Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/9c/8bf8ea-d85b-454c-aa11-4df829296fc6/1/syU2vLXLdbczoKtHVdYkA2M6iAM.roa (download)

Subject key identifier:   B3:25:36:BC:B5:CB:75:B7:33:A0:AB:47:55:D6:24:03:63:3A:88:03 
Authority key identifier: 1C:10:B4:BE:AB:E6:C2:BA:2B:3B:A4:83:D8:F8:CF:1C:A1:C7:35:B7
asID:                     AS399471
Prefixes:
    1: 193.176.128.0/23 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/9c/8bf8ea-d85b-454c-aa11-4df829296fc6/1/syU2vLXLdbczoKtHVdYkA2M6iAM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63532727 (0x3c96eb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c10b4beabe6c2ba2b3ba483d8f8cf1ca1c735b7
        Validity
            Not Before: Sep  3 11:57:39 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b32536bcb5cb75b733a0ab4755d62403633a8803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:71:8d:54:fc:ae:ae:b2:d2:d3:e5:a0:f1:
                    8e:93:fb:88:8e:1c:6d:b7:23:b3:59:9e:5f:41:a7:
                    de:5d:cc:3f:05:f6:47:38:93:92:b2:7d:dc:07:e8:
                    2f:57:51:34:3e:3f:4e:59:aa:27:e1:b1:94:92:81:
                    e5:b9:52:54:be:d8:4d:11:b9:45:d1:d5:73:95:9e:
                    e4:02:d8:58:80:d3:69:4e:15:9e:02:f7:28:b5:b9:
                    a7:20:8e:b1:16:75:4a:f2:af:e8:bd:39:8e:b6:d0:
                    b3:5e:c8:2e:72:a5:97:8d:4d:9b:b1:59:fb:99:57:
                    ef:51:eb:aa:b4:97:ee:4a:b2:89:d8:32:3e:7d:07:
                    7e:0e:1a:a5:5e:28:8e:56:43:e8:b8:dc:c7:bd:8e:
                    55:06:4e:aa:7e:e4:d5:e2:1e:b8:6b:7a:f2:8a:ff:
                    80:3c:06:96:fb:b4:aa:03:f8:e2:f4:df:36:1d:d7:
                    cf:d0:42:a7:38:8b:8a:3b:29:8c:61:a4:54:07:cf:
                    fd:7a:03:af:40:ad:6f:5e:f1:c9:ac:d8:0d:c6:b4:
                    6e:57:81:78:d7:2d:36:8c:55:ad:a2:fe:dc:c7:90:
                    ce:eb:92:38:16:df:25:b7:11:76:f1:dd:45:ff:c5:
                    cd:ce:4e:ac:79:17:9c:de:9c:01:7f:5d:a3:e1:be:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B3:25:36:BC:B5:CB:75:B7:33:A0:AB:47:55:D6:24:03:63:3A:88:03
            X509v3 Authority Key Identifier: 
                keyid:1C:10:B4:BE:AB:E6:C2:BA:2B:3B:A4:83:D8:F8:CF:1C:A1:C7:35:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBC0vqvmwrorO6SD2PjPHKHHNbc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8bf8ea-d85b-454c-aa11-4df829296fc6/1/syU2vLXLdbczoKtHVdYkA2M6iAM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8bf8ea-d85b-454c-aa11-4df829296fc6/1/HBC0vqvmwrorO6SD2PjPHKHHNbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.176.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:a4:f4:77:a0:82:3d:e7:80:f9:07:f7:36:b8:ed:f0:21:a9:
         df:85:bb:00:11:93:3f:84:e1:c2:e2:eb:cb:f4:86:97:1f:96:
         31:3d:b1:08:99:0a:82:1f:7b:f1:b2:7a:45:99:05:62:19:4e:
         d0:e5:9b:d9:75:fb:a8:a7:8f:ce:e4:cc:23:c2:34:1b:de:51:
         dc:13:09:44:fc:5f:00:5d:e3:b9:c1:b7:e0:2b:a3:82:c4:17:
         a5:b7:8d:ac:f4:6e:9d:e8:c4:06:60:a7:34:9d:95:dc:0b:d8:
         76:f1:ff:16:89:bf:75:a9:6d:6e:1d:1a:f7:bd:e2:03:db:78:
         37:63:3e:24:20:37:1a:ad:df:fd:a0:5f:d8:42:28:76:e5:ab:
         0e:1e:df:eb:51:c3:14:d7:d2:59:5b:d9:dc:20:93:d1:8f:1f:
         e6:6e:de:fe:08:0f:cc:46:83:69:ea:17:e1:8c:1e:43:b9:0d:
         f7:ac:f3:4c:7c:ea:f6:fd:6a:6a:5c:b6:bd:dc:56:35:c4:29:
         3a:d9:bc:e4:1f:f5:e9:61:d9:ca:fa:bb:9d:79:fd:37:25:04:
         71:6e:a5:15:35:ee:28:32:5f:11:2d:b2:0c:7d:19:62:db:a3:
         09:b0:fe:8f:81:15:42:25:c6:84:a6:23:4b:89:18:82:61:42:
         33:2e:be:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:49:24 2021 by LibreSSL & rpki-client.