Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/88OxhOfQM8gMmg5Js3rOPSQ_hNg.roa (download)

Subject key identifier:   F3:C3:B1:84:E7:D0:33:C8:0C:9A:0E:49:B3:7A:CE:3D:24:3F:84:D8 
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
asID:                     AS396982
Prefixes:
    1: 109.68.56.0/21 (max: 21)
    2: 193.151.72.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/88OxhOfQM8gMmg5Js3rOPSQ_hNg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50380666 (0x300bf7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
        Validity
            Not Before: Jan  1 02:18:04 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f3c3b184e7d033c80c9a0e49b37ace3d243f84d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:e7:65:21:82:3f:ef:63:cc:8b:87:d7:db:
                    2f:96:0b:77:c8:15:89:19:5b:d8:bc:72:9d:be:ea:
                    b0:b5:3c:d7:f3:2d:69:7b:0b:9b:ed:82:ef:83:6e:
                    46:a1:7f:db:3e:81:b4:96:1e:35:9d:ed:57:91:e5:
                    54:70:3a:d6:d7:b6:6d:af:15:d8:af:e0:89:67:98:
                    b6:5a:be:f4:7e:f5:25:54:ae:d2:93:88:80:ab:7b:
                    5e:23:be:3b:57:81:b1:af:4b:e0:93:2d:f2:1f:a2:
                    61:a4:04:48:2c:6f:af:b6:93:3b:97:55:cc:d1:68:
                    87:c8:da:8b:6c:43:ce:b2:9b:1b:b1:ce:50:27:1e:
                    72:8d:87:e5:db:9b:61:4f:79:78:fb:50:c1:c4:ca:
                    ef:92:b4:72:24:25:c5:39:cc:a3:2b:11:6a:2e:d0:
                    cb:08:c2:5a:bf:44:f7:ce:86:04:22:48:52:7a:e5:
                    f0:7e:78:81:f2:18:5d:9a:4c:f8:ab:9b:50:23:5e:
                    54:27:2f:8d:c3:4e:a8:3d:c6:41:95:d5:73:7f:ad:
                    41:8f:ad:84:15:29:48:d7:a3:fa:4a:34:33:5b:83:
                    e8:b1:36:0c:13:54:b3:59:87:9d:15:67:0d:2e:2e:
                    24:82:92:11:56:55:09:b4:96:bc:f0:00:d9:78:ee:
                    c3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F3:C3:B1:84:E7:D0:33:C8:0C:9A:0E:49:B3:7A:CE:3D:24:3F:84:D8
            X509v3 Authority Key Identifier: 
                keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/88OxhOfQM8gMmg5Js3rOPSQ_hNg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....mD8.....H
    Signature Algorithm: sha256WithRSAEncryption
         0c:ef:e5:20:69:cb:80:44:65:2a:b3:40:0f:e9:bd:c6:83:5f:
         61:13:5b:97:7e:57:7c:85:26:1f:dc:de:73:0c:cf:5e:46:61:
         dc:31:d6:88:05:89:cc:06:01:12:6e:36:d1:72:fc:ac:6e:00:
         03:2b:1f:fb:37:96:85:1f:c7:fa:39:e2:a8:47:b1:cd:3f:b7:
         e1:7b:80:8d:26:bf:0f:46:45:3f:2a:00:21:5b:18:41:9f:b5:
         dc:8f:1c:a2:66:b9:49:96:aa:f4:b0:3f:9e:f0:35:4f:99:45:
         2a:dc:82:0b:36:4c:13:ef:1f:6f:57:92:c2:d4:13:ee:ce:9f:
         56:ab:fa:0d:c2:cf:bf:85:25:c1:c2:e2:3e:82:46:e4:ba:23:
         f1:03:d5:ad:f0:9b:9d:79:bd:59:8f:29:1b:e1:48:ff:b0:ff:
         76:f0:18:93:ff:7a:a1:82:2c:02:e8:00:05:cd:a1:a5:01:70:
         dc:6d:04:4d:ad:77:66:3b:b6:5d:e0:7f:de:00:28:13:37:aa:
         8e:e4:45:bd:68:27:fa:89:47:e6:d3:73:6b:35:23:d8:9d:6e:
         2f:41:df:1b:c2:96:9a:bc:56:0d:fd:6c:b4:cc:2a:c0:55:56:
         21:3f:19:fb:b1:30:5d:46:3b:0b:4b:85:b0:b9:61:c5:66:a0:
         a1:39:00:15
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAwC/ejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZGQ3MzM2ZmE5MTU3MjFjZTNiZmVlMjE3ZjRlOTkxNjRkYjk1MzJiMB4XDTIxMDEw
MTAyMTgwNFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjNjM2IxODRlN2Qw
MzNjODBjOWEwZTQ5YjM3YWNlM2QyNDNmODRkODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKRU52Uhgj/vY8yLh9fbL5YLd8gViRlb2Lxynb7qsLU81/Mt
aXsLm+2C74NuRqF/2z6BtJYeNZ3tV5HlVHA61te2ba8V2K/giWeYtlq+9H71JVSu
0pOIgKt7XiO+O1eBsa9L4JMt8h+iYaQESCxvr7aTO5dVzNFoh8jai2xDzrKbG7HO
UCceco2H5dubYU95ePtQwcTK75K0ciQlxTnMoysRai7QywjCWr9E986GBCJIUnrl
8H54gfIYXZpM+KubUCNeVCcvjcNOqD3GQZXVc3+tQY+thBUpSNej+ko0M1uD6LE2
DBNUs1mHnRVnDS4uJIKSEVZVCbSWvPAA2Xjuw/cCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTzw7GE59AzyAyaDkmzes49JD+E2DAfBgNVHSMEGDAWgBRd1zNvqRVyHOO/
7iF/TpkWTblTKzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hkY3piNmtWY2h6anYtNGhmMDZaRmsyNVV5cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWIvZTc0NGJkLWY2ZDktNGY3NC04YzAxLThjNGJjNDU5MjdhMy8x
Lzg4T3hoT2ZRTThnTW1nNUpzM3JPUFNRX2hOZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIv
ZTc0NGJkLWY2ZDktNGY3NC04YzAxLThjNGJjNDU5MjdhMy8xL1hkY3piNmtWY2h6
anYtNGhmMDZaRmsyNVV5cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA21EOAMEAsGXSDANBgkqhkiG9w0B
AQsFAAOCAQEADO/lIGnLgERlKrNAD+m9xoNfYRNbl35XfIUmH9zecwzPXkZh3DHW
iAWJzAYBEm420XL8rG4AAysf+zeWhR/H+jniqEexzT+34XuAjSa/D0ZFPyoAIVsY
QZ+13I8coma5SZaq9LA/nvA1T5lFKtyCCzZME+8fb1eSwtQT7s6fVqv6DcLPv4Ul
wcLiPoJG5Loj8QPVrfCbnXm9WY8pG+FI/7D/dvAYk/96oYIsAugABc2hpQFw3G0E
Ta13Zju2XeB/3gAoEzeqjuRFvWgn+olH5tNzazUj2J1uL0HfG8KWmrxWDf1stMwq
wFVWIT8Z+7EwXUY7C0uFsLlhxWagoTkAFQ==
-----END CERTIFICATE-----

Generated at Mon Aug 2 14:07:44 2021 by LibreSSL & rpki-client.