Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ucR-KeWuSdSj9EAt4OdeyKgATMA.roa (download)

Subject key identifier:   B9:C4:7E:29:E5:AE:49:D4:A3:F4:40:2D:E0:E7:5E:C8:A8:00:4C:C0 
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
asID:                     AS399746
Prefixes:
    1: 193.34.51.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ucR-KeWuSdSj9EAt4OdeyKgATMA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227336850 (0xd8ce292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
        Validity
            Not Before: Jan  1 02:57:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b9c47e29e5ae49d4a3f4402de0e75ec8a8004cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:8f:5c:0e:4e:bf:46:d0:00:6c:d4:d7:df:
                    ef:80:af:8c:e1:74:62:46:99:93:86:62:be:2f:89:
                    68:61:f8:dd:13:ce:9e:34:a9:c5:52:94:0b:08:6f:
                    82:4a:8e:0c:ed:77:e4:1f:05:6f:8f:fb:f8:b3:77:
                    36:86:5f:97:50:c2:1e:31:54:27:56:20:a2:9b:ab:
                    86:c5:18:8e:e4:66:a7:f1:37:c8:da:74:d9:6c:6d:
                    e8:79:5b:02:91:ed:df:cc:05:9c:90:1a:46:9c:45:
                    95:09:f3:c5:17:df:ae:6e:d5:a9:e4:c6:d6:c6:42:
                    f7:23:58:dc:de:7a:61:77:81:89:8e:bc:65:1b:67:
                    b2:33:0c:2d:17:3e:ea:48:f1:c4:d2:0b:7c:c1:0d:
                    61:1a:ac:f0:08:de:15:64:8c:61:01:ac:94:9e:07:
                    0d:bc:8c:83:96:37:ae:a9:c0:39:75:11:98:d6:36:
                    34:74:32:46:be:b4:f5:1e:7d:dc:0f:76:ae:6c:a3:
                    67:4a:9e:18:5e:3a:af:20:92:f6:f1:34:e4:2f:f6:
                    69:59:d5:38:02:bd:0b:d2:4a:00:6f:0e:57:51:ad:
                    ef:90:67:5d:d6:b1:c1:9f:6c:31:5e:ea:32:3d:65:
                    d5:b8:ed:81:c6:6a:20:91:84:0f:60:17:f8:40:7f:
                    c1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B9:C4:7E:29:E5:AE:49:D4:A3:F4:40:2D:E0:E7:5E:C8:A8:00:4C:C0
            X509v3 Authority Key Identifier: 
                keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ucR-KeWuSdSj9EAt4OdeyKgATMA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.34.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:03:4d:fb:9a:9f:d4:24:f3:a7:4b:1a:9f:c8:27:ae:98:70:
         73:48:b1:45:02:10:d2:2e:3e:fa:1c:37:b6:c8:55:3a:6f:e9:
         d4:5b:4c:3f:36:78:df:ce:eb:b3:18:8e:1f:35:9a:41:69:94:
         64:1a:88:e1:e5:45:5d:24:f5:69:89:84:27:29:51:b3:0a:fe:
         13:b1:a0:77:4f:70:61:9c:ca:d2:66:fb:90:63:75:4f:d3:8d:
         ac:03:7d:af:7a:76:7d:4b:dc:76:6b:9b:95:f3:4a:14:19:c8:
         f0:66:a1:32:2f:4c:1d:50:6c:59:c7:b3:54:39:2a:34:1c:1a:
         46:81:06:44:55:a4:f6:23:ef:c4:b1:90:fa:e8:ce:da:06:08:
         a2:a9:05:9c:03:ae:a5:c1:25:26:4f:fe:74:48:e3:e6:92:2e:
         f2:18:9a:b4:99:8f:aa:9d:c6:31:68:86:95:a9:c1:8e:7e:35:
         79:2d:0e:ec:41:aa:7c:37:fc:e7:9b:7a:76:d1:9c:7a:56:e0:
         23:56:f4:71:b1:fc:cf:c0:46:ed:34:8f:0d:5f:73:40:b1:33:
         67:a8:d9:99:30:d8:82:a0:21:f4:4a:f8:af:2c:7d:a9:75:0b:
         c3:47:66:92:46:cc:3c:cb:56:4d:7d:6e:1c:8f:a4:07:88:4a:
         e6:5a:88:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 04:46:06 2022 by LibreSSL & rpki-client.