Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/f9/3a0b14-8d17-449d-aa56-f1071e8b80d6/1/PhT0rQfch1E28b2ITwAsEhxXjzU.roa (download)

Subject key identifier:   3E:14:F4:AD:07:DC:87:51:36:F1:BD:88:4F:00:2C:12:1C:57:8F:35 
Authority key identifier: 1B:89:3C:62:09:B7:A8:01:87:76:C5:CC:AD:30:E2:40:D2:CF:2D:07
asID:                     AS399471
Prefixes:
    1: 109.234.74.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/f9/3a0b14-8d17-449d-aa56-f1071e8b80d6/1/PhT0rQfch1E28b2ITwAsEhxXjzU.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18354961 (0x1181311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b893c6209b7a8018776c5ccad30e240d2cf2d07
        Validity
            Not Before: Jan  4 07:02:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3e14f4ad07dc875136f1bd884f002c121c578f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:54:28:3d:dc:84:03:02:7b:b9:48:0c:53:ae:
                    a1:c9:98:a1:17:45:ea:64:f8:bf:a0:e3:99:a2:c5:
                    6d:c3:c2:bc:a7:5f:6f:d7:54:25:2b:a0:64:25:d4:
                    ed:1f:a8:91:1f:21:98:78:64:bc:a1:67:4f:44:c5:
                    e4:bf:c7:35:4c:96:cc:74:f1:57:d1:02:62:ac:b1:
                    4e:08:99:32:46:88:f9:a6:6d:73:33:8b:6f:9f:2d:
                    d3:2c:cd:32:71:d0:86:ff:a5:37:e6:2d:59:d9:67:
                    43:db:fd:24:a8:43:16:d5:ae:d8:8a:59:25:a1:2f:
                    39:9f:b8:04:d3:fc:93:34:55:17:f0:33:4f:a4:56:
                    95:56:cc:c9:15:ee:8a:94:51:8d:6c:98:81:d9:96:
                    77:80:48:56:5f:b9:18:b8:6b:42:0b:21:3d:32:37:
                    d5:5b:84:c7:c1:90:c6:21:da:3f:4c:cf:55:5d:c3:
                    0c:d0:00:5b:30:71:17:9e:f5:95:14:88:2e:81:7d:
                    91:46:a4:93:93:26:ce:ce:5a:b5:96:1b:ff:c0:13:
                    57:39:38:9a:ba:31:db:fc:88:83:0b:9a:7a:c5:d8:
                    52:2a:2f:33:df:3c:70:86:48:ba:01:ee:9f:15:14:
                    c7:51:88:a0:51:b8:c5:f6:aa:19:a9:e5:2c:00:c9:
                    14:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3E:14:F4:AD:07:DC:87:51:36:F1:BD:88:4F:00:2C:12:1C:57:8F:35
            X509v3 Authority Key Identifier: 
                keyid:1B:89:3C:62:09:B7:A8:01:87:76:C5:CC:AD:30:E2:40:D2:CF:2D:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G4k8Ygm3qAGHdsXMrTDiQNLPLQc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3a0b14-8d17-449d-aa56-f1071e8b80d6/1/PhT0rQfch1E28b2ITwAsEhxXjzU.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3a0b14-8d17-449d-aa56-f1071e8b80d6/1/G4k8Ygm3qAGHdsXMrTDiQNLPLQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.234.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:57:92:d1:2e:8d:07:11:d0:d5:86:72:2e:7c:4d:76:f6:a7:
         8d:3b:19:63:b7:c1:35:fe:04:c4:34:27:05:ee:d9:82:ab:f5:
         95:59:eb:19:16:c1:97:e0:ab:3a:d8:86:9a:94:74:eb:c5:e9:
         22:14:fc:58:ba:a1:81:0a:80:1b:9b:16:4e:1e:59:fd:56:be:
         43:18:81:9b:e3:30:9f:29:ae:6a:b0:09:94:21:f2:d0:9b:20:
         ba:ba:ea:8b:a8:d9:39:b6:7d:e1:ab:a7:e6:72:c6:3b:86:53:
         54:42:c6:f7:75:30:54:2c:2d:b5:36:26:b9:d0:d0:39:07:8d:
         2e:41:e0:06:aa:58:71:df:d0:36:7e:fe:aa:1a:89:c8:64:a6:
         d9:a9:d3:08:31:c8:21:bf:d8:af:2c:15:fb:33:87:b0:fb:a8:
         37:07:53:fc:94:d4:58:c6:17:f4:a6:56:d4:3e:65:a1:56:f3:
         1d:a7:b8:55:86:0e:a9:e3:76:74:37:36:1f:e7:84:0c:7e:01:
         b6:85:cd:01:4d:b3:b3:a5:39:b9:04:b5:5f:89:73:97:1d:dd:
         95:22:de:b8:43:42:b5:0f:9c:36:42:10:55:25:dc:8c:2d:c2:
         74:2b:ab:4c:cc:8c:85:3f:cb:00:fa:80:57:7e:cd:51:c2:fe:
         d9:42:a0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 4 09:49:24 2022 by LibreSSL & rpki-client.