2:d8:18:23:cb:d3:
                    be:1f:25:ea:70:d8:78:2c:eb:85:40:61:de:bd:90:
                    ec:c6:dc:35:4b:85:b4:5b:a2:ce:9d:ef:25:5f:30:
                    5e:cf:e2:08:ed:aa:88:8e:07:0e:a9:9e:be:7f:fd:
                    ad:73:f1:0d:24:6a:cd:3f:cd:87:06:7b:5c:91:7b:
                    c5:8b:6f:a2:c4:45:be:a9:bd:f6:05:6e:3b:aa:8f:
                    48:67:c4:64:b0:af:fd:27:24:74:c0:81:ce:2e:7e:
                    f8:1f:ff:19:d5:9b:fe:a3:0c:70:e8:44:1a:9f:73:
                    75:6c:9c:e7:29:dd:ad:41:99:6d:69:f3:96:c2:23:
                    8d:d2:3c:ef:2e:8a:a8:20:0c:07:54:3d:e9:fd:e1:
                    29:5d:a1:8a:c8:31:e7:53:02:d7:d7:33:60:86:11:
                    5e:44:a3:15:31:3c:2a:d5:d3:b6:b7:56:d0:75:a9:
                    ae:e1:74:57:a4:04:4b:fd:2c:c4:8b:62:08:2a:32:
                    88:70:52:16:de:95:2d:72:8e:09:c9:90:7d:eb:da:
                    fb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                07:04:32:31:B1:C8:EC:FC:27:99:2B:9B:51:13:E7:DA:6E:28:EE:87
            X509v3 Authority Key Identifier: 
                keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/BwQyMbHI7PwnmSubURPn2m4o7oc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.142.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:d6:ca:ab:fd:1f:8b:9f:cc:06:bd:48:35:8e:84:0a:ed:cc:
         2f:da:56:71:24:4d:65:e1:90:4e:ff:0c:47:00:6c:57:6a:ed:
         be:b5:ef:eb:26:80:e8:6a:9a:cc:71:ac:25:7b:34:18:ad:aa:
         df:60:b7:01:1b:9e:0b:c9:a8:9c:89:fa:c5:eb:74:7c:d2:ff:
         4b:fe:c3:93:70:e8:51:c6:fc:a0:8d:47:d0:80:d2:29:26:e8:
         cb:59:65:06:d1:ed:11:51:9c:65:f3:74:03:19:7e:89:12:cc:
         23:9c:eb:4a:80:a7:48:e5:b2:4e:5c:33:42:62:30:d4:58:fd:
         19:b9:6a:13:da:cc:f3:dc:90:f2:6a:f2:b4:51:6f:56:07:7e:
         3e:16:10:90:9b:c3:ad:7d:3b:41:11:e5:68:de:9c:f9:4b:cc:
         76:77:ce:a1:2f:92:94:61:d3:ec:27:5d:3e:d3:c6:80:2e:18:
         19:ff:82:47:ce:42:06:ff:cc:43:3b:90:d9:99:02:ce:32:4d:
         fe:58:1f:89:d6:16:b6:f7:a4:b9:e0:d1:62:b8:7d:1d:6f:d5:
         28:18:12:06:d9:9e:a6:a3:a7:24:8c:b8:a6:8a:87:87:94:75:
         90:b8:17:ad:65:2e:2a:39:0b:e0:9b:a3:80:bc:36:32:75:bc:
         8f:a5:df:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 17 14:21:52 2021 by LibreSSL & rpki-client.