Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/4uCMjHwo9Tl80JAZQfnaXIEHLlo.roa (download)

Subject key identifier:   E2:E0:8C:8C:7C:28:F5:39:7C:D0:90:19:41:F9:DA:5C:81:07:2E:5A 
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
asID:                     AS0
Prefixes:
    1: 194.153.168.0/23 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/4uCMjHwo9Tl80JAZQfnaXIEHLlo.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51818575 (0x316b04f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
        Validity
            Not Before: Jan  1 02:03:50 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e2e08c8c7c28f5397cd0901941f9da5c81072e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:74:3d:e2:eb:c1:0e:55:83:ce:c3:80:83:
                    01:6c:5b:ed:21:75:a5:42:af:99:09:b3:b7:c8:51:
                    42:1e:b1:61:8f:dd:9d:dd:a7:b9:03:34:c9:92:1c:
                    df:7c:b6:3d:cd:17:a2:b0:7c:bf:91:97:60:7c:bb:
                    5f:dd:40:6d:25:af:10:2d:ea:3a:ce:d0:51:6f:c3:
                    0c:31:3e:b5:32:19:3b:c1:13:1b:3f:b2:3f:ff:44:
                    57:6e:32:fa:bd:64:af:d0:f7:d2:52:ff:11:08:eb:
                    85:f3:9f:52:48:47:45:4d:b8:ca:22:7b:81:90:74:
                    3c:2a:89:ac:04:f6:03:ee:94:7e:b3:25:bc:11:4c:
                    22:40:98:e1:9f:3a:5b:7e:92:36:90:b8:46:35:14:
                    ac:f0:ba:f6:cb:0d:72:e4:37:26:08:49:17:64:d4:
                    95:0e:a0:0a:fc:50:94:db:83:60:21:92:3c:34:42:
                    dc:89:e8:88:0c:44:f1:b8:4d:03:3d:bb:0b:84:2c:
                    77:c1:fb:e8:96:26:a7:73:01:a6:74:2c:c5:ea:5d:
                    4b:cf:42:78:35:bf:86:1e:ea:e8:4f:de:9d:2f:c0:
                    f9:1c:49:c1:43:f4:58:24:c1:b0:ea:a9:fb:56:e9:
                    6b:f8:36:7c:5b:6c:02:fc:40:f8:9a:49:a8:b8:9f:
                    82:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E2:E0:8C:8C:7C:28:F5:39:7C:D0:90:19:41:F9:DA:5C:81:07:2E:5A
            X509v3 Authority Key Identifier: 
                keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/4uCMjHwo9Tl80JAZQfnaXIEHLlo.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.......
    Signature Algorithm: sha256WithRSAEncryption
         41:34:fc:fa:f0:6d:9a:0f:89:6a:01:cf:5a:d6:d3:bf:86:12:
         9b:1a:64:37:fc:43:af:20:05:55:eb:cd:02:15:18:94:e3:25:
         75:02:aa:cb:9c:70:05:82:f5:76:2d:1b:c0:65:1b:ad:e0:d9:
         7d:13:fe:74:92:3f:9f:b1:be:20:93:6f:57:f5:a7:9b:98:42:
         f0:0a:c7:ec:91:98:ad:82:5d:de:88:8c:3b:dd:95:ef:1e:5f:
         c0:d7:04:4d:2b:06:9c:7b:d1:8f:9c:c8:3d:b0:fe:56:5f:fc:
         42:d3:24:dd:3b:78:ac:a1:e7:82:51:06:a0:a4:73:c3:bc:c1:
         5d:b3:d1:81:be:4d:48:a2:db:56:aa:ad:8d:b7:5c:30:b6:18:
         d2:3d:19:3e:ec:17:74:5a:b1:2d:e6:4b:48:6d:7d:7c:f3:17:
         6c:56:4d:e8:8b:fb:f0:a3:75:9b:02:f6:7b:96:59:85:aa:fb:
         fc:1c:8f:3f:c7:f6:ab:f2:49:f4:cd:ad:68:b0:71:a3:8f:bd:
         0a:a4:b2:5a:dc:9a:f6:d2:4e:91:1d:d6:fe:81:20:cc:bd:36:
         bb:90:ea:9d:16:0c:0c:96:04:22:21:df:8f:6e:2a:81:55:84:
         ec:67:ad:02:51:bc:4b:27:21:a1:fc:fa:4b:6c:90:a2:c3:1a:
         88:10:2e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:23:52 2021 by LibreSSL & rpki-client.