Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/U-o8MgHr-3s6_TIqwqOf90bH43I.roa (download)

Subject key identifier:   53:EA:3C:32:01:EB:FB:7B:3A:FD:32:2A:C2:A3:9F:F7:46:C7:E3:72 
Authority key identifier: D8:64:6E:6C:CB:71:6E:89:50:19:58:FC:86:82:3A:98:36:8F:B5:1A
asID:                     AS399045
Prefixes:
    1: 89.107.9.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/U-o8MgHr-3s6_TIqwqOf90bH43I.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20298398 (0x135ba9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8646e6ccb716e89501958fc86823a98368fb51a
        Validity
            Not Before: Jan  6 20:40:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=53ea3c3201ebfb7b3afd322ac2a39ff746c7e372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bc:4b:8a:a8:ef:67:4b:d2:41:da:aa:22:36:
                    88:38:cb:2f:98:25:53:3f:59:1d:e0:bd:09:90:5c:
                    1b:8a:2f:4f:94:e3:09:7f:04:d0:4e:ea:4a:04:d5:
                    23:1b:fc:bb:b5:20:c9:bd:37:f6:05:b5:32:17:3f:
                    8d:53:ec:3b:ef:cd:7d:f3:8e:31:a5:90:37:99:70:
                    99:49:b5:6e:c7:5e:4c:0e:0d:64:ae:4c:e8:a3:2b:
                    b0:2a:67:97:b0:9e:91:43:0b:d3:97:04:2c:1d:ee:
                    ea:a1:05:d8:94:ed:d7:7a:6a:b3:eb:08:c7:1c:ab:
                    ad:de:34:4f:d5:e1:ff:6b:95:ae:e4:b6:76:29:ea:
                    5a:58:ef:dd:a5:0b:03:35:c5:0c:ad:46:af:6e:1b:
                    8a:4c:5b:60:39:29:83:4e:d6:2a:f9:eb:0c:ac:42:
                    a4:f4:67:71:7d:b9:69:8d:47:8a:7e:c1:3b:57:b7:
                    ac:22:9d:23:95:5b:57:5f:28:5e:45:74:51:7f:8c:
                    45:4b:b0:c4:98:78:74:dc:9a:f0:b1:aa:54:a6:3f:
                    95:32:6f:bf:19:6b:44:b8:e9:eb:8c:34:c2:28:3f:
                    20:13:56:93:83:0e:82:d4:a0:98:20:3b:7c:1f:27:
                    04:54:da:3b:b4:d4:2d:74:fb:b0:ea:a5:e7:42:92:
                    b0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                53:EA:3C:32:01:EB:FB:7B:3A:FD:32:2A:C2:A3:9F:F7:46:C7:E3:72
            X509v3 Authority Key Identifier: 
                keyid:D8:64:6E:6C:CB:71:6E:89:50:19:58:FC:86:82:3A:98:36:8F:B5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GRubMtxbolQGVj8hoI6mDaPtRo.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/U-o8MgHr-3s6_TIqwqOf90bH43I.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/2GRubMtxbolQGVj8hoI6mDaPtRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.107.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:05:c2:83:33:41:f4:a7:c3:e7:76:9c:63:3a:57:e6:19:4d:
         0e:a4:34:b3:ad:00:19:bb:a8:74:0e:49:8a:7e:16:22:7b:26:
         36:f3:38:22:97:e3:18:3e:bd:06:b3:62:a4:9f:e4:31:52:4b:
         b2:ec:cb:69:8d:51:f1:ad:c2:ac:b2:d3:ce:6a:fe:de:25:94:
         61:4c:c4:a5:56:50:2b:30:3d:1e:c9:58:9f:9e:b5:05:33:9f:
         78:68:ba:7c:91:23:0b:0f:74:bb:2d:38:be:05:79:7c:1c:28:
         f9:d2:a6:d9:fa:01:de:cd:f3:75:17:d6:62:34:84:b8:43:75:
         41:8f:c3:86:77:24:48:03:f2:8f:d3:5e:38:22:70:31:47:7b:
         7b:05:ed:5d:93:2b:91:b6:84:70:a9:34:8e:e1:76:db:b1:d2:
         61:4a:34:76:ad:c8:bb:5f:38:3a:76:c4:42:4f:1d:ce:2c:20:
         14:d5:db:66:75:ab:b6:ea:1e:28:be:d6:4b:3c:15:c0:40:41:
         46:92:d2:df:a4:99:c3:3e:f9:16:45:7d:d2:62:8a:39:2f:dc:
         92:45:c6:a4:8a:58:1c:8f:0d:ee:cb:c7:98:6d:0d:79:4d:1d:
         dd:90:06:43:dc:92:fd:5b:2e:8a:73:c7:fc:dd:2f:ff:e8:15:
         fb:ed:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Jan 6 23:08:51 2022 by LibreSSL & rpki-client.