Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/QYynxo24bsXYduGwa26LiSO8Vzo.roa (download)

Subject key identifier:   41:8C:A7:C6:8D:B8:6E:C5:D8:76:E1:B0:6B:6E:8B:89:23:BC:57:3A 
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
asID:                     AS28753
Prefixes:
    1: 193.109.192.0/21 (max: 24)
    2: 185.89.76.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/QYynxo24bsXYduGwa26LiSO8Vzo.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27397120 (0x1a20c00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: Apr 22 11:07:25 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=418ca7c68db86ec5d876e1b06b6e8b8923bc573a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:65:36:20:b5:88:73:81:d6:d4:0e:93:20:41:
                    cd:67:33:92:67:ff:3c:fe:fe:04:48:dc:e0:4d:ec:
                    9b:bb:9d:b9:68:94:f6:94:8f:4f:bd:68:42:ac:be:
                    65:14:37:f6:a7:33:0b:99:af:4c:7a:99:1f:69:c2:
                    f3:bd:62:69:54:06:62:77:93:34:1a:66:88:5f:06:
                    4b:ff:1d:a1:1d:e4:1c:7d:51:d0:91:25:58:64:bd:
                    71:f2:db:43:54:1a:32:5a:ad:0a:23:f7:f1:39:73:
                    08:29:9a:fb:13:fb:20:c4:07:06:9c:97:59:23:aa:
                    65:3e:46:5e:22:68:d2:ce:f4:9c:a8:8c:cf:a9:c3:
                    77:f5:c5:2d:9f:6d:a7:cf:02:7b:0d:9c:bc:31:09:
                    60:20:6b:73:29:89:47:f9:ca:b1:39:15:77:62:90:
                    4f:56:5f:50:44:76:a9:4b:0c:f3:ca:71:b4:b5:01:
                    fa:5e:8f:30:ab:9c:a7:5a:b4:e0:4c:32:07:e0:a1:
                    28:e4:27:74:2b:c1:cf:65:6a:c3:d1:9b:f4:29:a6:
                    f6:07:67:17:83:81:43:4f:5e:62:51:e5:59:91:8d:
                    67:bc:da:a7:b3:d9:f6:2b:6a:ca:b6:2e:26:d3:37:
                    12:f7:28:b4:be:3e:83:42:b4:84:36:46:9e:1f:c5:
                    b4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                41:8C:A7:C6:8D:B8:6E:C5:D8:76:E1:B0:6B:6E:8B:89:23:BC:57:3A
            X509v3 Authority Key Identifier: 
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/QYynxo24bsXYduGwa26LiSO8Vzo.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....YL....m.
    Signature Algorithm: sha256WithRSAEncryption
         49:fa:a4:3e:6d:63:f3:1b:7c:cd:de:b6:c1:c4:9a:d5:69:fd:
         09:67:c1:b1:1d:c4:8f:6e:8a:b7:49:d4:7d:55:63:38:5c:6e:
         f5:f5:04:9f:e2:c2:ab:92:da:74:a5:25:96:14:ab:9a:e1:a1:
         6d:8f:18:bc:48:a3:0e:d1:77:77:8d:c5:a0:f5:86:00:f4:e1:
         06:9f:b1:fb:cf:7f:69:b3:9c:96:8b:c5:d4:bd:49:f8:0a:0e:
         ff:71:b9:41:72:dd:05:07:c5:48:80:80:16:8a:e8:ff:ec:80:
         7f:db:b2:eb:50:72:86:f4:b5:08:b5:15:3e:35:25:3a:43:a3:
         6b:a9:57:e8:96:bc:d3:30:d5:c6:4a:9c:4b:2e:7b:c7:a3:f4:
         fd:88:eb:d3:cd:0b:6d:8f:3f:f0:f8:dd:35:ef:91:f2:8d:8e:
         d7:fd:23:7c:61:15:b6:cb:53:0a:d9:a6:16:b5:4b:02:8b:81:
         e0:37:25:22:d7:0d:ee:47:31:62:68:f3:b5:b6:e3:08:6a:ed:
         b7:61:40:7f:bf:7a:df:d1:41:e9:eb:e6:58:58:82:b6:a3:74:
         57:47:4c:ab:48:fc:44:b7:9a:fe:26:15:3d:21:ab:89:8b:6d:
         a1:ef:1f:12:37:97:b1:72:61:15:bb:b7:b9:c1:07:4c:16:be:
         37:f1:64:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Aug 1 21:44:27 2021 by LibreSSL & rpki-client.