Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/77/4c4cd2-6c70-4db9-94f6-b637381b4f79/1/XPvzLNmORz69TsM3HFCFbAdT_kQ.roa (download)

Subject key identifier:   5C:FB:F3:2C:D9:8E:47:3E:BD:4E:C3:37:1C:50:85:6C:07:53:FE:44 
Authority key identifier: 88:E8:E1:CA:FA:7B:60:48:59:84:0C:57:AF:48:E8:17:C3:27:F6:44
asID:                     AS399130
Prefixes:
    1: 185.104.191.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/77/4c4cd2-6c70-4db9-94f6-b637381b4f79/1/XPvzLNmORz69TsM3HFCFbAdT_kQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72047 (0x1196f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e8e1cafa7b604859840c57af48e817c327f644
        Validity
            Not Before: Sep 27 19:03:22 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5cfbf32cd98e473ebd4ec3371c50856c0753fe44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e4:cc:f3:21:51:49:87:6d:7d:ae:31:61:71:
                    cd:87:f1:2f:57:be:a5:98:c5:05:50:f7:ca:3d:6c:
                    cf:48:fb:e9:72:a4:9d:bf:1a:a5:eb:5e:fe:83:ff:
                    04:9a:68:04:64:fa:52:62:3b:2f:4d:82:a1:42:50:
                    bf:3e:20:9e:a0:d4:60:0f:d8:ec:9a:9f:dd:25:79:
                    7f:ae:c5:82:83:86:ae:5c:06:c8:46:d1:dd:49:53:
                    51:26:1f:36:62:79:84:50:e0:52:2e:e3:96:5e:26:
                    c7:7c:4c:56:ef:5d:e6:51:db:23:93:c6:10:f7:1d:
                    0c:0c:0c:c2:bc:86:1c:0d:a6:7a:59:57:89:d4:af:
                    4a:a1:93:db:83:7a:3c:d0:0f:55:67:d4:0e:f6:c6:
                    9a:72:a9:41:9d:53:bf:50:71:53:29:cd:67:1a:b4:
                    97:50:e7:4c:0d:a1:5d:1f:b0:dd:78:b9:cb:48:e5:
                    af:f6:e7:34:11:05:de:e0:61:a5:53:49:54:bd:87:
                    11:7f:5f:dc:92:74:02:2e:a7:1a:1a:d3:26:f7:5c:
                    c9:a9:37:a7:34:3f:05:48:52:a8:1c:a5:04:e8:21:
                    b6:ae:78:34:7f:a0:52:e4:15:a6:56:bc:81:b7:9a:
                    e6:d1:26:e8:19:a0:2a:6d:f7:65:c6:d7:67:17:8e:
                    bf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5C:FB:F3:2C:D9:8E:47:3E:BD:4E:C3:37:1C:50:85:6C:07:53:FE:44
            X509v3 Authority Key Identifier: 
                keyid:88:E8:E1:CA:FA:7B:60:48:59:84:0C:57:AF:48:E8:17:C3:27:F6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4c4cd2-6c70-4db9-94f6-b637381b4f79/1/XPvzLNmORz69TsM3HFCFbAdT_kQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4c4cd2-6c70-4db9-94f6-b637381b4f79/1/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.104.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:ca:8b:03:99:9c:4d:6b:41:a8:7b:7e:26:db:b7:b5:25:11:
         3d:3a:99:4b:84:0e:19:da:36:65:0c:36:e4:bf:ef:b2:da:50:
         66:84:c1:7b:75:ec:10:9a:99:1c:03:a7:d4:45:67:af:a5:7d:
         69:cf:fa:4a:9f:7f:58:75:60:d6:c4:4c:61:d2:06:9a:a5:e0:
         51:53:6a:55:a5:3a:59:ad:57:51:70:f9:8b:92:a9:99:a4:37:
         df:2f:e5:03:99:16:28:8c:a6:76:c2:08:3f:3c:6a:32:12:9f:
         44:da:82:86:85:01:3e:00:11:b0:92:83:06:64:ee:8c:d3:03:
         a8:1c:a2:e6:05:50:52:c4:ff:7a:0b:fb:c7:d7:70:5a:8f:90:
         64:85:ee:93:7e:91:9c:05:b6:fa:44:81:92:cc:de:f0:d6:08:
         1c:99:dd:2b:04:59:4a:78:99:a3:c4:d9:68:4f:03:cf:78:87:
         aa:cb:f9:b8:d9:c4:2b:65:7b:0c:23:aa:2d:5e:e1:a5:8c:7b:
         6f:4f:b3:86:ed:09:2c:46:66:ef:25:0d:ce:34:6b:39:b1:30:
         04:28:12:9c:f7:73:1c:ad:cb:ea:c8:b6:b2:d1:fb:1c:70:5b:
         39:84:91:3c:5b:9e:e1:bd:0c:de:cf:1a:4e:64:3c:cd:f5:c5:
         75:9f:60:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Sep 29 21:55:17 2021 by LibreSSL & rpki-client.