Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/tutEQeDWvoX79_I7fNcwokG6YCk.roa (download)

Subject key identifier:   B6:EB:44:41:E0:D6:BE:85:FB:F7:F2:3B:7C:D7:30:A2:41:BA:60:29 
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
asID:                     AS398108
Prefixes:
    1: 92.204.128.0/20 (max: 20)
    2: 92.204.144.0/21 (max: 21)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/tutEQeDWvoX79_I7fNcwokG6YCk.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 990493813 (0x3b09bc75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
        Validity
            Not Before: Apr 27 14:57:17 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b6eb4441e0d6be85fbf7f23b7cd730a241ba6029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:c7:8d:e9:89:82:2c:dd:ba:e9:16:91:47:
                    4f:84:41:27:59:08:e6:66:33:de:bb:cb:2f:06:65:
                    88:cf:ca:e7:20:44:61:e2:ac:d8:63:c0:fa:a0:09:
                    73:f2:47:a9:d6:bb:e0:a0:ca:f7:cc:e1:6a:46:15:
                    52:15:05:ec:52:65:d6:92:f6:b6:29:e7:df:41:13:
                    19:35:8d:84:34:a8:49:12:9c:72:e7:7f:d8:b9:74:
                    ad:1e:d2:3b:e2:b2:62:9a:a0:33:6f:e6:cc:0c:21:
                    43:3c:c4:fa:eb:ab:b1:0c:62:ba:37:29:b4:5a:6b:
                    31:20:bd:0d:ea:ed:8e:e3:03:1e:66:e7:98:87:5e:
                    e0:2c:8d:3c:63:8b:71:82:27:f8:25:62:7d:f6:d7:
                    4b:d4:69:ab:99:d4:62:a0:0e:05:93:46:62:ee:32:
                    aa:cb:33:bf:57:2b:8c:96:de:fa:49:bb:41:1f:78:
                    5c:ee:f8:9d:0b:11:93:16:11:0f:99:bf:87:1a:79:
                    b6:0c:c1:4c:35:73:60:9d:35:6f:3a:36:57:d4:c1:
                    29:68:94:0a:de:87:f4:f5:94:6b:c0:5b:d6:0d:90:
                    13:e4:50:22:3c:36:02:05:19:2f:0f:1e:ec:e6:6b:
                    cc:56:ea:3c:44:da:5d:5b:ab:f1:51:64:45:1b:a6:
                    60:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B6:EB:44:41:E0:D6:BE:85:FB:F7:F2:3B:7C:D7:30:A2:41:BA:60:29
            X509v3 Authority Key Identifier: 
                keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/tutEQeDWvoX79_I7fNcwokG6YCk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.204.128.0-92.204.151.255

    Signature Algorithm: sha256WithRSAEncryption
         7b:10:6a:54:47:ba:f4:78:09:7a:e3:aa:86:06:40:8f:4e:63:
         1e:e0:a9:17:82:38:8c:43:63:dc:ed:bf:5c:42:58:1c:11:26:
         e9:20:45:78:f1:de:54:0b:ff:5a:fe:6c:4c:18:51:3e:1a:16:
         a3:57:5b:f0:46:97:d6:19:4d:8b:cc:ca:7f:a4:fd:8d:92:c9:
         c2:38:28:1d:39:18:51:98:7d:87:74:db:03:82:9f:93:d6:b5:
         4b:71:13:37:5f:42:a2:2b:97:68:73:27:92:f1:70:de:69:71:
         64:ed:e1:e7:65:06:b1:3f:fa:ab:f7:0a:00:1e:a1:78:60:54:
         73:12:0a:ae:4b:cc:49:58:79:94:bb:74:17:1a:5b:30:b4:f7:
         20:68:e0:82:6b:77:f1:9f:7f:1b:36:80:af:68:60:7f:e1:f1:
         0a:66:9e:f9:3b:42:c7:61:ea:4c:e0:12:46:f7:ca:cc:5b:b9:
         31:57:c5:69:8f:44:1c:12:9a:38:ad:24:f6:e8:a1:d8:25:95:
         ea:38:c2:d3:b9:20:c5:1c:64:bc:f0:ea:c1:3c:aa:ec:ee:ca:
         77:c4:0d:87:38:05:7a:b8:81:68:a9:de:d6:45:1a:f8:f5:b2:
         ea:52:12:96:79:44:10:bd:92:fa:83:6d:10:e1:ef:0f:6a:b7:
         de:9f:58:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:22:36 2021 by LibreSSL & rpki-client.