Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YQkXNMpOQ2rpi0C2S2K628EnToI.roa (download)

Subject key identifier:   61:09:17:34:CA:4E:43:6A:E9:8B:40:B6:4B:62:BA:DB:C1:27:4E:82 
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
asID:                     AS174
Prefixes:
    1: 193.235.207.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YQkXNMpOQ2rpi0C2S2K628EnToI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049580909 (0x3e8f556d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
        Validity
            Not Before: Jan  1 06:06:05 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=61091734ca4e436ae98b40b64b62badbc1274e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b8:3c:4d:6f:a6:c1:dd:2a:22:22:a8:c4:c0:
                    18:11:6c:88:f9:f7:fc:e8:9d:0a:8c:9e:75:c0:b9:
                    d1:d8:0f:20:6f:5e:4e:6d:6c:d9:7a:1f:0c:db:c8:
                    ae:9b:83:bb:40:17:4b:7f:c7:c8:bb:9c:92:8d:3c:
                    b4:df:fb:8b:99:79:2a:06:97:a7:98:28:91:53:68:
                    41:c8:99:c7:c3:4b:7f:7f:7f:38:92:77:5d:5f:f0:
                    4b:4f:4e:c5:51:f1:a9:73:3c:f7:5f:a1:0f:83:e7:
                    ce:f7:1c:41:41:2c:4c:ae:0f:53:5c:d8:f1:9f:0b:
                    7f:31:e2:c8:05:cf:df:5b:2d:ae:39:2a:e2:ae:89:
                    96:cd:2c:4f:fe:64:39:45:26:bb:2d:28:59:9e:ae:
                    94:5f:47:4a:5b:db:33:d3:1f:a1:42:d5:2b:4b:83:
                    5d:ea:f9:cd:cf:a5:80:b1:7d:4b:1d:cf:81:c9:16:
                    2c:35:e0:65:1f:9f:03:87:88:8e:7e:8c:ac:a8:6b:
                    55:7e:b2:66:2b:a4:b7:9d:4b:25:36:da:b9:33:0e:
                    b6:8f:3d:90:05:e9:71:23:6e:bc:b2:7b:bb:b2:2f:
                    35:8d:3b:77:a0:d2:c5:88:b6:cd:cf:87:8f:ea:e6:
                    3c:43:86:8f:e9:8a:ed:d5:98:f5:25:77:45:2e:58:
                    dd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                61:09:17:34:CA:4E:43:6A:E9:8B:40:B6:4B:62:BA:DB:C1:27:4E:82
            X509v3 Authority Key Identifier: 
                keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YQkXNMpOQ2rpi0C2S2K628EnToI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.235.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:83:73:1f:db:3f:a4:98:e4:84:f9:93:83:35:e8:67:bb:51:
         6c:ad:19:3e:e5:d4:84:24:8a:1c:20:3a:9c:fd:97:ee:f1:db:
         91:df:3b:38:d2:a5:c3:a1:ef:eb:fb:72:8c:fb:28:af:49:f2:
         66:fd:0b:ab:61:6f:b7:5e:5b:96:c8:99:60:29:ea:76:4a:d0:
         3d:a9:ee:81:47:92:9a:de:65:a2:fc:ab:30:35:3a:08:05:52:
         3c:8d:2f:ac:88:e5:1d:35:93:9d:9b:76:4b:d7:9c:1b:56:cb:
         63:5b:ff:fc:c9:0f:81:ea:7c:f1:17:90:21:fe:51:d1:72:a7:
         ed:99:45:78:ed:52:a3:da:45:bb:c3:60:d4:2e:60:f1:d8:0b:
         fc:b4:6f:02:29:ba:cb:52:f1:b6:f5:f9:6d:6e:cd:92:8f:95:
         a6:d4:40:13:3d:47:a7:f6:1d:a3:9d:7f:72:9e:71:4d:69:e7:
         9e:7a:7d:67:07:07:f2:78:12:20:f5:54:61:44:be:49:57:5d:
         bd:a6:67:f1:f0:e7:5c:a7:c4:39:45:5c:5e:c4:d4:1e:40:2e:
         8b:51:fe:fb:0a:3d:b7:01:ac:e2:9f:f5:4c:fe:00:45:1a:8b:
         22:25:de:87:21:a6:98:23:35:8a:84:f2:e4:63:c1:1b:e7:59:
         9d:1b:14:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 12:12:55 2021 by LibreSSL & rpki-client.