Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/ni9Z_-7ELzNi-uoGcbZlVdN79NM.roa (download)

Subject key identifier:   9E:2F:59:FF:EE:C4:2F:33:62:FA:EA:06:71:B6:65:55:D3:7B:F4:D3 
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
asID:                     AS398849
Prefixes:
    1: 157.23.224.0/20 (max: 24)
    2: 2a0e:bbc0:8000::/40 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/ni9Z_-7ELzNi-uoGcbZlVdN79NM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31286956 (0x1dd66ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
        Validity
            Not Before: Apr  1 21:53:03 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9e2f59ffeec42f3362faea0671b66555d37bf4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:f8:5f:a0:a5:f4:96:3a:5b:70:80:74:a4:
                    23:8b:91:e7:0c:44:f5:d4:2e:3d:ec:5d:11:f5:d1:
                    42:12:ef:64:5f:11:87:20:b3:d9:c6:11:58:d4:2c:
                    69:e2:8f:8a:09:76:c5:23:d6:c2:6b:c3:88:84:12:
                    ed:53:23:79:fb:ca:8b:92:de:12:dd:97:a0:5c:2e:
                    5c:ac:10:8c:7a:c5:13:3b:0e:ed:1b:fc:0f:51:19:
                    bc:bd:6a:1a:d4:ba:27:76:74:81:1e:24:26:07:40:
                    6a:8f:30:eb:a3:08:44:0e:5e:45:96:96:d6:6a:fc:
                    91:e1:29:e8:07:86:b3:a5:40:f8:33:97:ba:d8:be:
                    7c:ce:5d:76:be:92:62:c5:46:b3:d8:5d:95:15:bd:
                    81:ed:15:d2:fa:84:74:10:dd:df:47:e6:d9:66:60:
                    9f:d0:e5:e9:f6:d1:d2:36:12:86:a8:ff:b8:4e:f2:
                    a0:46:b3:7d:3a:6a:9b:77:77:95:9a:dd:22:87:64:
                    ff:39:f1:1b:78:68:44:9e:3b:a6:66:7c:ae:98:67:
                    97:0e:ce:9b:d8:3d:09:8a:57:66:dc:e7:5e:7f:f2:
                    2c:e3:63:b7:bf:ee:ae:af:f5:cb:ec:f8:ee:cd:93:
                    c8:82:b8:bf:c6:1e:d1:b8:c3:12:16:59:ea:f0:b5:
                    e5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9E:2F:59:FF:EE:C4:2F:33:62:FA:EA:06:71:B6:65:55:D3:7B:F4:D3
            X509v3 Authority Key Identifier: 
                keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/ni9Z_-7ELzNi-uoGcbZlVdN79NM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.23.224.0/20
                IPv6:
                  2a0e:bbc0:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:f1:ac:b4:8b:0b:7d:b7:92:d8:7d:30:8c:8f:4e:e4:ed:b7:
         e5:34:0c:9e:36:ae:32:44:f7:cb:be:00:47:bf:92:53:16:53:
         30:ca:4a:6a:88:1a:89:68:36:fa:d7:54:fd:89:d9:21:e2:6b:
         a7:93:c1:a0:40:ae:7c:ee:20:d5:52:40:bd:87:44:ee:2a:a7:
         78:b4:02:53:9a:b1:6d:61:6c:e3:7a:46:88:db:29:19:8b:6e:
         ac:7f:8e:3b:7e:3e:96:2d:a3:58:da:28:e7:93:1e:96:a9:b8:
         64:1e:ae:bf:47:7e:0d:a5:76:0f:28:04:e5:38:a5:09:59:42:
         71:ec:c2:6e:dc:59:92:80:9a:6b:bc:80:39:7b:01:7c:0c:bf:
         de:2c:a8:c8:ce:ee:17:8f:eb:c4:6e:46:07:03:6e:d5:87:17:
         ba:34:fd:30:e8:fd:61:4d:d4:a1:75:f4:37:40:09:3a:c6:5c:
         eb:4f:32:8d:8e:ef:83:73:35:bd:98:eb:49:15:80:ef:a6:0d:
         3b:84:92:a4:a3:95:80:ee:83:10:a6:da:1f:7c:db:c2:8f:a9:
         be:0b:59:1e:67:eb:68:b0:06:5e:b1:6b:c5:fc:c6:7c:0c:1e:
         ff:f7:69:f0:e0:de:27:9c:b2:d7:55:8d:e1:d9:af:cb:e4:4f:
         42:fb:f6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:16:52 2021 by LibreSSL & rpki-client.