Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/dd/17252b-0527-44e9-a952-4e04a55c020a/1/56OGAGJqY3Wu1gqpwIexaBzz20I.roa (download)

Subject key identifier:   E7:A3:86:00:62:6A:63:75:AE:D6:0A:A9:C0:87:B1:68:1C:F3:DB:42 
Authority key identifier: 70:B1:B2:0A:46:00:BB:42:01:2A:89:41:5C:B4:7F:10:F3:86:9B:98
asID:                     AS174
Prefixes:
    1: 193.109.137.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/dd/17252b-0527-44e9-a952-4e04a55c020a/1/56OGAGJqY3Wu1gqpwIexaBzz20I.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42801108 (0x28d17d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b1b20a4600bb42012a89415cb47f10f3869b98
        Validity
            Not Before: Apr 11 21:23:40 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e7a38600626a6375aed60aa9c087b1681cf3db42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:f4:55:6d:84:82:40:21:44:0b:35:3c:6c:
                    e9:4d:47:10:7d:66:d1:4e:65:67:6b:d2:f7:d9:d3:
                    a4:a3:af:b6:fc:3f:f7:1a:2d:46:62:31:8b:02:bb:
                    aa:61:3d:38:2e:e9:d9:58:42:47:04:f2:01:86:0c:
                    d7:57:0a:36:ab:47:db:12:5b:9f:98:1a:bf:9f:f6:
                    e9:ce:86:e5:46:6a:b8:81:66:ed:e2:5c:76:69:f0:
                    9c:f2:5a:60:e0:9c:7d:79:5a:3d:89:08:7d:70:04:
                    fa:eb:c4:33:72:08:78:4d:56:e5:9d:d3:8f:b0:9b:
                    51:3d:c5:5b:f9:9f:d6:41:12:53:b1:ec:44:29:f6:
                    b4:19:3e:3e:b0:a9:b1:83:de:0f:d4:79:84:05:c8:
                    7c:16:b0:9c:94:71:f3:9e:ad:18:cc:3b:b7:df:c2:
                    1a:6d:71:b9:61:0b:24:3f:50:f8:ae:2b:14:a5:7b:
                    bf:95:34:37:31:66:37:5c:5b:f9:db:8a:12:8f:24:
                    9a:d4:ed:f6:03:24:1f:7a:4b:32:98:de:ea:7c:8c:
                    a2:15:0f:ee:16:ca:6e:44:ee:ba:dc:38:c1:4e:27:
                    a6:29:40:8f:e5:99:69:8b:93:0b:50:90:7a:6e:b5:
                    b0:91:e7:2c:0c:40:66:e9:d5:06:db:cc:7e:5f:af:
                    5f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E7:A3:86:00:62:6A:63:75:AE:D6:0A:A9:C0:87:B1:68:1C:F3:DB:42
            X509v3 Authority Key Identifier: 
                keyid:70:B1:B2:0A:46:00:BB:42:01:2A:89:41:5C:B4:7F:10:F3:86:9B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGyCkYAu0IBKolBXLR_EPOGm5g.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/17252b-0527-44e9-a952-4e04a55c020a/1/56OGAGJqY3Wu1gqpwIexaBzz20I.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/17252b-0527-44e9-a952-4e04a55c020a/1/cLGyCkYAu0IBKolBXLR_EPOGm5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:1f:86:58:72:1a:e9:81:06:b1:e9:6b:2a:7c:d6:85:87:b7:
