Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/U-2pUn1uc2OixSUcQNMGDWOTKyM.roa (download)

Subject key identifier:   53:ED:A9:52:7D:6E:73:63:A2:C5:25:1C:40:D3:06:0D:63:93:2B:23 
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
asID:                     AS0
Prefixes:
    1: 194.42.48.0/24 (max: 32)
    2: 2001:7f8:c::/48 (max: 128)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/U-2pUn1uc2OixSUcQNMGDWOTKyM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81449244 (0x4dad11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
        Validity
            Not Before: Jan  1 03:40:47 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=53eda9527d6e7363a2c5251c40d3060d63932b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2b:82:9e:4e:ca:43:93:2c:32:35:7e:9e:30:
                    3c:2c:b1:9f:3b:bc:48:f6:96:91:cf:dd:b8:1f:34:
                    2d:60:ec:f2:f5:c2:28:a9:ea:83:61:d7:c9:ad:e8:
                    92:ab:0d:8d:22:63:36:38:35:2a:80:78:f1:f0:4c:
                    fd:48:81:9e:72:17:ea:d3:e4:f6:e9:74:83:6b:d2:
                    c6:85:3c:13:37:9e:62:c0:78:a9:4e:b2:e4:b3:50:
                    57:41:49:e0:91:a9:1a:fe:74:a5:18:d6:2b:3f:cb:
                    d3:20:ce:3b:97:ee:ad:76:3c:fc:75:1d:b8:b1:d6:
                    c9:5e:5e:f2:1d:f3:ef:4d:80:82:49:0b:0a:2e:52:
                    3b:3d:64:47:e6:68:ba:93:e9:55:d8:22:be:8f:b6:
                    12:bf:5c:ec:64:77:14:03:d6:04:20:9a:d6:38:69:
                    15:f4:ce:60:13:cf:9b:2e:cc:de:ca:d0:75:62:33:
                    b4:d2:1b:f2:19:fe:00:62:35:4f:f3:ef:ac:dc:59:
                    f9:6e:13:46:b1:b4:d0:3b:45:9a:a6:8e:2d:b2:2b:
                    22:51:3b:a7:40:a8:1f:52:8c:13:20:a0:1f:50:5e:
                    58:f6:18:f8:dc:2f:ea:21:b5:c3:39:7e:56:78:bd:
                    1d:09:a6:0c:7d:43:10:1b:c1:bc:b2:71:1a:a3:c6:
                    f6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                53:ED:A9:52:7D:6E:73:63:A2:C5:25:1C:40:D3:06:0D:63:93:2B:23
            X509v3 Authority Key Identifier: 
                keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/U-2pUn1uc2OixSUcQNMGDWOTKyM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....*00.....0.... .....
    Signature Algorithm: sha256WithRSAEncryption
         9b:d2:e7:c0:9e:5a:fb:f4:0e:45:10:60:74:74:c6:89:fd:78:
         f5:cb:c3:88:67:31:75:2b:8a:bb:c1:19:bf:34:52:76:3d:ae:
         4e:5c:3d:ec:74:26:66:e8:d1:9b:18:84:f7:52:31:d0:54:2f:
         38:b0:b9:7a:22:ea:10:65:2c:10:28:2c:e6:a0:a3:9d:3f:1d:
         be:21:ef:ec:d0:21:e0:d5:63:ed:b8:b9:a2:33:ad:bc:bd:81:
         28:c0:4d:68:6f:3f:94:ce:51:8d:c2:73:9f:9a:e8:72:d8:1f:
         73:92:26:2e:8c:56:3c:9f:94:27:44:32:23:dc:e2:02:8a:71:
         45:52:77:d6:43:d3:38:7a:b7:47:c5:e6:be:a2:aa:e3:ab:27:
         c4:ff:fa:f0:4a:7e:a4:a9:a0:2c:f0:79:67:ce:a1:18:56:bf:
         e3:a3:87:d4:6a:e0:f1:32:f5:b2:4c:6f:df:93:09:9c:1b:23:
         a4:33:ed:44:22:10:cd:35:ad:a7:09:36:0c:b8:22:b1:72:87:
         74:91:94:5d:5b:19:2b:26:d7:a7:45:e0:c4:8d:a9:93:ad:ce:
         48:0f:4f:c7:c4:2e:2a:6d:30:82:4e:a9:b6:6e:a4:79:c4:b2:
         37:1e:a2:3d:16:37:99:af:d6:b8:65:c9:44:97:f5:42:57:fe:
         01:21:7d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:13:20 2021 by LibreSSL & rpki-client.