Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/69/6be027-7e6e-4ce6-8b31-189da9a46608/1/IgFJS73qbUCM_XDXJlTmmXpJX0Q.roa (download)

Subject key identifier:   22:01:49:4B:BD:EA:6D:40:8C:FD:70:D7:26:54:E6:99:7A:49:5F:44 
Authority key identifier: 26:31:B2:9A:C7:5A:B5:48:BA:75:2B:5F:62:51:D9:7C:B1:C5:5E:11
asID:                     AS834
Prefixes:
    1: 193.17.91.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/69/6be027-7e6e-4ce6-8b31-189da9a46608/1/IgFJS73qbUCM_XDXJlTmmXpJX0Q.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72391 (0x11ac7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2631b29ac75ab548ba752b5f6251d97cb1c55e11
        Validity
            Not Before: Sep 14 13:48:52 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2201494bbdea6d408cfd70d72654e6997a495f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:31:ac:ec:db:8a:f8:e8:2f:c2:31:05:77:
                    63:07:c9:22:bd:ae:6b:2d:99:ea:ac:09:5f:42:e2:
                    c6:0d:2f:54:ac:23:95:8a:b8:17:d4:78:f4:3f:ed:
                    50:cd:0a:ef:7a:99:88:da:56:f3:20:ae:57:8e:3c:
                    90:6b:6f:e1:18:b8:e9:fe:50:d9:e4:3d:84:df:90:
                    36:4a:23:0d:3b:e9:55:f4:b7:b8:66:47:70:ff:47:
                    27:c8:5e:4a:c3:42:60:d2:04:5d:ab:47:f6:25:59:
                    19:43:b0:fd:3e:cb:c8:63:15:da:7f:37:28:6a:80:
                    d6:3e:51:d5:ff:90:6c:de:34:a7:b4:e7:6f:99:f1:
                    8a:67:e1:69:74:01:ef:77:02:4e:cc:0b:9d:44:6a:
                    88:7b:63:ba:a4:af:b6:12:7d:8f:29:a4:d3:ea:96:
                    5a:b8:da:7d:7e:cf:86:f9:cd:38:ef:5c:c0:95:d2:
                    4d:ed:4e:75:65:23:6f:ba:91:34:24:48:62:7b:d8:
                    7d:23:c3:2d:27:2f:1d:02:72:8d:f2:87:b7:9b:11:
                    b5:e9:bc:97:cc:86:85:a4:67:4e:b4:ea:c0:01:16:
                    00:e1:79:fc:8e:c5:d5:37:39:b5:a2:e9:e8:ec:af:
                    b1:d1:62:c9:f7:b4:23:f4:bc:4d:58:bc:47:65:c9:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                22:01:49:4B:BD:EA:6D:40:8C:FD:70:D7:26:54:E6:99:7A:49:5F:44
            X509v3 Authority Key Identifier: 
                keyid:26:31:B2:9A:C7:5A:B5:48:BA:75:2B:5F:62:51:D9:7C:B1:C5:5E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjGymsdatUi6dStfYlHZfLHFXhE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6be027-7e6e-4ce6-8b31-189da9a46608/1/IgFJS73qbUCM_XDXJlTmmXpJX0Q.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6be027-7e6e-4ce6-8b31-189da9a46608/1/JjGymsdatUi6dStfYlHZfLHFXhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.17.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:ad:a6:69:0c:39:ee:16:79:73:20:0f:33:0f:01:e3:37:58:
