Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/hUKAy7n9MWD2TQkVQ7GsqAU5YW8.roa (download)

Subject key identifier:   85:42:80:CB:B9:FD:31:60:F6:4D:09:15:43:B1:AC:A8:05:39:61:6F 
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
asID:                     AS6939
Prefixes:
    1: 5.152.182.0/24 maxlen: 24
    2: 5.152.183.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/hUKAy7n9MWD2TQkVQ7GsqAU5YW8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1028178002 (0x3d48c052)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
        Validity
            Not Before: Jan  1 06:55:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=854280cbb9fd3160f64d091543b1aca80539616f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:6c:a1:5e:33:b2:96:c6:39:55:a8:9b:c5:
                    18:42:79:e1:a7:42:78:fb:76:d2:0b:25:a4:3a:db:
                    e1:55:5b:9a:af:bf:64:66:c8:14:4c:8b:fc:c2:5e:
                    01:a3:9d:f1:52:8f:04:6a:15:bc:b9:83:c2:5d:15:
                    55:50:c1:23:b9:94:64:79:6c:c0:a5:cd:a8:c3:f8:
                    2a:ff:87:d8:ab:e6:f2:4f:00:09:c2:68:d2:e8:98:
                    23:41:4f:1a:bd:79:94:75:f8:d9:4e:8c:59:f1:f6:
                    06:4d:6a:2b:64:f6:b0:51:36:51:fa:47:08:2d:ec:
                    87:c5:5b:b8:8c:1d:6f:e2:01:65:fb:fa:f6:da:d1:
                    f3:d1:72:85:6d:f9:df:7c:19:0c:3c:ee:db:c5:2d:
                    c0:31:81:d8:ec:f2:7b:cd:e7:0c:78:4f:36:7c:3f:
                    3b:28:e3:a1:53:c6:1e:3d:0b:25:20:1a:7c:6d:81:
                    d2:fe:8e:88:d6:02:ab:e2:77:52:b5:de:6d:11:cf:
                    1c:79:6b:7e:41:3f:9c:0c:2e:d6:2b:f0:48:75:22:
                    5f:da:2e:93:22:e2:03:e0:12:57:d7:7b:89:4d:29:
                    a2:0b:99:72:38:8c:92:c4:ce:54:06:71:2e:fa:10:
                    13:85:f5:4e:ba:52:69:5b:c5:05:d0:ba:73:d4:29:
                    c7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                85:42:80:CB:B9:FD:31:60:F6:4D:09:15:43:B1:AC:A8:05:39:61:6F
            X509v3 Authority Key Identifier: 
                keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/hUKAy7n9MWD2TQkVQ7GsqAU5YW8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.152.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:97:c7:48:76:45:82:89:f6:c2:eb:ad:f9:cb:64:ed:b5:7f:
         19:9f:05:b5:48:2b:08:88:47:51:87:0b:e5:b4:ba:1d:af:ec:
         f4:28:6d:bd:2d:ca:87:7c:46:a1:8b:33:c0:1a:f3:6b:ea:84:
         49:94:82:0a:74:96:b4:06:ee:74:b3:72:08:8a:05:94:62:31:
         90:f6:2e:f3:57:93:db:b9:f7:40:08:86:28:d5:52:bc:5d:1e:
         a0:76:e5:c4:31:b9:3c:75:25:6c:fa:e5:e2:64:4d:f4:0b:74:
         46:d2:a5:81:20:a8:58:6b:7c:2a:39:bf:dc:a6:24:3d:58:21:
         76:3c:e5:60:d1:aa:6b:4a:0a:82:9a:1d:0f:63:1b:c7:bc:5f:
         1e:a0:e2:20:bd:11:48:f3:ce:6d:4b:76:2d:53:45:1b:05:ee:
         50:a6:5b:8b:e4:7c:04:da:dd:65:af:c4:df:e8:02:eb:81:eb:
         b0:eb:3c:7b:fb:66:a8:93:29:78:92:67:25:5b:5a:62:13:90:
         c6:80:64:7a:f7:41:99:16:b4:c3:6a:a0:63:97:44:8e:66:f3:
         0e:9d:e3:74:b8:14:25:18:82:ac:34:cd:c1:e7:76:73:10:b9:
         90:1a:61:7d:d0:0e:15:be:5e:ec:a5:e3:bd:38:bf:62:5d:9b:
         c2:6d:8c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 10:17:58 2022 by LibreSSL & rpki-client.