Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/s2YxajTwM4getjgTtfkRo_naOrM.roa (download)

Subject key identifier:   B3:66:31:6A:34:F0:33:88:1E:B6:38:13:B5:F9:11:A3:F9:DA:3A:B3 
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
asID:                     AS397423
Prefixes:
    1: 93.152.210.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/s2YxajTwM4getjgTtfkRo_naOrM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67837366 (0x40b1db6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Validity
            Not Before: Sep 23 14:51:50 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b366316a34f033881eb63813b5f911a3f9da3ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d8:4e:9b:44:90:58:1c:6d:07:66:13:9d:a5:
                    f4:98:dd:79:ff:f3:87:c0:55:88:e9:77:04:c3:d5:
                    1f:28:06:7e:13:68:2e:37:ed:fb:85:99:07:7e:e3:
                    29:4a:86:53:90:6a:a5:9a:9b:9c:91:67:31:ae:41:
                    c6:b0:02:c7:27:f8:84:b3:2c:52:c1:a1:9a:b7:e0:
                    70:8b:48:d6:f9:7a:7b:96:26:98:b5:76:ec:dc:b4:
                    34:af:08:e8:73:6d:e0:08:24:df:1d:28:22:0f:48:
                    27:0f:8d:1f:11:f9:8d:36:dd:96:56:d7:38:e4:03:
                    84:2f:8a:e9:7c:3e:47:cf:66:cb:e2:14:2b:b8:1e:
                    eb:49:db:7d:e5:a6:c5:d9:ae:8a:97:d9:7a:0d:78:
                    ac:0a:ae:dd:ae:32:ce:6e:b6:b9:d7:55:e5:0b:b7:
                    b2:6a:4b:87:c9:fe:58:f2:fe:f3:8b:f7:2a:08:b6:
                    03:cf:a3:11:23:52:10:df:b2:18:c4:da:7a:90:bb:
                    4a:c6:d2:a7:bb:96:b8:65:d8:4c:0b:21:74:8a:bf:
                    a5:69:11:fc:35:b8:92:d1:5e:63:4e:a1:f3:3c:4c:
                    02:46:a6:50:7e:d7:e2:91:1d:e5:6b:6d:67:38:76:
                    39:47:52:18:50:4b:d5:1b:e1:9e:10:a5:74:db:87:
                    7d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B3:66:31:6A:34:F0:33:88:1E:B6:38:13:B5:F9:11:A3:F9:DA:3A:B3
            X509v3 Authority Key Identifier: 
                keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/s2YxajTwM4getjgTtfkRo_naOrM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.152.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:48:9a:44:47:94:cf:11:e0:fa:85:03:3b:b4:ac:d3:d5:4f:
         54:44:63:4b:a5:23:92:c5:ab:98:14:e7:34:16:d5:96:f1:42:
         a6:c6:d8:f9:79:03:53:0b:ea:65:a6:e0:72:5d:fb:27:3e:03:
         7e:f1:fa:39:9b:cf:c4:7a:f7:e3:1b:db:f4:32:8a:8e:11:c1:
         58:89:03:46:36:ce:50:55:25:2e:10:06:1e:02:94:1d:ec:6d:
         e3:93:76:17:c6:99:a5:8a:85:af:1d:36:24:cc:e1:1b:f5:b0:
         fd:98:aa:ed:3f:08:bd:90:ae:3c:58:ec:92:09:38:90:f8:2a:
         20:1d:2e:fa:85:51:1b:17:46:9f:e8:12:1e:4e:46:d3:1c:41:
         bf:ae:7c:f0:02:21:c2:4b:66:be:c9:63:af:18:bc:49:66:95:
         83:af:ef:cc:a5:d3:5f:9e:59:8b:9a:76:24:93:ed:e6:e4:a7:
         3a:40:92:bb:19:9c:61:24:bc:bb:00:75:e0:f8:ed:02:4f:13:
         bb:a5:dc:fd:87:40:24:9d:4a:67:0c:fb:21:a4:32:cc:b3:89:
         65:50:c7:27:6f:18:c2:3f:98:eb:64:cb:b1:9e:80:65:8c:6b:
         23:7c:5c:d7:66:72:52:ad:d0:a7:e6:eb:42:3e:88:c5:a3:67:
         48:87:d5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:09:16 2021 by LibreSSL & rpki-client.