Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/61/b57c03-9692-4b68-9ab4-cbb0519aa664/1/vZ5j6fhkSwhqQ53N-rOWK8cuPtA.roa (download)

Subject key identifier:   BD:9E:63:E9:F8:64:4B:08:6A:43:9D:CD:FA:B3:96:2B:C7:2E:3E:D0 
Authority key identifier: 86:28:DA:6D:C7:93:5D:31:02:B9:2D:81:1F:0A:EA:B9:02:E5:9A:37
asID:                     AS399471
Prefixes:
    1: 194.105.21.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/61/b57c03-9692-4b68-9ab4-cbb0519aa664/1/vZ5j6fhkSwhqQ53N-rOWK8cuPtA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61451400 (0x3a9ac88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8628da6dc7935d3102b92d811f0aeab902e59a37
        Validity
            Not Before: Sep  3 08:50:42 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=bd9e63e9f8644b086a439dcdfab3962bc72e3ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8b:66:70:a9:6f:3e:7d:73:f5:d4:71:00:59:
                    3a:92:52:ff:75:f2:94:29:91:bd:87:b8:70:56:65:
                    53:9d:e0:43:b2:87:bd:1b:39:ea:33:ec:8a:c5:22:
                    1c:45:7a:2d:3d:7d:67:ee:62:d5:33:1e:34:80:da:
                    9c:0c:76:1e:a8:e3:4f:cd:ec:6b:2a:31:dc:ea:49:
                    ab:58:49:09:71:60:bf:03:40:04:18:2f:3e:d9:da:
                    4d:d0:98:d6:39:c1:1f:72:0c:16:c0:cd:65:8a:8e:
                    6a:bb:62:5f:3d:c7:ab:a6:cf:fc:57:ab:1a:d9:f2:
                    3a:ed:19:ae:92:11:b5:8e:45:38:58:f0:4a:80:68:
                    2e:6f:a6:49:2c:bf:c1:a6:23:3e:32:17:e8:8e:bd:
                    d2:5f:68:1a:28:40:33:ce:1b:6c:56:b8:06:f8:46:
                    76:ab:43:09:28:90:86:9f:16:58:fb:49:d7:99:b5:
                    2c:9f:e1:c7:ee:9f:7c:b5:7b:f6:11:94:f5:bd:07:
                    c3:0f:2c:11:a9:2c:6a:63:3c:b8:04:49:eb:5a:e9:
                    bc:f9:3d:1f:1b:3a:fd:0c:61:70:49:6b:38:71:40:
                    44:79:57:95:d0:90:73:cc:2d:a6:0e:bc:4d:dc:67:
                    17:47:a7:dc:05:94:a1:49:b3:4f:34:e3:9c:1e:7e:
                    84:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BD:9E:63:E9:F8:64:4B:08:6A:43:9D:CD:FA:B3:96:2B:C7:2E:3E:D0
            X509v3 Authority Key Identifier: 
                keyid:86:28:DA:6D:C7:93:5D:31:02:B9:2D:81:1F:0A:EA:B9:02:E5:9A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hijabceTXTECuS2BHwrquQLlmjc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b57c03-9692-4b68-9ab4-cbb0519aa664/1/vZ5j6fhkSwhqQ53N-rOWK8cuPtA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b57c03-9692-4b68-9ab4-cbb0519aa664/1/hijabceTXTECuS2BHwrquQLlmjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.105.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:93:d4:23:4b:46:f5:1e:e3:46:d2:be:a4:34:84:84:53:c3:
         82:b6:89:05:82:ea:b8:bb:71:39:a9:73:44:14:24:a8:6b:2d:
         cb:31:16:6c:b1:24:57:c6:53:94:87:ce:13:58:3a:1c:be:0f:
         af:4f:56:d9:ec:79:52:9f:67:a5:94:10:28:d6:40:c5:c7:af:
         28:b3:4d:79:f1:1a:bd:2e:b3:9c:a1:13:c5:52:51:8c:7e:61:
         d1:55:96:66:09:d4:db:2c:0e:31:86:bc:a4:3c:f3:4a:6a:88:
         da:c0:d5:35:bc:22:a1:6b:39:b5:ad:d1:6b:fe:a1:b7:24:c5:
         a2:96:89:84:ce:37:82:cd:a9:46:51:14:c2:00:70:f7:72:96:
         a8:14:0d:dd:8d:99:8f:16:64:89:00:8c:da:46:b0:5b:bf:c1:
         3c:31:a1:ca:ab:37:6c:20:43:cf:16:f9:9d:56:f1:b8:9c:20:
         89:84:78:33:67:d4:73:31:d0:fe:2a:42:64:6e:10:ba:27:56:
         3c:c4:cd:e4:fe:20:00:87:38:22:98:5c:19:9c:2c:3c:3d:df:
         35:85:ca:f7:4d:68:f2:d8:e4:55:21:8c:fa:4a:6f:c8:03:2e:
         73:b6:79:23:22:d1:03:29:1d:f7:73:60:ef:77:f6:8e:9f:e6:
         22:5b:a9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:31:57 2021 by LibreSSL & rpki-client.