         b8:ea:a1:ba:01:0a:f6:84:50:cf:6c:03:15:63:96:dc:e4:3f:
         b2:3b:5a:b1:2f:c5:01:65:08:90:d5:38:a0:ab:fa:a9:df:29:
         2a:f6:16:83:94:8e:cc:d8:ee:3e:80:90:f1:55:0e:75:8b:ad:
         29:b1:a8:04:e8:49:97:4f:37:41:3f:d5:dc:df:64:89:09:5d:
         5b:07:46:65:98:ad:db:48:64:7c:8e:49:4f:f7:ad:69:5b:e8:
         2d:ce:84:60:01:22:a3:96:d3:48:a8:2c:a1:11:6d:aa:63:4b:
         f8:2b:3d:75:cb:ad:8d:1f:75:b8:0f:3f:38:0b:1a:2c:0d:57:
         fa:8f:94:b5:09:b8:04:a3:2c:ea:46:7e:1a:19:9a:99:39:30:
         9b:dc:6d:99:38:75:26:19:d7:97:35:12:4b:29:6d:48:f9:bc:
         e7:23:d8:76:b4:e5:1f:f7:91:0d:17:36:bb:94:75:37:74:6e:
         94:e7:a5:bb:7c:84:d2:f5:db:5d:b4:b1:43:cd:75:3f:07:68:
         19:5e:b2:01:77:79:aa:5f:9e:fb:59:68:17:d3:a4:eb:a3:5a:
         e9:72:6a:46:f6:0f:e7:2c:9b:61:b9:01:d8:d5:2e:9d:88:57:
         f9:81:36:1d
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDARrHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI2
MzFiMjlhYzc1YWI1NDhiYTc1MmI1ZjYyNTFkOTdjYjFjNTVlMTEwHhcNMjEwOTE0
MTM0ODUyWhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyMjAxNDk0YmJkZWE2
ZDQwOGNmZDcwZDcyNjU0ZTY5OTdhNDk1ZjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuyUxrOzbivjoL8IxBXdjB8kiva5rLZnqrAlfQuLGDS9UrCOV
irgX1Hj0P+1QzQrvepmI2lbzIK5XjjyQa2/hGLjp/lDZ5D2E35A2SiMNO+lV9Le4
Zkdw/0cnyF5Kw0Jg0gRdq0f2JVkZQ7D9PsvIYxXafzcoaoDWPlHV/5Bs3jSntOdv
mfGKZ+FpdAHvdwJOzAudRGqIe2O6pK+2En2PKaTT6pZauNp9fs+G+c0471zAldJN
7U51ZSNvupE0JEhie9h9I8MtJy8dAnKN8oe3mxG16byXzIaFpGdOtOrAARYA4Xn8
jsXVNzm1ouno7K+x0WLJ97Qj9LxNWLxHZcl7NQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFCIBSUu96m1AjP1w1yZU5pl6SV9EMB8GA1UdIwQYMBaAFCYxsprHWrVIunUr
X2JR2XyxxV4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
SmpHeW1zZGF0VWk2ZFN0ZllsSFpmTEhGWGhFLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82OS82YmUwMjctN2U2ZS00Y2U2LThiMzEtMTg5ZGE5YTQ2NjA4LzEv
SWdGSlM3M3FiVUNNX1hEWEpsVG1tWHBKWDBRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82
YmUwMjctN2U2ZS00Y2U2LThiMzEtMTg5ZGE5YTQ2NjA4LzEvSmpHeW1zZGF0VWk2
ZFN0ZllsSFpmTEhGWGhFLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRFbMA0GCSqGSIb3DQEBCwUAA4IB
AQB2raZpDDnuFnlzIA8zDwHjN1i46qG6AQr2hFDPbAMVY5bc5D+yO1qxL8UBZQiQ
1Tigq/qp3ykq9haDlI7M2O4+gJDxVQ51i60psagE6EmXTzdBP9Xc32SJCV1bB0Zl
mK3bSGR8jklP961pW+gtzoRgASKjltNIqCyhEW2qY0v4Kz11y62NH3W4Dz84Cxos
DVf6j5S1CbgEoyzqRn4aGZqZOTCb3G2ZOHUmGdeXNRJLKW1I+bznI9h2tOUf95EN
Fza7lHU3dG6U56W7fITS9dtdtLFDzXU/B2gZXrIBd3mqX577WWgX06Tro1rpcmpG
9g/nLJthuQHY1S6diFf5gTYd
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:34:19 2021 by LibreSSL & rpki-client.