Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/QjI0f6h1vx4R58D2O97owRK7kc8.roa (download)

Subject key identifier:   42:32:34:7F:A8:75:BF:1E:11:E7:C0:F6:3B:DE:E8:C1:12:BB:91:CF 
Authority key identifier: 82:B3:DC:DF:31:AF:6E:F0:C9:34:EA:F2:48:84:AD:99:51:6E:DD:76
asID:                     AS398577
Prefixes:
    1: 144.57.40.0/21 maxlen: 21

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/QjI0f6h1vx4R58D2O97owRK7kc8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156693829 (0x956f545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b3dcdf31af6ef0c934eaf24884ad99516edd76
        Validity
            Not Before: Jan  1 02:53:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4232347fa875bf1e11e7c0f63bdee8c112bb91cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:87:f5:61:c4:a8:00:fb:e9:89:4b:f6:1f:
                    ff:a5:58:20:05:4f:51:ef:f2:bb:6a:33:67:b7:5f:
                    12:c5:96:b7:a1:c0:23:fd:95:95:a2:64:6c:82:b7:
                    56:05:a9:8c:5a:f0:fb:d9:a1:84:69:d4:c0:76:f6:
                    10:d9:01:7e:07:20:6d:f5:22:92:5a:3c:6d:24:e3:
                    97:fa:c9:a4:64:1f:47:c3:96:69:75:c9:35:54:cf:
                    98:ca:5f:e1:69:5a:75:1a:15:57:90:5e:be:9d:dc:
                    a8:e1:f4:9b:e9:ef:47:67:ce:94:65:6a:31:4c:0c:
                    af:88:6e:7d:55:3c:6b:68:c3:59:87:f2:69:3a:67:
                    97:41:c2:87:7f:98:ce:8b:c5:5e:4d:f7:94:64:9b:
                    a9:cf:44:56:43:5a:bb:3c:64:90:03:7a:a2:b6:8a:
                    f4:7e:e6:a6:f7:24:30:83:ba:16:4c:9e:2a:c8:cb:
                    98:1a:25:1e:37:6a:f5:46:e6:90:dc:8c:89:ac:d5:
                    f9:6d:29:63:ff:f3:cd:bf:33:b0:3e:42:bb:3d:08:
                    cc:80:77:5b:f5:e5:8a:de:93:3e:8b:de:20:fa:e6:
                    ff:da:1d:8c:02:24:a0:1b:fe:89:81:7d:0f:3d:3a:
                    f0:c0:62:72:23:ac:ea:eb:6e:70:f7:dc:70:a2:e1:
                    03:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                42:32:34:7F:A8:75:BF:1E:11:E7:C0:F6:3B:DE:E8:C1:12:BB:91:CF
            X509v3 Authority Key Identifier: 
                keyid:82:B3:DC:DF:31:AF:6E:F0:C9:34:EA:F2:48:84:AD:99:51:6E:DD:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grPc3zGvbvDJNOrySIStmVFu3XY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/QjI0f6h1vx4R58D2O97owRK7kc8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/grPc3zGvbvDJNOrySIStmVFu3XY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.57.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:45:1f:33:2e:de:4c:3e:cb:1b:ff:a5:14:0a:66:11:c3:4c:
         4b:18:8e:46:c5:e4:43:3b:c9:92:3d:b6:e2:d9:76:ec:00:5a:
         22:1a:a3:30:a7:4d:2a:dc:67:7f:93:e7:74:7c:a8:3a:63:7e:
         ff:b2:46:38:fd:5a:8b:90:00:44:3c:c0:b8:58:25:59:6a:49:
         5c:48:88:16:d0:6d:62:2a:5b:39:2e:55:95:4a:d2:93:1d:c8:
         74:39:7c:9b:dd:a9:1a:bd:d8:dd:60:61:d0:93:5f:15:ec:d7:
         af:d1:72:65:14:e7:44:4e:f7:1d:3d:c6:36:40:4c:66:e5:68:
         94:a9:90:23:e4:e5:ed:bf:e2:89:f1:38:cb:64:f8:24:c0:88:
         62:05:35:79:da:15:08:94:04:c9:a4:5e:c5:8a:de:00:15:49:
         0a:bb:95:84:49:dd:da:13:51:7c:75:23:ef:f5:73:27:c8:fb:
         6b:04:d6:27:53:b8:38:f6:63:0a:36:33:61:ea:b4:a2:e1:ee:
         a5:3b:2d:04:ca:b1:f9:3f:a4:2a:6c:45:1c:10:4f:45:d3:eb:
         4c:5b:01:92:3b:51:75:82:eb:75:1a:c0:b7:8e:92:3d:1f:c0:
         f7:2b:b7:c9:cb:53:d6:64:c3:31:90:1f:50:15:c7:25:d2:4e:
         3f:09:0a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 04:56:07 2022 by LibreSSL & rpki-client.