Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_obtNUK6rwunv_4XdiinmuCCbH8.roa (download)

Subject key identifier:   FE:86:ED:35:42:BA:AF:0B:A7:BF:FE:17:76:28:A7:9A:E0:82:6C:7F 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS213279
Prefixes:
    1: 2.57.252.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_obtNUK6rwunv_4XdiinmuCCbH8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299199099 (0x11d56a7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Mar 22 16:09:24 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=fe86ed3542baaf0ba7bffe177628a79ae0826c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:03:89:bb:52:67:4b:ee:0f:66:fe:2a:a7:85:
                    60:22:bd:c5:89:4d:7a:8f:1e:5e:6c:b6:57:00:34:
                    69:cc:bc:2a:e2:d1:84:f1:b6:08:ac:f6:4e:14:0e:
                    d9:67:02:6a:0a:b9:63:3d:1b:1a:e5:0f:c0:c6:84:
                    80:21:7b:9b:15:77:6b:0a:5f:6d:b1:73:e8:0e:97:
                    1a:39:b7:97:89:ce:30:61:8f:bc:27:53:ce:65:ca:
                    49:22:17:b3:88:66:06:ab:1d:55:5f:bd:a7:6a:2d:
                    e8:93:75:a4:23:10:df:eb:4e:25:f7:a0:4f:7e:77:
                    4e:2f:7a:73:76:e1:d5:fe:37:4d:bc:df:dd:7c:36:
                    83:7d:48:4b:7b:a8:ba:d4:bd:3f:0c:92:d7:d2:4c:
                    00:28:cb:88:07:b2:fc:0b:53:34:86:29:f3:a2:7c:
                    44:9a:c9:54:92:c4:01:23:8e:3a:53:dc:42:87:90:
                    c1:55:d3:04:41:d1:8d:7e:5f:02:6c:46:e9:87:b7:
                    8a:e4:85:b8:3b:60:15:2e:81:6d:90:cd:2e:fd:06:
                    f8:f3:7d:02:6b:76:bf:c1:da:bc:17:f9:7d:15:00:
                    dd:bf:c6:0c:79:f0:73:11:84:b5:f2:32:40:54:11:
                    be:bb:19:ed:f4:bc:8b:4f:63:5d:c8:03:dc:78:fb:
                    c8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FE:86:ED:35:42:BA:AF:0B:A7:BF:FE:17:76:28:A7:9A:E0:82:6C:7F
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_obtNUK6rwunv_4XdiinmuCCbH8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:85:55:2d:5e:f4:d9:03:47:14:00:58:b8:d3:9a:91:f9:3e:
         a6:53:27:04:f3:2e:04:60:55:61:72:5c:43:b3:d9:09:18:b4:
         8a:ed:5f:aa:0f:c6:ed:06:8d:24:91:93:68:47:1d:33:e7:42:
         a5:be:e8:ff:3d:1a:60:3f:fe:ef:89:fa:af:e0:0d:7c:11:60:
         da:65:6f:f5:1b:b2:ac:cb:c1:4a:f3:a9:7d:ac:47:77:ee:df:
         72:9a:64:29:77:e6:c8:ee:6b:e0:48:7d:01:23:0d:0d:c4:16:
         0a:f2:16:02:d7:af:73:c9:12:2b:1c:f0:c5:04:cf:dc:1d:f6:
         61:a5:d0:5f:88:dd:bf:b8:ba:e3:82:7e:6f:45:e1:9e:9e:da:
         6e:11:7e:09:63:f7:3c:81:b1:14:b9:e2:8a:ea:fb:43:d2:e0:
         d3:d6:aa:d4:3a:20:1b:12:9a:86:d3:3b:d4:55:33:bd:7b:e7:
         72:bd:f9:cf:fd:25:17:5c:93:23:ee:96:40:bb:d0:8f:b4:56:
         e6:3d:91:5d:50:64:e5:0e:1d:f3:b2:17:e2:2a:bc:4a:f4:17:
         82:0a:6a:24:54:fa:c1:18:e5:5e:5a:e9:93:37:ed:a3:8a:32:
         0f:76:19:3a:fa:5e:d7:e1:55:11:37:db:53:7c:61:1d:b8:d4:
         84:8a:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:04:57 2021 by LibreSSL & rpki-client.