Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/jDkCBQ8yLdZEKNxNhnCFnTaotDM.roa (download)

Subject key identifier:   8C:39:02:05:0F:32:2D:D6:44:28:DC:4D:86:70:85:9D:36:A8:B4:33 
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
asID:                     AS398712
Prefixes:
    1: 94.131.64.0/20 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/jDkCBQ8yLdZEKNxNhnCFnTaotDM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19785713 (0x12de7f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
        Validity
            Not Before: Sep 13 17:13:37 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=8c3902050f322dd64428dc4d8670859d36a8b433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f3:79:2d:66:a4:c7:89:55:42:3a:3e:89:15:
                    9b:ca:f1:18:dc:f7:8a:e7:e3:93:68:3d:87:33:79:
                    e2:0a:b6:66:6f:8b:37:8e:9f:cb:9b:66:0b:bd:db:
                    44:15:40:df:16:98:3b:f8:cc:c1:fa:92:bb:43:2f:
                    4b:14:76:65:55:9e:a0:99:d9:a6:fd:cd:f7:6b:d0:
                    a9:de:b5:18:24:44:7c:1d:0b:93:81:5f:92:53:f3:
                    20:d4:ae:99:1b:7d:87:03:85:67:67:1f:0f:8a:09:
                    28:dd:c4:e7:ed:db:5f:e6:37:46:9e:f3:8e:bb:46:
                    11:63:51:b8:4d:74:ee:fe:48:b4:95:66:43:87:9a:
                    9c:d0:98:01:30:0f:59:28:49:11:f6:b9:7e:18:1c:
                    93:b6:2f:a1:46:36:81:2c:b4:a6:cc:ff:76:83:47:
                    ed:31:dd:c7:b3:a6:24:0e:1e:2e:94:29:49:cb:eb:
                    30:2c:be:fa:59:5e:94:33:09:67:2d:08:1a:84:a4:
                    3a:60:44:f5:70:5b:b4:64:93:cc:e5:45:c1:c3:03:
                    87:dc:af:ee:3a:ec:40:88:36:8b:82:54:16:4f:03:
                    91:5b:e0:d9:ad:3a:c6:88:ea:ef:f0:40:14:7c:30:
                    f7:08:ce:c7:29:4d:0d:99:5a:fa:c9:66:ff:88:e9:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8C:39:02:05:0F:32:2D:D6:44:28:DC:4D:86:70:85:9D:36:A8:B4:33
            X509v3 Authority Key Identifier: 
                keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/jDkCBQ8yLdZEKNxNhnCFnTaotDM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.131.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:e9:1a:64:5a:60:50:be:cd:4f:f2:81:f0:70:af:50:0d:e6:
         2b:a8:e3:09:ce:06:61:f4:8d:06:4d:73:61:28:aa:99:de:7f:
         69:4c:c8:93:c3:aa:e7:e9:e3:7f:f5:92:ea:29:3c:48:38:7c:
         9f:a6:fb:43:64:4c:83:b0:18:f4:32:8a:f9:d8:94:0a:e8:8b:
         72:f7:70:03:ef:a1:8b:e7:d2:cd:4d:2c:e0:ad:b7:1b:74:03:
         5b:46:21:af:e3:3b:51:40:a5:0f:d2:89:ef:0f:a5:1e:96:c2:
         b0:3e:44:39:5a:6e:c8:74:d1:09:5d:bf:19:e7:bd:dc:1b:5a:
         27:10:ad:d8:a5:89:99:92:0b:bc:76:d4:8e:42:07:72:3a:fd:
         c7:6d:d6:03:d6:51:0b:2e:c5:46:e7:f9:c3:8c:7b:b9:7b:b8:
         b6:28:54:97:89:8c:a8:a4:dd:fd:2d:d4:b0:d2:f4:a0:33:3d:
         47:56:8c:1d:93:8f:2f:ce:d0:1b:a8:63:d7:65:91:5e:e8:5d:
         7a:f9:50:0f:94:70:5e:e6:12:bf:d4:75:39:4a:c7:8b:eb:4a:
         ad:6c:53:f1:02:95:07:bf:ad:6f:47:bb:d1:60:8a:3e:d7:0b:
         50:96:c5:3e:e9:aa:93:97:3c:fe:b2:40:26:fe:d0:cc:20:46:
         89:f6:46:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:26:42 2021 by LibreSSL & rpki-client.