Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/VCjTbCOPE_IqQFu1r1hSfDq5Rck.roa (download)

Subject key identifier:   54:28:D3:6C:23:8F:13:F2:2A:40:5B:B5:AF:58:52:7C:3A:B9:45:C9 
Authority key identifier: 53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C
asID:                     AS6939
Prefixes:
    1: 195.153.124.0/24 (max: 24)
    2: 195.153.19.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/VCjTbCOPE_IqQFu1r1hSfDq5Rck.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44250199 (0x2a33457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53fb5242f98cff9dea9baa8c8ae466a42b537c5c
        Validity
            Not Before: Jan  1 03:29:29 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5428d36c238f13f22a405bb5af58527c3ab945c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:14:e2:c1:f3:c6:9e:3f:8e:86:cf:57:ab:
                    7f:ef:83:95:1f:71:8f:7a:67:82:f7:03:23:d4:35:
                    e2:b6:c2:fb:01:da:58:7c:bb:87:22:c3:65:b1:5f:
                    f2:7b:bd:18:08:76:d9:ae:8d:81:e9:1d:46:80:ba:
                    36:db:43:d5:d2:f2:58:7f:5c:20:c4:7a:3c:b6:2f:
                    a5:1d:20:6e:32:36:dd:20:d7:22:59:49:e0:fe:33:
                    a1:84:6c:47:75:a7:94:d7:37:ab:4e:33:06:74:b9:
                    02:b6:60:84:47:29:27:cb:58:ad:74:d3:60:ef:6e:
                    5f:4a:a5:e9:3a:af:10:04:d5:12:9f:31:e3:b4:ef:
                    c9:24:19:de:8f:71:21:c3:b2:4f:99:37:bb:f4:19:
                    83:60:75:2d:05:a2:d3:c4:49:04:98:0e:41:ac:ba:
                    12:49:b5:5f:03:f4:69:96:e9:17:d8:d8:e4:64:fa:
                    f3:d3:a5:10:9f:74:3d:fc:96:73:d4:fe:e5:31:a0:
                    ab:65:c8:31:65:61:e9:a6:30:e9:19:0b:42:74:2d:
                    59:9d:c3:f4:b5:19:50:fe:2a:13:22:b7:d5:21:a3:
                    70:89:d4:cf:cb:9c:e9:74:8b:1c:0f:74:7f:a5:23:
                    9a:39:7b:c0:47:57:ea:cb:3d:8d:db:d7:f0:2d:35:
                    7b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                54:28:D3:6C:23:8F:13:F2:2A:40:5B:B5:AF:58:52:7C:3A:B9:45:C9
            X509v3 Authority Key Identifier: 
                keyid:53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/VCjTbCOPE_IqQFu1r1hSfDq5Rck.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.153.19.0/24
                  195.153.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:1f:17:8d:f4:bf:bb:5c:78:ed:ae:14:a4:f3:e2:c8:ee:1b:
         a7:b3:4f:0e:b8:28:7e:96:dd:97:e6:f6:1a:89:5e:09:13:1b:
         fa:99:f6:2e:8c:6b:dd:61:77:4e:8d:2e:41:a1:eb:42:c1:42:
         7c:51:78:69:d3:1c:e0:b7:f2:7b:cb:66:b9:1a:84:4c:53:8e:
         5d:50:9f:fc:af:ce:74:c9:7e:5c:e4:9d:cf:69:3c:8d:3f:24:
         0e:7d:6a:d4:25:bc:2d:62:34:d8:6b:4f:84:fb:f1:42:b1:a9:
         59:fd:b6:64:df:14:f0:37:eb:fa:90:8f:8c:ba:0a:e2:bf:2b:
         56:58:d1:bd:5c:5d:7e:86:1a:39:bf:f7:90:cd:9c:3f:6c:0c:
         ab:b3:e7:00:28:d7:ff:80:8f:94:ea:2d:05:61:88:a7:f1:d0:
         53:d2:50:15:85:d2:a3:e1:b3:48:b0:ff:e6:1a:a2:a8:c4:29:
         cc:71:cd:d8:1a:87:37:19:6f:c3:13:33:89:b5:f6:bc:31:83:
         ca:5c:bd:f6:4b:48:c8:bd:b4:fb:67:82:36:3f:c0:ca:65:86:
         6b:14:74:b2:b0:01:43:50:56:3e:50:f7:3b:51:05:75:7e:3b:
         13:27:56:8c:9e:e9:b9:23:8f:02:7d:ea:20:6a:18:fe:2f:46:
         71:24:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:41:59 2021 by LibreSSL & rpki-client.