Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-jkJQeEcPGHkV3C9TbNJX8ESm70.roa (download)

Subject key identifier:   FA:39:09:41:E1:1C:3C:61:E4:57:70:BD:4D:B3:49:5F:C1:12:9B:BD 
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
asID:                     AS397423
Prefixes:
    1: 46.37.100.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-jkJQeEcPGHkV3C9TbNJX8ESm70.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21743964 (0x14bc95c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jun 29 06:49:27 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=fa390941e11c3c61e45770bd4db3495fc1129bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e6:e9:72:79:06:ab:3a:10:19:6b:c3:4f:d3:
                    e2:89:97:85:4c:67:f9:16:d4:c9:ef:ce:a1:57:67:
                    e1:3a:8c:d1:a6:42:47:1f:2c:ee:37:09:f9:8e:3b:
                    7a:27:77:3d:b3:61:b8:0b:67:af:c1:e1:ce:8f:13:
                    c9:8a:b0:d7:d2:b8:86:1f:31:6e:02:09:c8:0e:d7:
                    b4:8c:a9:82:94:66:2f:52:20:49:47:07:ce:0c:c7:
                    7a:ed:db:9d:d6:54:ad:cc:25:13:27:b2:20:59:cf:
                    4e:3b:50:64:29:6a:0c:c2:d1:ab:4a:56:5e:bb:4a:
                    bd:73:b0:d1:30:f2:a9:16:68:d0:cf:81:eb:f2:d7:
                    5e:cf:ec:c7:83:85:dc:40:70:27:c8:56:c9:8e:3d:
                    a2:71:18:d4:6e:4c:35:17:e8:eb:54:f9:83:1a:1f:
                    d8:91:ba:e7:db:07:49:2d:4c:67:50:f3:bf:00:e4:
                    0a:e9:61:34:78:31:01:dd:ff:03:c1:e2:f9:d7:2d:
                    4e:57:08:34:de:af:2d:5b:ec:6a:d6:24:da:e5:05:
                    f7:c7:cc:37:24:b6:6d:2c:5f:7c:a4:3c:fc:df:a7:
                    31:9f:19:68:3e:33:a2:69:13:51:de:e0:e3:88:fe:
                    24:f7:81:ec:78:3a:c6:86:f6:f6:6a:d3:75:d9:40:
                    1f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FA:39:09:41:E1:1C:3C:61:E4:57:70:BD:4D:B3:49:5F:C1:12:9B:BD
            X509v3 Authority Key Identifier: 
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-jkJQeEcPGHkV3C9TbNJX8ESm70.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:4d:30:29:80:b2:1d:4b:98:af:82:0c:87:ee:85:5e:2a:b9:
         13:aa:7f:cd:30:44:a3:70:48:1d:48:5d:8f:c9:a2:c9:af:c1:
         bf:7e:2a:9f:5b:dd:5e:1c:3b:29:c2:9b:cd:9e:0d:b4:05:6c:
         df:61:35:5a:35:95:e0:32:16:67:d9:12:ab:48:38:e8:52:5f:
         42:d7:89:ed:a9:2a:7c:dd:9e:61:49:fb:fb:5d:87:c8:bf:c7:
         5a:55:4d:a6:9a:6c:7c:c9:c6:18:3e:a8:8c:aa:34:53:28:e0:
         23:3b:51:7d:c9:82:93:a1:50:87:11:f1:95:68:98:e0:c0:8d:
         17:98:56:f8:ff:cd:59:14:bb:8a:97:2c:48:d2:61:92:d5:50:
         d8:ba:98:35:ca:ae:f7:a9:36:1a:5f:6b:35:9c:98:89:fd:fb:
         e0:2f:7c:48:c1:ee:73:01:f0:28:50:9a:05:1f:bc:c3:0e:e1:
         f6:3c:65:4e:6d:13:0d:8a:d3:9e:92:fa:3b:08:6c:fc:28:33:
         f6:b6:0b:3d:a5:37:d1:68:e9:9f:e9:cd:76:96:cb:0f:e9:27:
         3c:58:55:d1:52:7f:e2:16:98:eb:3d:3c:7f:a1:e5:01:50:89:
         27:bb:ca:b5:a0:6e:7f:c8:ba:a6:c2:64:56:5b:f9:f6:de:aa:
         9c:5e:86:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 17 14:41:34 2021 by LibreSSL & rpki-client.