Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/53/f465db-63b1-4e29-ae89-d336f73e36b3/1/8IYwnW6qHNxkwb-S16RJpVemLrQ.roa (download)

Subject key identifier:   F0:86:30:9D:6E:AA:1C:DC:64:C1:BF:92:D7:A4:49:A5:57:A6:2E:B4 
Authority key identifier: E2:AD:18:96:44:BE:F2:CB:87:EA:0F:22:98:09:73:76:3C:25:FB:F1
asID:                     AS834
Prefixes:
    1: 188.64.143.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/53/f465db-63b1-4e29-ae89-d336f73e36b3/1/8IYwnW6qHNxkwb-S16RJpVemLrQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131466 (0x2018a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2ad189644bef2cb87ea0f22980973763c25fbf1
        Validity
            Not Before: Sep 14 11:13:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f086309d6eaa1cdc64c1bf92d7a449a557a62eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:e6:ff:a4:d3:05:c8:bc:e2:03:8e:0b:56:
                    dd:48:9f:40:17:fc:15:af:92:4c:f5:be:df:75:51:
                    d1:d7:61:06:ca:cb:74:95:27:f5:76:96:49:1b:67:
                    10:a0:f1:1f:04:3e:a2:2a:f3:97:07:9d:79:4f:26:
                    06:19:50:77:f6:78:99:a3:ee:76:ba:98:e6:74:bf:
                    42:5f:72:30:59:07:7c:26:5d:34:08:66:b6:c1:00:
                    d5:a5:0c:9c:21:65:3c:1a:c9:86:00:d8:e7:f5:a3:
                    32:b0:77:6e:cd:51:cb:18:ee:92:c3:0f:d0:75:1c:
                    c7:a5:fd:33:44:32:60:a2:47:ee:4f:f1:bc:70:91:
                    9d:b8:47:09:f6:7f:dd:23:b3:2a:7d:d5:31:6a:ad:
                    5f:56:c6:68:7e:cd:44:c8:42:da:71:51:38:58:ef:
                    bd:55:6e:4c:74:2c:6c:15:f2:c6:ea:20:3b:47:fe:
                    48:b3:31:90:fe:36:42:12:9a:31:53:49:19:28:d0:
                    41:c6:88:63:1f:c8:95:bb:45:bd:fc:06:da:30:6f:
                    a7:96:3d:67:c6:e9:00:5d:f8:37:95:a8:1c:62:cb:
                    78:11:95:dd:2d:74:20:02:5c:26:ca:d2:ea:f7:7c:
                    c5:b1:ee:d6:3c:e7:39:1f:de:ed:d0:89:28:78:86:
                    98:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F0:86:30:9D:6E:AA:1C:DC:64:C1:BF:92:D7:A4:49:A5:57:A6:2E:B4
            X509v3 Authority Key Identifier: 
                keyid:E2:AD:18:96:44:BE:F2:CB:87:EA:0F:22:98:09:73:76:3C:25:FB:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q0YlkS-8suH6g8imAlzdjwl-_E.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f465db-63b1-4e29-ae89-d336f73e36b3/1/8IYwnW6qHNxkwb-S16RJpVemLrQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f465db-63b1-4e29-ae89-d336f73e36b3/1/4q0YlkS-8suH6g8imAlzdjwl-_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:7c:ae:27:fa:1a:9c:db:4e:0a:fc:ea:b3:99:09:82:e6:9d:
         da:a8:b7:b1:a8:aa:98:b7:a4:66:28:f6:07:66:f3:9e:e4:04:
         e2:98:43:4f:49:b8:f2:1c:88:98:e8:ef:72:de:0b:3e:44:4e:
         ce:94:c0:49:27:26:a4:69:c5:d2:15:db:7e:d8:51:d6:0f:5c:
         c2:79:3b:7e:61:c2:43:8d:28:6e:57:05:5e:f1:2b:d1:43:6a:
         be:4e:09:2b:9b:3b:06:3b:74:95:ea:02:73:ff:c0:2d:25:73:
         40:94:f3:a7:df:ae:9b:7f:f0:50:96:f9:02:f6:fc:94:e5:3d:
         41:bc:50:99:28:e1:cc:02:5f:a4:86:ce:e4:e5:dc:03:b8:d6:
         5f:b8:56:e3:19:0d:7a:79:0f:7b:09:2a:15:4f:2d:9b:6e:90:
         54:dc:0b:03:4e:95:4d:6c:f4:ec:d8:3b:aa:29:8d:28:08:4f:
         98:a5:cf:bf:7f:54:95:20:2d:00:1b:58:27:ff:5e:14:cf:b3:
         cf:5a:e4:84:85:f0:0b:dd:53:ec:ed:37:43:12:5c:1a:af:35:
         16:b8:83:2c:14:21:67:04:93:b1:6b:f0:e2:1c:6b:b4:92:3d:
         5b:38:55:aa:59:1a:3e:b2:92:7e:37:2e:7a:4f:b4:c0:d3:ab:
         ae:fc:3d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:15:12 2021 by LibreSSL & rpki-client.