         ce:62:cd:a5:b3:d3:16:a9:b8:9b:c6:a2:dc:0d:5d:0c:36:73:
         84:97:9c:92:02:f2:59:66:55:64:5f:ba:2e:47:18:84:b2:04:
         dd:49:02:72:04:a3:5c:0a:07:f8:a4:ad:b3:a3:11:45:57:6c:
         b9:85:53:e7:b9:04:37:e1:63:cb:a4:8e:6a:5d:8c:0b:c9:33:
         34:93:95:c0:63:b1:68:c7:d1:5b:53:12:24:a6:a9:3e:29:0e:
         7f:72:a8:91:7a:32:1e:9e:f7:e2:93:b0:67:75:85:a9:ff:10:
         d1:4d:f4:0a:85:b3:b8:ab:05:39:c4:3d:7f:3d:61:1c:08:90:
         9e:47:ad:82:3b:f8:be:0c:4e:9f:03:ed:45:42:a7:2d:ad:e7:
         23:af:b3:15:46:ec:52:b1:61:7d:3f:5b:5a:d0:9d:37:be:07:
         53:b1:d2:41:f5:cb:33:48:f8:1b:67:a8:89:f5:07:b7:46:89:
         c8:77:0c:f1:f7:02:e6:9d:c9:cd:bb:78:62:b4:76:dd:f9:84:
         16:cf:e0:51:dd:60:89:e3:fc:61:6c:e9:f3:5c:8c:e8:13:f5:
         b8:65:f2:26:e3:b2:3b:a8:be:ad:4b:44:9e:94:82:39:42:08:
         89:70:d0:35
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAo0X1DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MGIxYjIwYTQ2MDBiYjQyMDEyYTg5NDE1Y2I0N2YxMGYzODY5Yjk4MB4XDTIxMDQx
MTIxMjM0MFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTdhMzg2MDA2MjZh
NjM3NWFlZDYwYWE5YzA4N2IxNjgxY2YzZGI0MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALkH9FVthIJAIUQLNTxs6U1HEH1m0U5lZ2vS99nTpKOvtvw/
9xotRmIxiwK7qmE9OC7p2VhCRwTyAYYM11cKNqtH2xJbn5gav5/26c6G5UZquIFm
7eJcdmnwnPJaYOCcfXlaPYkIfXAE+uvEM3IIeE1W5Z3Tj7CbUT3FW/mf1kESU7Hs
RCn2tBk+PrCpsYPeD9R5hAXIfBawnJRx856tGMw7t9/CGm1xuWELJD9Q+K4rFKV7
v5U0NzFmN1xb+duKEo8kmtTt9gMkH3pLMpje6nyMohUP7hbKbkTuutw4wU4npilA
j+WZaYuTC1CQem61sJHnLAxAZunVBtvMfl+vX8MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTno4YAYmpjda7WCqnAh7FoHPPbQjAfBgNVHSMEGDAWgBRwsbIKRgC7QgEq
iUFctH8Q84abmDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NMR3lDa1lBdTBJQktvbEJYTFJfRVBPR201Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGQvMTcyNTJiLTA1MjctNDRlOS1hOTUyLTRlMDRhNTVjMDIwYS8x
LzU2T0dBR0pxWTNXdTFncXB3SWV4YUJ6ejIwSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQv
MTcyNTJiLTA1MjctNDRlOS1hOTUyLTRlMDRhNTVjMDIwYS8xL2NMR3lDa1lBdTBJ
QktvbEJYTFJfRVBPR201Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMFtiTANBgkqhkiG9w0BAQsFAAOC
AQEAKB+GWHIa6YEGselrKnzWhYe3zmLNpbPTFqm4m8ai3A1dDDZzhJeckgLyWWZV
ZF+6LkcYhLIE3UkCcgSjXAoH+KSts6MRRVdsuYVT57kEN+Fjy6SOal2MC8kzNJOV
wGOxaMfRW1MSJKapPikOf3KokXoyHp734pOwZ3WFqf8Q0U30CoWzuKsFOcQ9fz1h
HAiQnketgjv4vgxOnwPtRUKnLa3nI6+zFUbsUrFhfT9bWtCdN74HU7HSQfXLM0j4
G2eoifUHt0aJyHcM8fcC5p3Jzbt4YrR23fmEFs/gUd1gieP8YWzp81yM6BP1uGXy
JuOyO6i+rUtEnpSCOUIIiXDQNQ==
-----END CERTIFICATE-----

Generated at Fri Sep 24 12:13:18 2021 by LibreSSL & rpki-client.