Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/QiLR_41bQDEIa-bwij80rnNLjlg.roa (download)

Subject key identifier:   42:22:D1:FF:8D:5B:40:31:08:6B:E6:F0:8A:3F:34:AE:73:4B:8E:58 
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
asID:                     AS0
Prefixes:
    1: 193.201.28.0/23 (max: 23)
    2: 2001:7f8:10::/64 (max: 64)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/QiLR_41bQDEIa-bwij80rnNLjlg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140390977 (0x85e3241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
        Validity
            Not Before: Jan  1 00:16:10 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=4222d1ff8d5b4031086be6f08a3f34ae734b8e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:44:09:9a:d6:c1:80:28:76:91:d6:fb:27:b3:
                    9e:92:bc:04:7a:5a:e8:94:29:07:cc:8b:e5:77:25:
                    33:38:c1:2a:62:81:1b:06:c1:9f:b3:b4:ae:39:1f:
                    6c:40:45:51:58:d0:b4:93:48:8f:7c:7d:18:cd:4e:
                    a5:bc:27:02:3a:f7:b5:45:48:65:e2:38:30:06:b4:
                    36:94:1b:8a:0d:c0:e5:a1:b4:bc:ce:28:32:b0:23:
                    5a:52:91:31:3d:85:65:fd:4f:b8:c7:d3:13:c9:f0:
                    c4:6f:bb:c0:ef:61:88:39:94:1b:08:7e:f3:9d:6f:
                    0f:b1:4c:f7:b2:44:13:52:3c:6f:fd:25:65:62:b2:
                    01:7e:d3:7a:1d:90:78:82:92:4e:ab:15:b9:6a:f7:
                    3d:65:33:2c:dc:3a:ab:c3:28:1a:4d:59:07:78:76:
                    da:69:7e:30:b4:17:29:49:e2:d0:09:69:ed:e3:04:
                    02:5c:3f:29:61:48:7e:82:a7:7f:b0:ec:99:6e:b9:
                    ad:c5:bc:73:c9:f6:eb:a9:02:b1:b4:85:89:37:87:
                    6b:fd:53:27:58:26:ec:c7:1f:ef:69:0f:34:2c:3f:
                    48:d3:7e:85:ef:4a:5e:25:5c:f4:86:46:d5:6f:f7:
                    c5:62:77:ef:f2:76:0c:c1:f9:fc:7c:26:51:a0:5e:
                    38:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                42:22:D1:FF:8D:5B:40:31:08:6B:E6:F0:8A:3F:34:AE:73:4B:8E:58
            X509v3 Authority Key Identifier: 
                keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/QiLR_41bQDEIa-bwij80rnNLjlg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0!0.....0.......0.....0.... .......
    Signature Algorithm: sha256WithRSAEncryption
         18:81:86:ea:88:14:0d:4e:72:47:4c:26:93:8d:13:18:60:b6:
         4e:a3:c5:3d:b8:80:af:a5:6d:14:af:4e:64:f3:8e:5a:28:57:
         1e:79:89:42:47:3a:9a:40:ce:a9:98:99:68:12:30:bc:9a:fc:
         98:76:0f:98:ab:a3:e2:53:ff:93:2b:7d:90:d7:ed:f2:1c:d0:
         8c:11:4c:87:4c:f3:27:3e:30:da:42:4d:09:6b:d1:12:a4:ac:
         6f:5f:2c:c4:81:d0:8b:b2:08:21:21:7a:79:fc:99:c4:0f:ed:
         ea:b7:64:c1:42:6a:05:4f:68:ea:df:8a:b4:80:66:99:0a:02:
         0e:f1:b6:c3:e0:99:6a:37:8b:56:75:94:45:04:e8:77:3b:b5:
         8f:bd:ff:d4:00:f2:e9:31:8e:e9:82:4c:f5:41:98:bd:90:af:
         44:a3:80:fb:a3:cf:04:17:5b:bd:a0:a7:3f:de:f6:98:52:20:
         5e:4f:be:4a:0e:65:57:b7:ee:b3:04:6d:0e:32:2e:c6:94:82:
         26:b6:7e:31:29:c9:24:a4:eb:93:4b:7f:b3:07:ce:d9:4a:a4:
         03:70:4e:1a:a5:b6:17:33:7c:8c:bd:ae:42:6a:e2:f1:d3:ec:
         09:e3:0a:10:28:c5:38:8f:a7:73:96:f0:46:44:53:49:6a:ec:
         fd:b9:a3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:20:10 2021 by LibreSSL & rpki-client.