Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/P2324ayB3YnBnSBbM42dTcy1Z-Q.roa (download)

Subject key identifier:   3F:6D:F6:E1:AC:81:DD:89:C1:9D:20:5B:33:8D:9D:4D:CC:B5:67:E4 
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
asID:                     AS61317
Prefixes:
    1: 193.218.204.0/24 (max: 24)
    2: 193.218.222.0/24 (max: 24)
    3: 193.219.0.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/P2324ayB3YnBnSBbM42dTcy1Z-Q.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61531366 (0x3aae4e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
        Validity
            Not Before: Jan  1 04:54:05 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3f6df6e1ac81dd89c19d205b338d9d4dccb567e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c5:56:36:6c:3d:4e:1b:83:95:ab:7b:64:5d:
                    86:11:ca:8c:a4:a5:28:2d:73:0d:39:69:87:11:7a:
                    f5:fe:ec:fa:28:e1:89:0d:50:ed:41:ef:5e:da:1f:
                    48:a0:cd:b2:3d:ed:51:c9:3c:82:2f:58:63:ab:61:
                    1b:42:dc:4f:40:af:e2:99:76:42:9f:d4:94:47:92:
                    3a:f7:ab:4f:03:41:d7:10:3c:a9:f5:72:39:82:f8:
                    6a:c2:c2:13:ac:a9:27:2f:57:49:ac:e1:07:e5:cc:
                    f9:3b:b5:4b:6b:89:ae:8c:86:72:fb:8e:1f:1b:0d:
                    51:7d:af:8a:05:f3:03:31:10:62:7a:0c:1f:4f:53:
                    ee:cc:2d:4f:f3:d5:07:e9:79:b4:86:64:ab:2e:a3:
                    06:8a:d8:cc:80:9e:ed:d2:00:8c:e6:28:02:92:22:
                    9c:59:10:f7:f7:8e:06:1f:1a:d3:27:03:61:06:24:
                    c0:a8:0a:7c:79:9f:8b:db:dd:a2:fa:4a:49:d4:07:
                    d9:93:a6:53:64:87:6e:5e:43:57:62:45:26:f0:3e:
                    55:23:cd:e1:91:e8:32:57:5b:e0:25:48:ec:58:fa:
                    5c:93:b9:4a:a5:01:02:42:35:28:47:1b:90:01:ff:
                    16:77:cb:8c:c9:1c:f8:6c:9a:ee:c9:0f:55:c7:a2:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3F:6D:F6:E1:AC:81:DD:89:C1:9D:20:5B:33:8D:9D:4D:CC:B5:67:E4
            X509v3 Authority Key Identifier: 
                keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/P2324ayB3YnBnSBbM42dTcy1Z-Q.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0...................
    Signature Algorithm: sha256WithRSAEncryption
         0f:5c:08:8d:0e:41:10:23:d3:ac:26:e0:a7:27:0c:48:9c:dc:
         cd:d6:bd:6e:15:ed:ff:39:32:a0:f7:95:66:19:85:91:c5:13:
         90:df:f6:e9:36:27:77:fa:69:43:5b:e3:15:3c:b4:99:c7:80:
         4e:f6:ae:27:67:76:46:3c:05:80:85:54:b4:fb:d4:6b:c8:b5:
         71:c8:08:38:f0:2e:16:0f:93:b6:f0:e5:1e:cc:97:28:c5:00:
         f7:2d:8f:41:68:61:82:18:be:f4:f7:63:31:5f:5b:28:7b:32:
         a9:67:3d:f3:39:2f:c9:06:ea:23:fa:74:d5:9c:fa:2a:39:35:
         e0:a5:6f:6f:8b:80:73:f6:9d:a6:ce:1f:57:98:0c:87:ab:63:
         0e:26:ea:26:9f:63:98:d6:4f:ed:c9:8e:40:a8:53:7a:05:c6:
         ea:12:d7:9a:20:16:8c:e2:c3:e3:95:8d:75:d8:35:84:97:e3:
         6c:4b:d4:37:f8:22:9e:f7:03:b6:e5:45:7d:93:db:35:14:7c:
         a4:81:5d:95:7a:97:b9:d7:29:7f:a0:4f:f9:fc:ed:0c:76:ed:
         c2:db:a0:9f:21:1c:6c:d3:89:d9:31:7b:fe:98:5d:2e:bb:5c:
         cf:a6:1b:f9:f1:8f:2d:14:97:e9:83:19:fd:a7:85:30:5a:cf:
         09:89:88:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 15:44:00 2021 by LibreSSL & rpki-client.