Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/zZCfZNuXtuyU7bjmMHOnumUvUlU.roa (download)

Subject key identifier:   CD:90:9F:64:DB:97:B6:EC:94:ED:B8:E6:30:73:A7:BA:65:2F:52:55 
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
asID:                     AS396982
Prefixes:
    1: 217.169.118.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/zZCfZNuXtuyU7bjmMHOnumUvUlU.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23027058 (0x15f5d72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
        Validity
            Not Before: Jan  1 12:00:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cd909f64db97b6ec94edb8e63073a7ba652f5255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:31:88:fe:82:1f:bf:ba:4b:bd:f3:29:6b:7b:
                    f3:e8:0a:39:45:8c:23:de:e1:3b:db:0a:97:fc:bf:
                    40:13:4d:ae:53:53:11:8e:ee:a3:1b:8d:27:c2:21:
                    45:96:2d:76:df:ef:af:e2:86:ac:a5:7b:ec:b8:0b:
                    64:ce:e0:51:2b:68:f5:cd:11:3a:f6:3f:a6:9c:ae:
                    58:5b:0c:c4:cf:3d:a3:cb:d3:92:11:ab:68:87:91:
                    b4:4c:13:5b:9f:4c:ae:86:6d:74:3e:ff:0e:e9:8a:
                    4f:1c:42:0d:d8:0b:e9:d4:89:2e:1c:a8:78:82:34:
                    1d:76:da:95:11:f1:a2:4a:af:7b:bd:2e:c6:39:38:
                    ad:31:2c:99:4b:9e:8f:7a:91:73:a6:f6:09:96:f3:
                    74:3b:fa:72:1a:de:84:44:bf:63:04:ea:f9:b0:da:
                    5a:41:5c:b0:7f:51:48:25:09:62:66:72:3d:14:c6:
                    e1:9b:cc:3a:3b:4d:e7:ee:99:47:1c:9e:ae:8e:db:
                    39:13:52:80:b7:bd:e1:66:64:ba:a2:c0:65:ab:67:
                    92:29:a9:61:b7:c6:70:82:76:c1:19:d0:95:72:f6:
                    ef:72:1c:6f:53:6c:10:90:dc:78:fe:17:fa:62:05:
                    df:f0:32:1a:1b:6e:d4:e1:b8:f9:03:4d:d2:e9:04:
                    c5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CD:90:9F:64:DB:97:B6:EC:94:ED:B8:E6:30:73:A7:BA:65:2F:52:55
            X509v3 Authority Key Identifier: 
                keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/zZCfZNuXtuyU7bjmMHOnumUvUlU.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.169.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d5:2d:30:18:69:4d:93:49:74:70:87:c7:40:79:cb:d8:e9:
         ee:19:c1:2e:c3:a4:f6:7f:4f:d2:60:d0:07:51:df:35:dd:32:
         6b:e8:85:50:af:c7:1d:75:07:5a:f4:d4:8a:ec:2f:1c:9c:38:
         8c:6a:cb:00:6f:cd:32:1e:df:8d:f5:eb:27:c0:6c:19:11:8f:
         e3:17:c1:3d:5d:ed:6f:68:5b:e4:85:d2:b9:0a:51:51:06:95:
         35:44:58:be:f4:4d:20:ae:08:d9:83:f5:6d:81:f3:b9:23:5a:
         ad:d1:2c:94:f0:79:18:0d:7f:59:16:c5:0b:1a:d8:72:76:ab:
         b6:a3:52:5d:86:3e:55:ac:c8:62:7b:a5:96:2b:66:38:d3:78:
         f0:34:cd:0c:0b:0a:ec:2a:87:a3:c3:28:fd:09:da:65:b9:90:
         d7:12:d1:e5:e7:43:e6:9e:04:0d:93:f5:74:ac:9c:81:2a:95:
         ac:1c:fd:04:26:b2:48:03:93:4c:ec:60:3d:40:4a:98:d6:71:
         dd:a1:24:41:f7:26:56:32:bd:af:68:55:de:e7:90:4b:e9:8e:
         6d:86:2e:26:91:ee:fd:f3:f8:4a:21:15:62:cf:f3:7c:d9:66:
         bd:dc:e0:0c:05:79:2c:78:54:08:69:4c:59:f7:7a:0b:a6:66:
         64:6a:5e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 13:51:53 2022 by LibreSSL & rpki-client.