Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jOmINylE7N_PDdfJUjfFEI_75mg.roa (download)

Subject key identifier:   8C:E9:88:37:29:44:EC:DF:CF:0D:D7:C9:52:37:C5:10:8F:FB:E6:68 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS213018
Prefixes:
    1: 2.57.253.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jOmINylE7N_PDdfJUjfFEI_75mg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299141564 (0x11d489bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Mar 22 16:09:23 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=8ce988372944ecdfcf0dd7c95237c5108ffbe668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:bf:87:6e:2f:a2:05:b2:39:4b:15:6b:0d:
                    32:2c:60:44:55:22:e2:d0:44:b3:44:cd:a0:00:91:
                    30:5f:73:c3:7e:04:51:72:e5:10:1e:40:88:68:34:
                    63:ef:61:4a:11:e6:f6:d7:7d:b7:83:ee:e4:1b:7a:
                    42:eb:98:a2:a8:0f:e7:eb:14:4f:3b:3d:27:17:1a:
                    70:fd:24:49:dd:13:c0:82:bf:d2:57:c7:78:f4:b6:
                    db:09:a3:f9:ba:4b:9c:b5:ae:f0:91:9c:ba:fb:b8:
                    f2:7f:1f:0b:5b:86:22:9c:c5:30:59:aa:f7:c1:1b:
                    a5:bd:1f:f1:72:6a:9f:0e:5f:66:a8:e8:cf:9c:5d:
                    a1:bc:03:64:9e:6f:5a:f7:ad:c2:ca:c8:5e:fb:ae:
                    dd:6e:5f:53:bd:71:ff:98:27:32:10:77:fd:42:50:
                    23:00:f0:72:8c:05:09:67:c2:7e:05:28:7b:67:dd:
                    8a:0d:86:41:a8:35:63:9c:c9:e0:17:90:85:f3:26:
                    d0:53:d9:d4:50:73:14:03:e4:ad:3f:06:7e:f4:56:
                    16:1f:c8:c5:46:b3:f0:48:dc:50:00:11:e2:1a:7f:
                    6a:71:17:a7:27:49:f9:d3:f8:0c:a7:1b:dd:06:45:
                    4e:bb:07:5e:41:4f:62:af:c0:a1:b5:98:66:8c:48:
                    90:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8C:E9:88:37:29:44:EC:DF:CF:0D:D7:C9:52:37:C5:10:8F:FB:E6:68
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jOmINylE7N_PDdfJUjfFEI_75mg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:fb:ef:54:fb:06:fd:90:f2:5d:f0:c0:80:3d:dd:83:a6:b2:
         80:4e:eb:25:de:e7:30:b1:27:6b:8c:db:74:4d:ac:7e:a4:13:
         3c:ec:6f:8a:37:4c:85:f1:7f:3a:9f:46:2c:a2:d8:5f:d9:6e:
         6a:76:c2:41:52:e3:c4:c3:be:43:09:b2:0c:d2:e9:d9:27:c2:
         04:f7:bd:91:01:48:56:f1:88:8a:e4:a2:ab:38:ed:0e:cc:c4:
         03:d0:00:07:f5:ff:9e:a9:77:67:0b:cb:0f:3f:ea:2e:1b:ca:
         eb:30:9f:34:a7:7b:48:fd:ae:ba:67:e7:55:5c:3d:2c:13:2e:
         1e:99:93:43:1a:e0:9e:aa:25:9d:3a:13:65:8b:da:e2:b9:3a:
         1e:96:b9:41:c3:6e:8e:67:49:c5:27:0b:8a:73:77:f5:df:41:
         90:ab:dd:d5:9d:fe:8d:ac:b6:d8:df:01:25:e8:eb:86:e5:6a:
         ef:b7:33:b3:3f:8d:b5:9d:3c:6f:28:e0:1a:07:9a:17:67:a1:
         fb:4e:5b:69:e4:b9:28:c9:2a:eb:70:fc:41:68:08:05:c7:48:
         4d:94:be:95:6d:a8:4e:73:9c:6a:07:be:5e:7e:a5:a4:5d:29:
         6e:09:93:a9:d3:48:a6:62:2d:00:c0:83:31:cc:04:21:52:6b:
         b1:68:52:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:05:00 2021 by LibreSSL & rpki-client.