Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/sdiAAFj3ro4ZmAJDvhj2XkY7KPs.roa (download)

Subject key identifier:   B1:D8:80:00:58:F7:AE:8E:19:98:02:43:BE:18:F6:5E:46:3B:28:FB 
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
asID:                     AS399029
Prefixes:
    1: 193.107.217.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/sdiAAFj3ro4ZmAJDvhj2XkY7KPs.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106908849 (0x65f4cb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Apr 20 08:04:15 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b1d8800058f7ae8e19980243be18f65e463b28fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:91:61:81:cc:bc:b5:a5:6b:13:96:48:fa:
                    04:ce:82:93:0f:81:58:ac:a6:63:cf:4f:65:fa:5f:
                    ca:d7:c2:be:e4:c6:3c:4b:f0:67:df:f1:44:9d:59:
                    86:a8:d1:2e:09:85:d4:ae:d0:56:2a:93:25:a8:f0:
                    53:f2:bb:83:ad:3c:08:ba:f5:32:f9:ee:3c:34:b6:
                    df:92:41:9c:cb:fc:46:b2:c2:a8:af:40:75:69:70:
                    28:35:78:4f:c3:dd:0f:a4:c1:02:be:6a:ea:33:81:
                    f5:83:41:df:47:30:e9:ec:0d:49:a2:aa:00:c3:e2:
                    8f:3a:ed:69:7e:0b:e8:9b:17:48:92:60:d3:0c:7c:
                    8f:68:2c:40:29:97:e2:ab:7f:5e:32:d8:58:c0:11:
                    8c:a7:a0:b5:cd:76:12:5c:cf:0e:df:b4:05:3c:3a:
                    32:60:c6:98:af:b2:7a:be:95:fa:b0:92:1e:38:30:
                    33:61:27:9c:68:b4:73:34:24:d3:30:b4:b0:77:0c:
                    2e:35:d6:43:65:f9:7e:5a:5c:58:85:3f:b6:81:aa:
                    cb:e1:d8:a7:65:ce:cd:2f:b4:2d:7c:4e:32:1e:7f:
                    9b:50:37:80:ce:fa:16:63:89:cc:3e:dc:d6:13:e4:
                    db:e4:27:36:6f:87:ee:12:30:66:c5:97:d7:d6:3c:
                    f4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B1:D8:80:00:58:F7:AE:8E:19:98:02:43:BE:18:F6:5E:46:3B:28:FB
            X509v3 Authority Key Identifier: 
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/sdiAAFj3ro4ZmAJDvhj2XkY7KPs.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:87:84:76:9e:0b:8c:1f:84:21:66:d9:73:6e:eb:34:be:ab:
         f5:f6:c0:3f:6d:0a:f2:e6:75:a2:74:b5:4c:de:e2:86:b9:61:
         a2:a3:4d:ff:ec:65:a2:3e:7a:25:cb:f1:03:37:16:c0:56:36:
         2f:f6:70:e6:76:3f:04:9d:53:c1:13:6e:36:f5:d4:6e:6b:3c:
         0d:74:d7:19:b0:78:5e:66:f4:1b:42:f4:92:48:4d:4f:a1:e2:
         51:11:7c:4f:a7:bf:c8:27:21:e6:d6:9c:f7:76:82:d6:c7:a7:
         1f:a2:51:48:c8:40:5d:70:f2:41:d2:14:29:fb:e9:51:42:74:
         71:fe:65:2d:61:6f:d4:00:d5:56:82:eb:cb:e0:22:06:ca:c8:
         2e:cf:b2:40:fa:0e:05:51:3a:dc:cf:98:59:92:3c:f1:c1:17:
         09:04:1c:b9:74:ba:9f:58:de:96:84:7c:e2:fb:92:2b:31:fd:
         94:38:ec:9a:20:27:a2:7a:10:f1:30:a4:ba:6a:39:6c:6c:04:
         f3:48:17:9c:67:8b:a6:e4:63:98:f4:54:ca:5d:8f:cf:5b:7c:
         1e:be:34:60:c3:72:c8:b7:f4:95:28:c9:33:34:b6:31:05:38:
         62:e1:16:c0:fa:59:8e:22:17:6b:46:fb:38:42:c3:64:d2:8f:
         ac:5f:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:09:11 2021 by LibreSSL & rpki-client.