Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/14PKd2T8IWqRogY0BM6HN3VbNRw.roa (download)

Subject key identifier:   D7:83:CA:77:64:FC:21:6A:91:A2:06:34:04:CE:87:37:75:5B:35:1C 
Authority key identifier: BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
asID:                     AS174
Prefixes:
    1: 185.254.52.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/14PKd2T8IWqRogY0BM6HN3VbNRw.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80854902 (0x4d1bf76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
        Validity
            Not Before: Jan  1 07:22:20 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d783ca7764fc216a91a2063404ce8737755b351c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:57:83:84:80:30:22:19:8d:57:2b:62:73:
                    bb:f9:ea:ad:df:a9:f5:db:92:c5:31:f2:b1:c5:2a:
                    b1:84:1d:e9:04:be:de:70:ac:a0:03:12:73:66:fc:
                    4b:6d:4b:28:d2:3e:b9:49:ba:38:31:e5:80:0a:67:
                    51:0c:0f:06:a6:68:35:d0:3e:05:8e:50:14:7d:8d:
                    2e:91:59:15:ee:1e:46:5d:e3:af:e8:cd:32:d4:08:
                    ad:01:c7:84:0b:b5:8a:bb:ef:38:53:df:f2:b6:fa:
                    8e:5a:1e:7f:db:c5:ae:64:6f:6b:c5:01:4e:0d:3b:
                    dd:61:de:ca:29:17:1c:6a:e8:1f:96:85:38:9c:61:
                    17:bd:11:74:13:48:60:3a:b1:47:38:66:97:b8:23:
                    60:b2:d9:61:f1:bf:f9:7a:7e:aa:c5:dd:d1:d1:b8:
                    ac:e8:38:c4:58:af:fb:37:55:4b:c2:51:ce:7f:e7:
                    9e:f1:27:f2:76:aa:b3:20:cc:54:39:40:49:24:91:
                    b9:bb:58:14:da:15:6c:ac:96:ca:75:0c:47:fc:f2:
                    42:01:04:c3:6a:e3:f2:7d:9d:95:c3:72:68:63:04:
                    bb:b5:9c:5a:a0:a4:ce:60:ef:e1:c4:d0:01:ae:93:
                    af:c6:c9:d2:e1:10:6d:37:61:ae:71:9f:a4:05:d5:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D7:83:CA:77:64:FC:21:6A:91:A2:06:34:04:CE:87:37:75:5B:35:1C
            X509v3 Authority Key Identifier: 
                keyid:BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/14PKd2T8IWqRogY0BM6HN3VbNRw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/vGniBh6MfO5C76T--fMPe_b20FM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:15:ef:d1:6f:9f:43:57:d2:77:f9:f7:01:56:b5:83:61:96:
         b1:33:ad:15:c8:e6:2d:a0:25:95:14:a5:a4:ba:65:2e:7b:79:
         2c:15:e9:b2:9a:e9:12:51:fe:27:b6:04:a2:3e:e2:fe:4f:b8:
         5c:24:4b:41:b8:d1:f6:3a:fd:dd:7a:19:24:91:04:24:76:83:
         6e:6b:cd:14:15:d6:a0:a7:2e:2d:2a:a5:ed:ba:96:ce:b9:fc:
         75:6b:a8:4e:05:5f:77:df:f2:d1:6a:f8:5f:95:68:dd:84:fd:
         9d:12:bb:4e:6e:f2:a5:d8:d4:fb:b5:f2:80:01:34:a7:dc:c4:
         f7:f2:10:42:e7:3e:99:8f:fe:80:37:fe:a3:4c:40:f5:85:19:
         54:32:86:20:88:4c:61:6e:01:18:c8:6d:2f:32:2f:ce:f4:69:
         c5:94:48:d8:10:37:14:45:5a:45:eb:2e:6b:65:32:30:f4:d2:
         ba:e4:da:5b:c7:77:a9:e1:a6:3a:25:41:a0:36:8b:d4:b1:04:
         e2:f7:63:ae:f6:f2:4c:9a:68:af:b9:a7:fb:c7:be:f0:3b:70:
         14:73:4e:6e:37:81:dc:0c:84:41:be:7b:01:bc:9d:c9:2d:b9:
         a9:07:f6:c1:28:2f:04:bf:19:0a:06:93:fa:8a:95:64:89:78:
         d1:aa:63:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 11:50:19 2021 by LibreSSL & rpki-client.