Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/bm3nLI86jU9SG_wofOSQhnXPWNI.roa (download)

Subject key identifier:   6E:6D:E7:2C:8F:3A:8D:4F:52:1B:FC:28:7C:E4:90:86:75:CF:58:D2 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS200361
Prefixes:
    1: 212.21.134.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/bm3nLI86jU9SG_wofOSQhnXPWNI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96666506 (0x5c3038a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 02:43:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6e6de72c8f3a8d4f521bfc287ce4908675cf58d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:45:e5:df:88:4f:52:7c:c3:b7:d7:b8:e4:2c:
                    c8:0a:14:22:b4:85:b9:15:f9:74:d9:d2:0d:a3:79:
                    37:a7:67:85:70:8b:48:f7:57:10:7a:66:ea:64:c8:
                    f6:53:6a:12:46:33:17:35:db:03:2d:d8:ef:8d:6d:
                    db:06:82:04:72:b8:eb:6c:20:28:0e:d4:59:6f:73:
                    40:ca:f6:0a:1c:af:ff:94:0f:7c:1c:aa:01:e6:38:
                    f2:25:89:ef:58:bb:cf:bb:50:97:67:03:72:e2:77:
                    3e:28:81:2d:84:fb:42:61:9c:3d:26:7b:a3:a7:91:
                    5e:11:03:52:c4:c6:70:8f:a1:d6:fe:3b:a1:46:19:
                    ec:c1:76:28:08:52:67:37:9e:d0:62:97:69:77:fe:
                    09:e8:85:e6:0e:cc:80:32:53:9b:d4:b7:a0:23:cc:
                    ba:b8:ed:01:d6:1d:87:8f:6c:9e:26:b8:e9:1f:64:
                    fb:3e:a2:4c:fe:18:0b:d5:a9:5b:2c:4f:49:54:20:
                    b1:7b:d1:e5:52:7c:c0:70:a1:03:46:bd:39:1b:8f:
                    3a:16:53:84:01:85:24:88:9e:13:c0:48:dc:64:3b:
                    76:2c:1f:ce:d1:50:4d:2a:15:40:f5:db:7c:37:15:
                    91:82:94:db:20:c3:42:f3:e8:be:e9:c3:ce:c4:94:
                    e1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6E:6D:E7:2C:8F:3A:8D:4F:52:1B:FC:28:7C:E4:90:86:75:CF:58:D2
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/bm3nLI86jU9SG_wofOSQhnXPWNI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.21.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:43:36:e5:44:8d:ec:6b:fa:3b:d2:21:6b:7c:90:13:10:ad:
         b1:b0:5a:89:6d:84:46:1a:97:3b:fa:60:91:5c:00:f4:c0:07:
         26:d9:5f:98:81:e4:ab:a8:f3:97:52:07:03:c7:89:f2:53:a1:
         be:9a:b3:5d:ee:b5:85:2d:f0:45:6a:fe:ab:0b:57:78:96:84:
         1f:4f:66:17:d2:94:95:da:70:8c:59:d0:5c:5d:49:48:20:82:
         47:2e:9e:8a:83:59:12:23:9b:fe:3b:a6:df:69:39:7d:70:b1:
         a8:ec:51:8d:05:9d:e9:f9:99:4a:b0:ba:e2:fe:7a:c4:93:ed:
         e0:f8:80:78:8f:ae:8b:cd:6c:1a:73:e5:59:72:71:e4:6c:85:
         15:10:10:c5:2f:b3:e8:98:1b:86:38:e4:1f:8b:e0:8d:be:39:
         f6:be:12:a4:fd:cc:3e:86:44:e2:63:e1:9f:5c:e0:c0:30:74:
         3e:93:05:17:f1:9e:85:ad:7e:60:a4:50:bc:8c:76:04:d8:a3:
         59:aa:5e:9b:b4:1b:24:71:88:cf:a5:ec:2c:a7:c2:17:41:e2:
         4b:94:e9:5a:e5:04:36:fa:d0:60:eb:d2:bc:b1:50:1f:30:22:
         33:7f:a0:9e:5f:1b:2b:c8:72:ab:7d:79:f5:d0:b0:9a:6a:93:
         b7:80:13:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:51:58 2021 by LibreSSL & rpki-client.