Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/oLIUCG0vgFnNJkNci1upu1OtLZY.roa (download)

Subject key identifier:   A0:B2:14:08:6D:2F:80:59:CD:26:43:5C:8B:5B:A9:BB:53:AD:2D:96 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS210058
Prefixes:
    1: 212.21.131.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/oLIUCG0vgFnNJkNci1upu1OtLZY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96736200 (0x5c413c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 02:43:31 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=a0b214086d2f8059cd26435c8b5ba9bb53ad2d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:f4:b0:d1:26:63:3d:ba:b1:8a:f3:1c:c1:
                    6e:e6:40:0a:d4:3f:73:35:18:49:2d:f6:65:22:b9:
                    c4:20:2b:85:d8:ac:f7:4b:8b:0e:7b:13:b4:ac:81:
                    d5:5d:68:2e:1f:5e:2a:fe:64:62:34:ed:0a:b2:de:
                    dd:3c:cb:53:99:78:57:fc:e1:87:38:f1:5d:95:e4:
                    ed:99:82:31:54:0c:e7:02:05:95:bb:fc:dc:cb:3c:
                    3b:fe:f4:55:06:f9:5e:8f:17:67:d9:7e:8a:a2:02:
                    13:c7:3e:0a:20:4b:93:53:cd:76:77:2e:b7:1f:be:
                    33:cb:91:be:0d:19:e0:a5:b8:16:60:f1:3c:11:8e:
                    c7:88:8d:34:5c:4b:9f:b9:17:50:55:51:b2:21:36:
                    90:a3:c4:94:8e:d8:4f:7e:ba:4f:4b:6b:6c:38:19:
                    6e:3e:ed:b7:b5:e5:86:8f:90:4d:82:fc:88:01:3e:
                    36:b0:ad:62:3e:02:63:4e:68:5f:25:60:83:35:91:
                    b1:ee:3b:09:72:85:22:f9:8e:7f:a3:ef:9a:c2:ff:
                    f0:1f:5a:0e:45:c1:9a:4a:a6:8d:59:48:52:1c:45:
                    df:13:6f:03:54:87:0c:6b:d3:9f:79:37:61:37:17:
                    7c:16:f2:f5:fb:49:a9:c1:f2:28:5e:ac:b9:82:b0:
                    99:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A0:B2:14:08:6D:2F:80:59:CD:26:43:5C:8B:5B:A9:BB:53:AD:2D:96
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/oLIUCG0vgFnNJkNci1upu1OtLZY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.21.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:d6:60:de:6a:9b:ee:0e:a0:e5:e7:8e:31:bc:5f:09:02:07:
         ec:5b:d7:d0:54:62:98:0c:ae:ab:8f:ed:90:77:77:25:50:e5:
         79:a6:92:05:bd:0b:d8:fd:a6:ed:94:00:1c:9d:c3:64:98:d0:
         7c:26:76:0b:bc:9c:45:38:23:e1:f1:5c:d1:19:9a:64:ba:ab:
         a9:16:35:54:11:dc:40:0b:a2:f9:ab:6d:e6:ec:ed:b9:42:7c:
         44:46:80:14:99:f3:3c:9d:1d:42:47:fd:30:bc:b4:29:03:0d:
         fa:22:5a:08:cd:2a:68:6c:7f:e3:a7:38:01:c8:2a:a8:52:9e:
         c1:b9:6e:01:50:a2:6e:2d:da:48:e8:e8:2f:72:10:39:65:5d:
         c1:5d:c3:ee:c1:9e:65:4b:b6:24:e6:90:00:70:63:8f:ab:a7:
         0c:c6:04:92:a5:bd:7f:b3:1a:11:3f:4f:16:05:a4:23:a1:04:
         8b:86:54:0c:fc:f7:5d:86:d7:8d:0a:15:75:11:ed:94:c6:c6:
         fc:bd:bf:c3:f6:95:1c:76:04:7b:e6:02:aa:b6:23:56:81:98:
         fe:1d:b1:6f:69:e4:dc:23:78:a6:11:df:52:f1:3a:cb:66:64:
         6c:87:21:37:38:a6:2e:cf:fa:59:af:4d:f4:c7:e4:73:f6:f6:
         6d:65:f3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:51:59 2021 by LibreSSL & rpki-client.