Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/Qh-QdxsozbgHSWm9Ee8wchGWA9c.roa (download)

Subject key identifier:   42:1F:90:77:1B:28:CD:B8:07:49:69:BD:11:EF:30:72:11:96:03:D7 
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
asID:                     AS394201
Prefixes:
    1: 109.235.96.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/Qh-QdxsozbgHSWm9Ee8wchGWA9c.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81882997 (0x4e16f75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
        Validity
            Not Before: Jan  1 04:02:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=421f90771b28cdb8074969bd11ef3072119603d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:64:4e:3c:60:c2:c0:eb:ea:dc:7e:0f:8a:f1:
                    a7:f7:08:e9:e4:b4:69:de:09:dc:39:64:de:48:c7:
                    1a:c4:bc:13:38:f8:4a:e3:12:5d:63:92:6a:23:90:
                    9e:f8:16:27:49:62:2f:37:d9:3a:33:ea:64:25:2f:
                    7c:57:02:1f:63:89:60:55:ea:76:11:f1:7b:8e:6c:
                    1b:f2:24:3b:18:a3:02:f9:00:6f:51:d7:8a:5c:8e:
                    a4:02:02:67:a9:7b:05:87:71:eb:c2:a5:fd:43:d6:
                    e5:cc:8a:5c:a7:18:32:93:ab:a8:40:99:27:06:34:
                    15:25:79:b6:59:e4:6e:4f:ef:67:bc:07:b6:0f:57:
                    94:82:11:e8:ca:15:bf:a3:b3:a9:fc:b7:01:c9:5e:
                    d1:d0:6c:e8:9a:44:ba:58:bd:f6:34:51:df:ad:64:
                    7a:c0:d1:d1:4c:f8:ad:5f:ef:14:44:85:2d:07:9a:
                    70:2f:d2:8a:25:18:58:84:c6:db:5c:53:da:30:62:
                    85:a4:52:2b:4c:73:44:5d:03:b2:c2:ec:30:ae:37:
                    a0:2a:51:eb:84:ff:5c:56:02:da:82:f3:a0:89:82:
                    44:24:9f:41:6c:72:aa:91:b4:07:04:c7:f7:bb:b4:
                    1c:c0:2e:06:9b:25:95:e6:e5:6d:86:e1:2c:69:8d:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                42:1F:90:77:1B:28:CD:B8:07:49:69:BD:11:EF:30:72:11:96:03:D7
            X509v3 Authority Key Identifier: 
                keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/Qh-QdxsozbgHSWm9Ee8wchGWA9c.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.235.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:80:6f:85:4f:2a:89:b4:da:07:42:6f:4b:37:d5:bb:b4:87:
         7f:19:76:4a:fe:ee:23:c9:7f:bb:a8:41:d5:91:d0:a7:82:c6:
         17:0e:a9:b7:1f:88:81:f6:1b:11:dc:ac:90:84:70:a2:da:1d:
         8c:fd:8d:18:40:ab:fe:38:b3:a2:27:db:88:dc:bf:9d:fd:59:
         33:88:1a:6f:f0:5e:7e:c4:2c:5d:63:28:66:01:a1:c3:81:e1:
         10:e6:e7:de:ba:45:e9:52:62:c7:3a:3b:35:36:27:0f:5d:94:
         a1:59:a5:84:d5:8f:c4:5d:00:0c:ea:1a:4d:23:a3:ac:70:67:
         54:ca:03:f3:71:b9:eb:05:7c:27:2f:55:c0:70:66:81:48:42:
         16:a4:f7:a3:98:56:84:5d:f2:b9:9f:d7:39:4f:d8:4e:26:d8:
         c7:de:ac:3b:0e:bb:fc:02:79:a3:b8:01:c9:75:d3:a7:9e:a1:
         0e:7d:8a:1e:b3:5c:e6:00:5b:45:1d:d9:45:9f:61:80:c5:9c:
         c4:b9:42:5e:6f:f3:13:fc:c0:1a:e1:d4:e6:41:4a:10:ec:34:
         d1:65:28:66:63:5d:a3:4f:54:79:cf:8e:4c:38:94:94:1e:a3:
         8b:95:0e:82:10:de:d7:ca:1e:cd:03:f8:85:b9:cc:0d:e7:38:
         48:24:43:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 06:27:44 2022 by LibreSSL & rpki-client.