Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/kUNA-nvXxS_yvd847S63hRtrD3s.roa (download)

Subject key identifier:   91:43:40:FA:7B:D7:C5:2F:F2:BD:DF:38:ED:2E:B7:85:1B:6B:0F:7B 
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
asID:                     AS399641
Prefixes:
    1: 213.170.145.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/kUNA-nvXxS_yvd847S63hRtrD3s.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357533669 (0x154f87e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
        Validity
            Not Before: Aug 20 19:41:06 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=914340fa7bd7c52ff2bddf38ed2eb7851b6b0f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ce:99:d9:6e:af:19:5a:87:61:ea:54:08:69:
                    f8:f4:f5:b1:fe:9d:70:c2:08:a3:86:68:29:71:b5:
                    f0:8c:eb:05:07:5f:17:2c:54:fa:12:b2:9e:89:11:
                    90:ef:9d:b9:17:5e:e0:53:db:04:4a:04:b4:cd:64:
                    8d:2c:c6:6e:78:b9:2b:e2:40:62:c1:12:3e:37:75:
                    f9:c2:41:a4:d6:d2:30:25:08:1d:86:71:ae:c6:f6:
                    dd:b0:ff:10:b5:d9:42:70:e2:fb:d7:ec:81:70:bc:
                    6e:2f:c9:69:ba:1c:0f:c5:b5:04:02:26:0e:97:27:
                    8f:3a:e9:d9:19:24:65:47:86:f7:4c:44:ff:7a:29:
                    90:cb:0b:eb:88:2a:5e:92:a1:29:ae:74:f9:92:49:
                    29:22:87:8e:57:81:2b:21:61:d4:6d:b6:9e:54:00:
                    2e:0a:cf:61:1c:26:f8:c4:eb:ca:91:51:4e:b2:d2:
                    25:b5:a6:82:93:3c:99:82:19:68:46:d7:6a:a9:1c:
                    79:d8:11:95:56:4b:33:b2:3f:c4:0f:db:84:16:b4:
                    bc:ac:7e:80:c2:4a:9d:13:32:29:f8:dc:a4:99:5b:
                    f7:5a:22:e1:25:b4:14:ab:00:e3:5a:d1:df:8d:f0:
                    c9:c5:63:8e:d0:65:45:1a:58:b9:2c:df:7d:8c:6b:
                    0b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                91:43:40:FA:7B:D7:C5:2F:F2:BD:DF:38:ED:2E:B7:85:1B:6B:0F:7B
            X509v3 Authority Key Identifier: 
                keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/kUNA-nvXxS_yvd847S63hRtrD3s.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.170.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:d9:3b:06:d8:be:a6:4f:da:1e:24:c2:22:dc:d9:ed:4f:93:
         07:c9:c0:a0:0d:35:4c:33:47:9a:15:03:96:1a:9e:84:d3:a8:
         39:81:04:d9:df:46:29:12:be:7c:9e:ea:ab:8e:ee:a7:1f:08:
         40:0f:64:b5:c1:d2:ac:9b:a4:b6:b2:39:64:8a:c5:89:b4:8f:
         90:46:f7:7b:e5:0b:e8:5e:77:45:1d:cf:01:bf:bb:94:16:f6:
         b7:82:56:c5:18:19:81:f7:54:08:42:a6:1b:ac:0b:4f:ed:00:
         ee:b1:80:e1:74:07:74:01:94:6d:06:98:77:c6:0a:8b:32:64:
         02:30:66:ad:8d:05:71:66:3a:00:a6:13:8b:da:9f:81:4d:a0:
         be:3a:e1:4a:02:71:2d:f8:b2:fd:7b:01:32:0f:c5:d4:c6:7f:
         e0:83:dd:ad:95:b3:6d:20:1d:28:5d:7a:f1:6d:1d:86:4e:3a:
         4b:24:60:e0:29:e4:6b:b6:8a:1e:8c:75:64:27:32:e0:c7:76:
         24:47:ee:37:ba:06:f3:80:01:a7:e0:6c:39:fa:01:98:ea:a3:
         5f:1a:39:09:06:15:f8:82:2c:f5:47:34:f7:75:50:8a:d0:34:
         ab:c4:28:5f:2a:00:0a:4f:f0:36:38:bc:5a:93:91:bc:68:05:
         52:86:ed:83
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFU+H5TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTUxNjA1YjY3NWVjZTRlMGZjZTcxNzVhZTMxYTkzZmE4MjcyYmE2MB4XDTIxMDgy
MDE5NDEwNloXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTE0MzQwZmE3YmQ3
YzUyZmYyYmRkZjM4ZWQyZWI3ODUxYjZiMGY3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJbOmdlurxlah2HqVAhp+PT1sf6dcMIIo4ZoKXG18IzrBQdf
FyxU+hKynokRkO+duRde4FPbBEoEtM1kjSzGbni5K+JAYsESPjd1+cJBpNbSMCUI
HYZxrsb23bD/ELXZQnDi+9fsgXC8bi/JabocD8W1BAImDpcnjzrp2RkkZUeG90xE
/3opkMsL64gqXpKhKa50+ZJJKSKHjleBKyFh1G22nlQALgrPYRwm+MTrypFRTrLS
JbWmgpM8mYIZaEbXaqkcedgRlVZLM7I/xA/bhBa0vKx+gMJKnRMyKfjcpJlb91oi
4SW0FKsA41rR343wycVjjtBlRRpYuSzffYxrC90CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSRQ0D6e9fFL/K93zjtLreFG2sPezAfBgNVHSMEGDAWgBQFUWBbZ17OTg/O
cXWuMak/qCcrpjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JWRmdXMmRlems0UHpuRjFyakdwUDZnbks2WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvMjhlYTQ1LTdkMzAtNDZkZi04ZjJhLTA3NzlmNDhlY2VhMC8x
L2tVTkEtbnZYeFNfeXZkODQ3UzYzaFJ0ckQzcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
MjhlYTQ1LTdkMzAtNDZkZi04ZjJhLTA3NzlmNDhlY2VhMC8xL0JWRmdXMmRlems0
UHpuRjFyakdwUDZnbks2WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANWqkTANBgkqhkiG9w0BAQsFAAOC
AQEAL9k7Bti+pk/aHiTCItzZ7U+TB8nAoA01TDNHmhUDlhqehNOoOYEE2d9GKRK+
fJ7qq47upx8IQA9ktcHSrJuktrI5ZIrFibSPkEb3e+UL6F53RR3PAb+7lBb2t4JW
xRgZgfdUCEKmG6wLT+0A7rGA4XQHdAGUbQaYd8YKizJkAjBmrY0FcWY6AKYTi9qf
gU2gvjrhSgJxLfiy/XsBMg/F1MZ/4IPdrZWzbSAdKF168W0dhk46SyRg4Cnka7aK
Hox1ZCcy4Md2JEfuN7oG84ABp+BsOfoBmOqjXxo5CQYV+IIs9Uc093VQitA0q8Qo
XyoACk/wNji8WpORvGgFUobtgw==
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:27:20 2021 by LibreSSL & rpki-client.