Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/1DeuBjfCCdA2DvoHzuMMnp5yMyg.roa (download)

Subject key identifier:   D4:37:AE:06:37:C2:09:D0:36:0E:FA:07:CE:E3:0C:9E:9E:72:33:28 
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
asID:                     AS399641
Prefixes:
    1: 87.251.23.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/1DeuBjfCCdA2DvoHzuMMnp5yMyg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918727155 (0x36c2a9f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
        Validity
            Not Before: Aug 22 21:36:45 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d437ae0637c209d0360efa07cee30c9e9e723328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:0e:32:df:ab:46:e4:28:b9:77:48:cb:ae:
                    00:7b:9b:e6:58:9e:77:e3:de:67:ff:9b:84:6a:92:
                    cc:0e:ae:92:41:9d:44:e1:0b:e0:f1:b8:f7:fc:2e:
                    90:f9:48:d4:43:f5:1b:2a:5b:49:84:9a:b8:12:ce:
                    6e:b0:a5:75:88:fb:f6:30:9c:e7:b4:63:fe:89:3e:
                    97:38:a2:41:bb:73:aa:58:23:17:2d:2f:d2:1b:3e:
                    a8:de:37:41:a4:cb:2f:71:ef:2a:da:70:43:34:5e:
                    ad:70:65:35:86:32:54:10:29:f7:ed:1b:e0:73:da:
                    04:69:03:c5:95:53:69:0a:ed:5a:07:bd:d0:cc:cf:
                    27:1a:2d:ef:95:4b:2e:2e:79:23:c6:22:8d:24:b3:
                    02:b0:f5:58:71:d0:b3:4a:9a:9d:8f:e1:16:e3:bc:
                    2c:ea:b0:6e:e6:fe:75:06:01:26:2a:e5:7d:14:26:
                    28:39:d6:bd:b0:18:79:ab:02:51:c0:6a:e6:0a:1e:
                    39:56:c2:79:d6:0f:0f:b8:05:a3:f4:dc:4b:c9:07:
                    e2:b9:12:ca:0a:ef:ff:a3:9f:ea:79:1e:3a:70:8f:
                    fd:ec:31:00:44:bb:ef:6f:6c:ee:2b:ee:7c:32:4d:
                    4a:e5:8e:52:12:35:83:cf:c2:63:8e:7e:8e:40:68:
                    2e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D4:37:AE:06:37:C2:09:D0:36:0E:FA:07:CE:E3:0C:9E:9E:72:33:28
            X509v3 Authority Key Identifier: 
                keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/1DeuBjfCCdA2DvoHzuMMnp5yMyg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.251.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:e2:2a:93:6a:bf:a1:c3:aa:29:80:6f:73:e4:20:15:35:17:
         a2:49:a2:d0:51:c8:f2:84:6d:5d:5f:56:a5:4d:16:eb:32:e4:
         df:16:7d:eb:1f:1e:49:77:fa:b5:0d:6f:fb:fa:98:1b:ce:e6:
         44:e4:2d:0f:0d:5e:e5:c5:88:81:82:66:bb:ea:17:ab:72:19:
         5d:37:ca:1f:aa:ee:6e:15:e1:b9:92:8f:ff:de:b9:a9:6c:05:
         07:88:d9:26:b7:48:a6:04:c3:bb:7e:e4:5c:67:ec:82:93:bb:
         ed:c1:85:2f:01:62:a7:b8:5a:aa:e9:40:cc:e7:b7:12:81:9d:
         49:4b:b2:19:f8:f3:8e:9b:38:c5:87:06:f2:32:e3:b2:3b:6e:
         58:2b:33:f6:2b:fa:98:a7:b6:00:46:9c:01:d2:f8:5c:f7:a4:
         54:76:b9:5b:d2:06:fd:cb:3d:0e:24:6b:14:75:4f:e4:9a:f7:
         8b:74:07:08:f4:87:14:39:df:a7:80:9c:d8:eb:4a:1f:5e:06:
         60:8b:c2:4e:82:05:e7:df:0a:8f:7b:e9:a7:1a:7a:9e:b1:fc:
         96:a5:d5:de:84:2e:39:93:34:20:68:60:65:6f:09:f5:7b:73:
         36:41:ca:7e:8d:ee:33:93:2b:95:be:2d:42:e6:10:4e:9e:67:
         3b:2c:f0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:21:36 2021 by LibreSSL & rpki-client.