Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/Y6U7sXMamNQ7R62Nf_7fiK1OZbo.roa (download)

Subject key identifier:   63:A5:3B:B1:73:1A:98:D4:3B:47:AD:8D:7F:FE:DF:88:AD:4E:65:BA 
Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
asID:                     AS399587
Prefixes:
    1: 193.3.54.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/Y6U7sXMamNQ7R62Nf_7fiK1OZbo.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3422319 (0x34386f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
        Validity
            Not Before: May 19 14:29:00 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=63a53bb1731a98d43b47ad8d7ffedf88ad4e65ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:55:6d:f6:0b:a3:37:59:5c:56:92:04:68:
                    1b:01:06:f4:b0:6f:3e:7b:62:74:d9:c3:b2:6b:bd:
                    a4:c1:22:85:71:49:14:0f:5a:46:29:d5:89:0f:a8:
                    80:70:eb:11:a1:2f:ab:84:e2:d4:30:f5:d0:11:66:
                    16:13:50:54:68:29:c4:1b:ef:57:62:f2:62:39:cd:
                    ba:bd:7d:46:75:76:6c:64:30:a8:a2:02:68:c3:14:
                    95:bc:65:72:00:42:3a:30:33:9c:f0:ab:14:c0:d1:
                    26:fb:27:27:6e:7a:97:62:c9:0f:86:c8:d8:bc:8b:
                    c9:ef:10:af:7d:33:64:83:d5:f9:da:ed:1e:08:a0:
                    33:da:74:a1:5f:c3:07:68:48:05:37:b8:53:37:c5:
                    d4:69:ed:c6:9b:28:34:ec:d0:60:2d:b4:68:d5:cf:
                    ac:3c:b6:16:dd:04:cc:97:ed:ae:07:19:2e:e0:6d:
                    af:33:59:e4:2b:02:81:18:0d:ee:84:f2:af:45:df:
                    25:d3:3b:e8:5e:22:60:d9:b9:f5:97:54:ee:8a:22:
                    ff:7f:bb:bc:d0:bc:bc:ca:2f:da:d4:3d:18:31:86:
                    8f:65:26:64:a4:47:d7:75:45:c6:f7:42:13:9b:b6:
                    d6:91:94:ad:e9:70:d2:d7:d4:4d:69:00:85:d4:db:
                    64:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                63:A5:3B:B1:73:1A:98:D4:3B:47:AD:8D:7F:FE:DF:88:AD:4E:65:BA
            X509v3 Authority Key Identifier: 
                keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/Y6U7sXMamNQ7R62Nf_7fiK1OZbo.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:95:16:a9:1b:9a:bb:d4:51:f7:bf:bb:a8:41:62:cd:43:55:
         b1:15:34:73:a8:36:25:d1:3b:6f:b0:17:73:6c:52:84:43:c4:
         34:59:63:a7:94:64:b8:53:77:95:31:ae:92:76:a1:61:22:10:
         ec:5f:f8:23:24:cd:cd:4c:d8:47:ad:8c:c1:cb:3d:72:d1:35:
         07:79:95:94:5c:c0:c7:12:6a:5e:48:1f:ac:c0:0d:e0:08:46:
         36:7b:d1:e5:ce:27:27:70:67:f7:bf:53:cb:91:c0:20:43:39:
         7f:b6:f3:ea:4d:42:66:bb:78:9a:86:3c:30:c6:af:93:96:27:
         ac:63:0a:0e:20:29:b7:c1:73:ea:53:00:0f:5c:f3:06:f2:e9:
         90:e9:d2:fc:ef:1e:ee:e8:c2:06:87:3d:30:88:13:49:e2:91:
         16:49:9c:f9:69:5a:39:e6:8e:37:5c:1a:d1:df:a0:19:ea:9e:
         df:91:74:eb:53:d6:2e:a6:02:8d:d6:f1:4f:d5:6b:b6:e0:b7:
         47:3a:d2:05:c8:fe:af:31:27:45:3f:0f:ed:b9:c9:f4:3e:b7:
         8e:5a:59:db:92:42:7d:ce:1a:c1:ac:fc:4f:a5:21:fe:e3:f3:
         57:95:34:7e:9c:56:05:3f:ec:14:04:b4:15:7a:46:16:d8:36:
         f7:48:3d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:04:25 2021 by LibreSSL & rpki-client.