Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/uGdJfuHvUObGnRuqZn-16TtEIm8.roa (download)

Subject key identifier:   B8:67:49:7E:E1:EF:50:E6:C6:9D:1B:AA:66:7F:B5:E9:3B:44:22:6F 
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
asID:                     AS396982
Prefixes:
    1: 194.187.56.0/22 maxlen: 22

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/uGdJfuHvUObGnRuqZn-16TtEIm8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27205034 (0x19f1daa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
        Validity
            Not Before: Jan  1 04:59:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b867497ee1ef50e6c69d1baa667fb5e93b44226f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:9d:9d:47:e1:93:bc:45:00:f1:c6:05:c8:
                    1d:7c:0b:ba:96:5e:00:a4:18:8c:b5:2f:b3:76:c4:
                    e2:c0:15:bc:c3:99:16:51:d0:0f:59:6e:c8:1e:38:
                    af:6c:85:a7:9a:0f:72:7d:60:96:3d:94:da:00:55:
                    0b:ae:40:e5:05:3d:f5:c2:fb:f0:45:8b:81:5c:ac:
                    a1:a6:04:78:db:53:4d:5e:ec:71:22:77:bc:71:5f:
                    eb:dd:b2:31:2c:73:4c:16:57:a1:9a:be:0b:8c:92:
                    17:d6:7d:0e:fc:9f:5f:be:cb:51:c9:1e:bc:37:b1:
                    8f:21:6b:70:e7:96:0d:4c:1d:a2:89:d4:77:b0:fb:
                    33:25:f5:5f:5f:6e:42:97:0c:c6:81:9e:b6:30:c2:
                    01:8c:42:2b:da:92:b4:b0:31:e1:96:1f:6d:17:bf:
                    ac:f9:30:b0:f9:ea:6d:e3:c9:16:ea:df:83:c6:e5:
                    d1:45:4e:b6:e2:30:70:8f:b7:b8:83:c2:64:bf:4b:
                    72:24:32:6d:2d:2a:f7:3e:97:ae:33:8c:51:f8:e4:
                    b3:99:9c:77:13:30:4a:2f:82:a2:50:e2:e5:29:04:
                    fe:a5:f3:df:b8:73:e0:a9:e6:5c:b5:5c:aa:3f:6b:
                    8a:5e:8d:49:e1:a0:84:bc:77:33:04:be:60:49:a1:
                    08:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B8:67:49:7E:E1:EF:50:E6:C6:9D:1B:AA:66:7F:B5:E9:3B:44:22:6F
            X509v3 Authority Key Identifier: 
                keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/uGdJfuHvUObGnRuqZn-16TtEIm8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.187.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:2c:85:2d:21:96:81:53:dd:7b:d3:89:7e:c2:fd:7e:c3:cf:
         f6:80:aa:08:18:b0:fd:cc:d3:e1:e0:4a:68:9f:64:ef:6a:59:
         a8:4a:1a:2a:97:52:a5:8e:4a:01:82:35:30:74:53:23:c3:c0:
         f5:68:30:5e:cd:a0:b7:f0:f5:9b:38:0a:09:56:d8:02:a0:56:
         0e:97:47:1d:77:c2:ca:59:f5:39:b1:8e:3d:09:fe:52:53:14:
         8b:49:3e:c6:38:91:93:d5:b6:3a:65:1d:66:50:e4:dd:6a:81:
         53:29:18:90:32:f4:1c:85:9e:57:b4:cc:ba:08:84:77:4e:af:
         f3:63:37:4d:88:e7:42:4b:27:a1:27:a4:5e:ab:c4:24:15:53:
         93:b6:61:8f:a2:49:63:2f:60:f6:e1:1f:7d:cf:3e:a8:6d:10:
         93:ae:40:ca:81:9d:92:9e:75:a5:57:1b:a4:dc:cd:4d:8f:4e:
         9f:8a:b3:f9:ee:02:52:65:47:ae:b9:52:68:3e:84:f2:f4:36:
         1c:b0:8d:64:3e:4b:5a:1d:83:d7:c8:dc:15:41:d6:34:7a:12:
         b2:9b:6e:14:aa:9d:cd:5c:c0:7c:f9:76:96:14:26:66:b6:8d:
         20:22:1f:53:9d:c8:3f:69:fc:86:51:6d:7b:9f:b5:22:7c:58:
         cf:2e:32:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 08:32:55 2022 by LibreSSL & rpki-client.