Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/TxAzNV3CkmtdkPqD8VNi7Ian_3M.roa (download)

Subject key identifier:   4F:10:33:35:5D:C2:92:6B:5D:90:FA:83:F1:53:62:EC:86:A7:FF:73 
Authority key identifier: E7:F9:A8:A2:39:68:32:63:E7:55:E1:2C:97:D2:D7:A4:32:D0:B3:77
asID:                     AS174
Prefixes:
    1: 217.198.72.0/21 (max: 21)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/TxAzNV3CkmtdkPqD8VNi7Ian_3M.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70693096 (0x436b0e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f9a8a239683263e755e12c97d2d7a432d0b377
        Validity
            Not Before: Jan  1 07:53:19 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=4f1033355dc2926b5d90fa83f15362ec86a7ff73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:23:0b:ce:66:ac:e5:8c:fb:69:a7:9e:08:c9:
                    a8:2f:76:57:17:3a:b0:d1:bc:42:d2:7c:d2:c4:7c:
                    ea:e5:ed:3f:88:69:2f:71:18:d2:d2:2e:f0:05:50:
                    2b:29:c3:5d:82:27:98:a8:a7:b8:33:9b:2f:40:d0:
                    de:2c:70:82:bd:45:dd:8e:f8:80:de:ff:3c:0a:1b:
                    9e:f3:ce:8a:e2:9f:8a:d6:0c:a0:5b:f2:83:db:0d:
                    51:51:26:2c:23:d0:92:22:a0:4d:71:37:8e:61:dd:
                    74:0b:e0:d4:2c:78:88:85:c5:aa:bc:73:b5:90:8e:
                    3e:22:02:00:10:83:f1:86:e8:f4:8d:0a:1e:40:47:
                    4b:10:bd:66:d3:34:56:60:27:4b:79:57:60:00:5c:
                    d7:ae:86:cb:fe:e9:72:19:00:94:75:72:00:06:a1:
                    3c:a4:2f:8d:e3:7c:9c:08:54:98:f7:a7:67:20:5f:
                    0e:42:ab:f3:d2:79:12:60:16:4e:98:29:21:b4:fa:
                    e3:1f:b2:be:6f:78:81:cd:17:27:37:24:17:ca:8f:
                    4d:cb:5c:60:cd:6c:a2:df:83:81:6e:d1:d1:ce:f7:
                    16:8e:0b:48:b0:85:0a:8d:3f:3a:ef:62:1a:d2:f7:
                    d5:3a:02:20:57:ae:00:be:62:3a:2b:6b:2c:a4:5c:
                    67:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4F:10:33:35:5D:C2:92:6B:5D:90:FA:83:F1:53:62:EC:86:A7:FF:73
            X509v3 Authority Key Identifier: 
                keyid:E7:F9:A8:A2:39:68:32:63:E7:55:E1:2C:97:D2:D7:A4:32:D0:B3:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_moojloMmPnVeEsl9LXpDLQs3c.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/TxAzNV3CkmtdkPqD8VNi7Ian_3M.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.198.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:f4:f5:8c:e6:d2:35:90:b7:62:5f:86:4c:fd:36:da:8c:2f:
         d9:66:2d:4f:5b:61:6e:28:0c:b7:8c:3e:5c:f9:0c:f4:92:f3:
         1d:ed:b2:6d:ab:05:40:98:36:1d:e8:fc:fb:f5:ae:cc:bb:e9:
         23:4e:e8:78:22:3f:5b:67:0f:c5:2c:e5:fd:ac:4c:1b:ae:ab:
         e5:4d:16:fc:3f:ec:c2:b0:f8:41:08:55:f0:6a:9e:a7:d8:73:
         6e:7b:e9:dd:6e:dc:c4:30:5a:85:6f:eb:5c:04:b6:57:7f:cb:
         84:5b:1d:41:a0:6c:63:18:d9:db:6d:a5:c5:a6:2b:1e:c4:c9:
         4c:81:05:46:ff:65:34:84:ac:e2:7f:2b:7b:5e:e0:2d:22:ed:
         8f:68:65:54:da:1a:9a:ae:2d:9c:e1:80:c1:ac:15:cc:0c:e0:
         14:db:13:f3:b5:69:c9:fb:8a:84:89:a9:04:ea:6c:c5:b9:3e:
         b4:ca:2b:06:da:fd:55:bb:55:c3:18:98:fa:87:bb:9f:54:46:
         a6:59:96:6d:3d:71:72:fa:cf:29:1f:63:f7:f8:1d:d0:94:ad:
         3c:16:c8:a9:41:c2:43:82:b8:de:d0:42:48:a2:67:fd:6b:b2:
         87:c2:59:f2:d8:ea:0e:6c:50:e6:de:f2:0f:0b:20:41:42:b3:
         61:4c:a9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:11:33 2021 by LibreSSL & rpki-client.