Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/b2/5f16c4-f10f-454e-af47-291f84dd043c/1/UzkpoLHU5FxcrywVMHT3Y1vXI50.roa (download)

Subject key identifier:   53:39:29:A0:B1:D4:E4:5C:5C:AF:2C:15:30:74:F7:63:5B:D7:23:9D 
Authority key identifier: 79:8A:EE:76:D2:BC:39:78:E9:0A:1C:6B:A5:CB:0E:C8:1C:1B:06:E4
asID:                     AS3356
Prefixes:
    1: 194.50.0.0/23 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/b2/5f16c4-f10f-454e-af47-291f84dd043c/1/UzkpoLHU5FxcrywVMHT3Y1vXI50.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018207 (0xf895f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798aee76d2bc3978e90a1c6ba5cb0ec81c1b06e4
        Validity
            Not Before: Feb 28 17:50:53 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=533929a0b1d4e45c5caf2c153074f7635bd7239d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:77:0c:f1:07:86:c3:13:b6:c0:85:5e:0b:
                    37:a9:86:27:86:86:db:1a:87:19:c9:f7:a8:c8:cc:
                    6a:c1:11:b2:b7:0f:f3:81:ac:d5:3d:8c:fb:3e:6a:
                    be:7e:15:1e:f1:3f:51:3c:2d:5a:07:03:3e:9b:f0:
                    25:40:26:4e:0c:46:b3:a7:7f:63:97:e7:a0:5c:d8:
                    50:5c:c8:66:a8:84:c7:1c:3a:11:a1:76:8d:1f:06:
                    e3:bb:18:95:38:36:83:f0:df:f5:36:7c:28:83:81:
                    ea:26:50:e2:d7:77:24:3e:9f:10:7b:c6:03:2a:ca:
                    39:21:e0:f8:39:6d:ff:20:31:c5:95:7b:db:b3:d1:
                    79:3d:40:a3:2b:e6:06:87:bb:cb:a3:c7:01:ae:ec:
                    b1:84:53:af:f1:eb:26:7f:6f:a8:18:9f:86:7b:54:
                    f3:b9:5f:88:c0:d4:12:89:4a:b5:91:af:b7:53:d6:
                    31:a6:02:32:2e:37:c4:4b:ce:86:2a:91:44:43:11:
                    e5:8d:87:2a:b3:c2:c0:cd:0b:ce:63:38:73:21:4e:
                    3d:af:b1:51:17:3c:90:f1:08:fa:3d:6f:ad:1b:5f:
                    a1:e6:5e:50:c0:9d:45:7f:b8:5e:76:93:a6:b3:2c:
                    d5:be:81:af:c5:bd:e2:c6:81:e2:f1:b7:f5:75:8d:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                53:39:29:A0:B1:D4:E4:5C:5C:AF:2C:15:30:74:F7:63:5B:D7:23:9D
            X509v3 Authority Key Identifier: 
                keyid:79:8A:EE:76:D2:BC:39:78:E9:0A:1C:6B:A5:CB:0E:C8:1C:1B:06:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYrudtK8OXjpChxrpcsOyBwbBuQ.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/5f16c4-f10f-454e-af47-291f84dd043c/1/UzkpoLHU5FxcrywVMHT3Y1vXI50.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/5f16c4-f10f-454e-af47-291f84dd043c/1/eYrudtK8OXjpChxrpcsOyBwbBuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....2.
    Signature Algorithm: sha256WithRSAEncryption
         57:64:dc:dc:bd:01:f8:b3:46:d5:56:92:c9:e0:6c:50:7d:7c:
         39:1a:03:c0:e3:f9:58:0f:c7:e5:d8:18:84:0c:7e:09:ed:8b:
         f0:80:c8:05:8a:46:19:24:76:9d:93:8c:e1:70:30:45:7b:88:
         5a:57:e0:a8:c6:1c:b9:c7:4b:79:b9:0d:b0:3f:f0:f7:b3:23:
         a3:39:d4:99:de:d4:68:3c:46:86:3a:89:c2:de:b3:21:76:03:
         e1:2c:a6:86:6c:cd:0c:4f:16:80:80:c6:14:95:0a:e4:e1:ce:
         06:ec:12:92:bd:d0:76:a4:6c:de:e1:18:7f:5e:62:47:0c:d3:
         63:11:3d:d3:65:b9:47:62:49:27:fe:82:3a:9e:84:47:ac:0f:
         5e:a4:4b:87:3a:d4:6b:70:74:6a:a3:24:23:93:af:5c:2f:f8:
         2f:8f:30:0a:bd:48:d7:c2:5b:00:1e:a9:64:a0:a3:d8:ab:17:
         e1:bf:72:c0:4b:93:a6:bf:df:cb:e7:d3:1f:3d:ff:55:e3:7e:
         fa:76:be:cc:85:a3:d0:f0:53:b0:6a:f9:50:49:d7:68:49:98:
         ed:b1:94:72:c1:21:1d:90:da:bb:5a:f7:bc:d3:c8:d6:aa:d3:
         8e:62:99:7a:b6:b5:db:29:b7:1d:0c:53:20:da:a5:a5:79:13:
         d7:84:ad:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu May 27 19:07:06 2021 by LibreSSL & rpki-client.