Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/jbqKvprzLqZ_lFS5O7QLAro7YIM.roa (download)

Subject key identifier:   8D:BA:8A:BE:9A:F3:2E:A6:7F:94:54:B9:3B:B4:0B:02:BA:3B:60:83 
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
asID:                     AS834
Prefixes:
    1: 193.106.196.0/22 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/jbqKvprzLqZ_lFS5O7QLAro7YIM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851268774 (0x32bd54a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
        Validity
            Not Before: Sep 24 14:13:14 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=8dba8abe9af32ea67f9454b93bb40b02ba3b6083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:93:5c:95:5a:7e:dc:16:01:89:30:54:9e:e4:
                    57:45:8f:49:fa:b9:7e:a3:c2:0f:33:3b:eb:8e:fe:
                    ac:40:e1:57:f5:9a:75:98:a9:18:28:29:28:dc:58:
                    a2:c4:a8:83:ce:df:fb:82:84:a9:92:45:6e:52:8f:
                    44:6c:40:7d:10:b7:65:af:25:b5:42:a0:f7:5f:84:
                    ce:2c:ba:35:37:0e:42:03:d5:d4:6b:d5:11:c9:0a:
                    98:4c:bb:00:6e:e6:59:a4:ab:a0:26:da:47:81:4c:
                    fd:be:88:f5:a2:3d:9a:e9:1f:50:0a:53:0d:dd:3a:
                    40:97:c4:2c:9e:ff:e0:fa:6e:cc:d1:e4:bf:f1:8c:
                    09:cf:ff:23:9b:8f:b6:af:d8:b4:e7:dc:23:a1:18:
                    a9:f0:8d:0e:30:0f:d8:38:ce:34:17:e9:58:ab:5a:
                    d9:bc:0a:39:05:29:e5:92:e3:67:81:0a:48:39:7a:
                    c0:19:13:af:c8:c7:f5:8f:95:36:5b:35:7b:e9:00:
                    a5:e8:5d:82:95:2e:ab:b9:13:42:5f:72:40:ba:8b:
                    1f:6c:1d:55:3b:89:8c:e0:d3:d6:42:06:c2:c1:80:
                    f6:12:0a:cd:d4:53:d7:2c:9d:ef:6b:89:87:72:f5:
                    09:8e:92:e6:ab:40:18:81:d0:80:60:0d:ab:48:de:
                    9c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8D:BA:8A:BE:9A:F3:2E:A6:7F:94:54:B9:3B:B4:0B:02:BA:3B:60:83
            X509v3 Authority Key Identifier: 
                keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/jbqKvprzLqZ_lFS5O7QLAro7YIM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.106.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:67:9e:9d:11:72:31:36:49:ba:67:05:aa:1e:1c:40:55:a1:
         de:68:12:8d:71:5c:71:ea:e0:08:84:b1:3a:31:d3:a8:8c:d5:
         79:35:80:c2:89:69:10:e0:71:4c:3d:d8:b2:83:a1:ef:85:bf:
         47:e6:f5:51:09:16:60:9c:57:1b:7f:64:62:c7:e8:18:b6:92:
         2c:20:62:4d:67:5a:7a:0b:e1:83:b3:bd:2f:ce:75:d6:64:e9:
         27:da:46:b7:e8:04:9f:ac:f9:ca:46:60:b9:2b:04:a0:f4:38:
         87:92:40:d4:14:49:f6:80:b6:07:4c:29:45:d3:ff:54:04:b1:
         f5:76:6a:1c:fb:9d:82:b0:0a:43:f9:c6:6e:3e:98:90:64:8a:
         5e:1d:61:d6:2b:9c:88:77:18:0a:c3:87:61:cd:eb:20:8b:a8:
         79:81:f2:63:92:4d:d5:1c:1a:6b:5c:e3:3b:91:3e:5e:6b:d9:
         a1:45:75:8b:09:37:4e:f6:03:02:b0:9c:26:a4:f4:76:aa:b2:
         cd:cd:e8:c3:85:c3:fe:cc:cd:0c:81:6b:2c:2e:9d:6b:3a:98:
         5e:73:f2:b6:3c:4d:1b:73:6f:22:68:a5:e9:a7:ed:0c:62:70:
         80:42:2b:12:4e:7d:67:d9:d3:8e:db:9f:dc:82:a3:6d:88:96:
         a2:4a:8c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:45:38 2021 by LibreSSL & rpki-client.