Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/feSMnKDIaUBhs3eb3VZgZ8qXZ20.roa (download)

Subject key identifier:   7D:E4:8C:9C:A0:C8:69:40:61:B3:77:9B:DD:56:60:67:CA:97:67:6D 
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
asID:                     AS398395
Prefixes:
    1: 193.25.252.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/feSMnKDIaUBhs3eb3VZgZ8qXZ20.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78162404 (0x4a8a9e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
        Validity
            Not Before: Mar 20 19:01:12 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=7de48c9ca0c8694061b3779bdd566067ca97676d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8c:76:91:e6:93:76:9e:4f:0a:1f:c1:da:69:
                    d0:24:a5:42:04:3d:2d:2c:33:c1:fc:d0:aa:10:37:
                    d7:be:21:0f:79:55:12:95:69:fe:c1:6e:8b:bb:c8:
                    79:c0:c4:e4:2d:b8:84:73:4c:28:59:d0:60:56:a4:
                    e5:74:17:e0:6c:3a:0e:c2:28:16:67:25:0b:5a:78:
                    44:1b:48:bc:37:64:bd:78:ff:4e:6d:3f:d8:0a:21:
                    c1:49:9f:cd:d1:4e:0f:a1:c6:9c:4d:34:88:89:4f:
                    bc:18:66:cb:81:19:6c:f3:94:1b:06:39:10:c7:1c:
                    93:65:8f:87:4f:3a:b4:7c:7c:c6:1f:6a:d8:c6:a6:
                    ec:8b:e8:3b:25:4a:f9:c8:fd:f5:d0:6c:1d:53:43:
                    a6:30:b3:27:5b:d4:e3:6b:0c:ac:11:43:81:77:69:
                    fc:1f:e8:c1:1c:43:13:94:9d:69:a9:04:d7:b1:47:
                    4a:55:e3:7b:94:cb:94:5b:22:a5:52:69:ad:68:d3:
                    1f:1c:79:a4:ff:61:37:5c:1c:60:73:00:85:9d:01:
                    f6:72:85:0e:5f:10:36:c4:d5:6d:21:08:7c:e7:1b:
                    2b:39:5f:53:4c:26:d2:ee:5d:48:31:67:de:dd:01:
                    6d:12:d8:b3:8b:b2:8e:aa:6e:6f:61:72:6d:4c:a7:
                    17:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7D:E4:8C:9C:A0:C8:69:40:61:B3:77:9B:DD:56:60:67:CA:97:67:6D
            X509v3 Authority Key Identifier: 
                keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/feSMnKDIaUBhs3eb3VZgZ8qXZ20.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.25.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:0e:7a:1d:6c:1f:ca:c4:7e:b7:a7:ee:2f:94:bf:33:39:50:
         c4:20:da:73:61:5e:43:62:f0:c7:93:9d:ec:ed:2d:8b:6e:0f:
         5b:1c:33:b1:8e:42:13:1b:9c:32:d5:f2:f0:b7:f9:09:c8:15:
         4b:d1:d3:4c:6c:c6:c6:2b:a6:89:63:35:88:a7:3e:f2:cf:c0:
         20:dc:cf:dc:56:36:c6:b2:52:ea:14:3d:b0:76:5f:f6:bf:42:
         86:67:00:52:6b:53:9b:8a:4d:7c:44:cf:78:e3:8d:31:8b:a0:
         a5:88:c9:99:28:7d:93:33:13:56:b8:6e:f8:5f:f5:78:9f:17:
         95:35:80:c9:1b:f9:99:d1:d8:a8:d9:6d:35:46:14:78:af:a6:
         22:4c:de:68:6f:f3:2a:e0:2f:16:0a:3d:4c:ce:47:39:d5:79:
         76:99:8f:16:ac:df:f5:b0:dd:5a:13:1a:82:e8:7d:4e:13:5c:
         03:64:18:84:87:9f:6f:bd:d7:e5:8f:38:b0:61:3a:d1:f3:e6:
         95:10:93:92:2b:93:bc:e1:59:10:51:c6:40:8d:3c:6c:86:45:
         15:46:b6:26:a8:02:1d:85:fc:0a:f2:7c:49:c7:9a:2c:53:44:
         39:dc:70:21:79:a0:40:d4:57:18:c1:c4:34:7c:36:bf:cb:04:
         73:15:de:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:40:42 2021 by LibreSSL & rpki-client.