Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/Yjt46psEWBj7Hw7QApZYdMdB99g.roa (download)

Subject key identifier:   62:3B:78:EA:9B:04:58:18:FB:1F:0E:D0:02:96:58:74:C7:41:F7:D8 
Authority key identifier: 14:0E:CB:72:FF:00:39:8D:36:42:EC:23:F2:12:AD:A0:EA:72:06:6D
asID:                     AS400061
Prefixes:
    1: 31.216.59.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/Yjt46psEWBj7Hw7QApZYdMdB99g.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6995925 (0x6abfd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140ecb72ff00398d3642ec23f212ada0ea72066d
        Validity
            Not Before: Oct  3 06:23:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=623b78ea9b045818fb1f0ed002965874c741f7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:6e:e6:86:49:5f:9f:4c:68:ba:d0:31:29:
                    9c:7d:f1:ea:6f:8e:16:56:0b:ad:f1:e6:18:8f:f0:
                    59:e3:64:e9:d8:d0:56:f5:44:0c:13:e1:f5:8e:ed:
                    78:6d:b6:07:e9:75:93:06:c3:bc:e8:77:14:17:e5:
                    19:b0:53:b1:c2:d8:32:10:60:3c:5a:e3:76:63:17:
                    f0:9d:86:54:48:01:5d:e3:57:73:9f:5a:cb:f2:a2:
                    9b:f8:31:64:91:d8:5f:81:9e:1a:7a:9b:9f:c2:ca:
                    16:62:4f:b2:e6:d8:83:18:6e:51:0e:56:6f:d9:2c:
                    f0:17:f1:70:fa:dc:69:64:2f:42:d3:93:dd:3b:df:
                    6c:00:8a:ce:fb:41:1b:cd:1d:27:a6:8b:bc:66:b2:
                    92:dc:dc:d0:2e:86:da:aa:46:5d:54:10:4b:4a:8e:
                    96:57:1a:56:6e:60:20:ae:80:74:07:98:a9:45:f1:
                    41:80:5a:30:20:22:45:b3:f4:1d:8d:8e:30:be:85:
                    f2:b5:3a:2d:9f:be:30:4a:bd:52:d8:29:59:67:0c:
                    b9:1c:6a:26:cd:c0:6e:b0:79:05:07:91:b0:cb:41:
                    67:8c:70:20:3d:8a:fd:e4:c1:69:2d:5d:4b:04:b2:
                    8f:06:81:38:27:87:1f:24:db:68:74:cc:03:60:54:
                    ea:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                62:3B:78:EA:9B:04:58:18:FB:1F:0E:D0:02:96:58:74:C7:41:F7:D8
            X509v3 Authority Key Identifier: 
                keyid:14:0E:CB:72:FF:00:39:8D:36:42:EC:23:F2:12:AD:A0:EA:72:06:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FA7Lcv8AOY02Quwj8hKtoOpyBm0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/Yjt46psEWBj7Hw7QApZYdMdB99g.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/FA7Lcv8AOY02Quwj8hKtoOpyBm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.216.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:a8:92:9d:c7:5d:94:d4:54:50:51:73:49:b8:b9:f6:6b:aa:
         8d:2e:77:c3:f8:70:0b:5a:fb:36:73:88:20:19:d2:5e:c8:f5:
         4d:3f:66:a1:16:34:77:57:ef:d0:23:48:3a:1f:01:24:f7:b9:
         6f:b3:5a:a3:d9:49:d7:ae:48:0e:11:05:94:28:0c:5a:28:da:
         d5:d7:a7:e1:57:1e:b8:84:f0:07:6a:af:a8:ea:b9:b4:b8:2b:
         54:2a:7a:3b:19:cb:80:f1:24:88:56:ba:d6:4a:ec:35:0c:2e:
         2a:86:c3:9d:af:41:c5:b3:b4:53:7e:7a:56:fa:e9:66:a0:a6:
         40:20:2f:2b:a4:06:bd:05:0a:6c:68:37:41:3d:83:76:41:5a:
         18:55:4d:ef:01:86:ff:0c:b1:c1:d5:7c:4f:71:9e:c7:4c:fa:
         31:8f:9c:56:01:34:cd:36:ee:ff:c5:6a:e2:c8:e0:26:be:2a:
         d5:84:f8:34:36:e2:6e:09:1f:37:41:2e:55:64:10:1d:22:49:
         fc:cc:47:49:fd:d8:a5:2b:60:db:93:dc:a4:85:ff:62:5a:83:
         3b:43:0a:cf:91:80:e3:25:93:8d:9c:ca:c7:29:f4:61:5e:44:
         6e:63:ba:16:f2:b1:f7:d5:ea:45:c4:bc:0d:e3:e6:3a:ec:bb:
         0e:a1:8c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Oct 3 08:48:12 2021 by LibreSSL & rpki-client.