Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/bd/09d340-f3ea-4aef-b7d2-b1276e45c788/1/nBEZtq7BZEeY6dk97gm8occHODE.roa (download)

Subject key identifier:   9C:11:19:B6:AE:C1:64:47:98:E9:D9:3D:EE:09:BC:A1:C7:07:38:31 
Authority key identifier: 29:33:7F:D8:DB:86:4B:F3:EB:FC:BE:79:9D:8A:F9:A2:30:44:9B:1A
asID:                     AS834
Prefixes:
    1: 213.5.128.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/bd/09d340-f3ea-4aef-b7d2-b1276e45c788/1/nBEZtq7BZEeY6dk97gm8occHODE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783100 (0xbf2fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29337fd8db864bf3ebfcbe799d8af9a230449b1a
        Validity
            Not Before: Sep 22 05:53:34 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9c1119b6aec1644798e9d93dee09bca1c7073831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:62:c5:a1:de:27:3c:44:85:f6:6f:8b:b3:bf:
                    a6:af:a9:60:41:d2:67:93:d3:b7:d3:e0:cd:b6:1f:
                    cb:77:9b:89:e0:eb:8f:90:fe:02:f9:bd:c4:e7:3e:
                    ae:20:74:21:62:a8:be:94:e6:70:ef:b5:14:07:dd:
                    6b:d8:54:e3:30:e2:88:82:06:63:ec:d5:69:7d:89:
                    21:c4:24:b7:76:6c:8e:7c:97:bf:26:27:e9:24:5b:
                    66:dc:12:3d:bd:61:84:2d:e1:b8:d2:cf:88:a4:bb:
                    01:75:2b:81:a8:36:00:4f:27:bd:48:5b:d3:78:07:
                    e6:05:bf:e3:89:0b:1c:fb:b8:8b:67:27:41:5b:52:
                    aa:0d:1a:ef:5c:a7:30:25:39:ac:e7:03:28:e3:10:
                    0a:77:0a:05:32:03:d8:87:05:76:30:98:ce:db:dd:
                    6e:50:13:54:ed:a6:67:63:f5:a3:a2:a6:6d:0e:5e:
                    5e:c7:e1:a4:14:56:18:9e:79:28:b9:17:d8:0c:e1:
                    fe:4d:43:bd:84:cc:7e:29:2e:ae:f9:a6:90:25:50:
                    09:27:88:df:0e:4c:0e:0c:a8:30:aa:bc:d9:9c:07:
                    c4:c6:1f:a9:1c:8f:7f:c7:72:57:76:b0:af:c5:f2:
                    a6:cb:59:c0:15:ff:50:f6:42:bd:78:8e:ce:25:9d:
                    3e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9C:11:19:B6:AE:C1:64:47:98:E9:D9:3D:EE:09:BC:A1:C7:07:38:31
            X509v3 Authority Key Identifier: 
                keyid:29:33:7F:D8:DB:86:4B:F3:EB:FC:BE:79:9D:8A:F9:A2:30:44:9B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTN_2NuGS_Pr_L55nYr5ojBEmxo.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/09d340-f3ea-4aef-b7d2-b1276e45c788/1/nBEZtq7BZEeY6dk97gm8occHODE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/09d340-f3ea-4aef-b7d2-b1276e45c788/1/KTN_2NuGS_Pr_L55nYr5ojBEmxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.5.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:f8:1b:c9:6a:19:14:21:f8:b2:de:b8:c0:30:e1:8d:a8:ee:
         8a:b4:5e:82:c3:8a:eb:54:a3:fb:61:75:c0:b6:49:a4:d3:18:
         37:fb:b1:64:d2:95:2b:08:43:23:49:c2:b7:52:09:bf:a4:0c:
         69:f4:6d:42:39:fd:11:9d:ae:b0:dd:7e:c7:07:08:23:22:2a:
         d8:7e:ab:fe:0d:59:6e:cc:27:88:99:34:bc:ee:99:3f:6a:30:
         e7:f7:ef:ab:bd:83:c3:cd:7b:45:9e:61:41:08:93:d8:d3:5d:
         81:2e:24:81:10:c6:f6:8a:b9:20:63:6d:66:83:ba:dc:8e:ce:
         42:29:5a:44:6d:e1:94:1c:dc:ee:2d:3a:33:ad:67:85:fa:6c:
         f8:0c:ea:23:2b:18:73:4b:bc:39:00:65:1f:2a:f4:5f:d9:81:
         8e:b5:a1:87:69:fc:06:71:b4:85:f5:2f:5c:5a:3b:64:08:54:
         25:a3:92:d6:15:e6:9f:05:8b:63:c2:1f:79:9b:a9:7d:b3:ef:
         b4:8c:fe:86:f7:33:c1:55:8f:9a:de:31:a9:f5:cf:42:ca:bd:
         9c:23:23:bd:2b:2f:4a:b0:fd:b3:01:85:1d:71:ad:64:62:d7:
         26:aa:63:5d:dc:72:65:18:3a:c4:a1:61:79:d1:a0:9e:da:fd:
         c1:97:1b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:58:56 2021 by LibreSSL & rpki-client.