Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/BMklzNFpsa3nNtMY5cZRYu5gx2U.roa (download)

Subject key identifier:   04:C9:25:CC:D1:69:B1:AD:E7:36:D3:18:E5:C6:51:62:EE:60:C7:65 
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
asID:                     AS398772
Prefixes:
    1: 193.168.140.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/BMklzNFpsa3nNtMY5cZRYu5gx2U.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30752883 (0x1d54073)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
        Validity
            Not Before: Oct 12 09:04:12 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=04c925ccd169b1ade736d318e5c65162ee60c765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:bc:8e:72:50:18:c2:ed:5b:08:32:73:a7:
                    5e:54:aa:d3:ca:57:d4:f1:1a:d7:25:b2:18:fb:46:
                    69:aa:42:25:f8:35:50:e2:70:47:56:b5:87:fc:6b:
                    61:b2:b4:a8:f8:a0:ae:27:52:e9:97:0a:79:87:53:
                    14:75:80:c8:66:0a:02:cc:5d:f4:0b:34:7b:24:82:
                    06:07:86:61:b0:91:50:e6:d1:d1:fe:e4:a7:61:89:
                    70:4b:c0:ad:d3:3a:ed:7f:16:03:46:f1:d1:a6:b1:
                    b6:4d:8c:ba:08:c2:8c:56:32:5b:2b:08:24:9d:8d:
                    a9:31:01:dc:83:c5:3a:60:d7:cf:17:c1:91:74:e4:
                    19:6a:9f:a0:2d:df:0d:fb:6c:e8:bd:57:76:14:bf:
                    f1:32:7e:32:cf:38:8e:ba:69:98:84:c3:b9:89:7e:
                    07:e4:29:0a:08:d9:ed:87:c7:ea:f2:aa:70:79:4e:
                    e5:3f:68:92:83:55:9d:ab:18:fb:f9:bc:6a:d6:52:
                    3c:68:1d:7a:59:10:5b:c9:f3:ef:2e:0d:cf:fe:10:
                    7d:e5:61:d2:20:11:cf:9d:7d:e4:bd:65:8c:5a:7e:
                    60:50:82:33:2d:53:fd:20:69:88:7d:2f:82:e4:5f:
                    f4:c8:dc:03:02:3a:0b:9c:f9:8e:d9:89:80:0c:23:
                    9c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                04:C9:25:CC:D1:69:B1:AD:E7:36:D3:18:E5:C6:51:62:EE:60:C7:65
            X509v3 Authority Key Identifier: 
                keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/BMklzNFpsa3nNtMY5cZRYu5gx2U.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.168.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:b5:6f:57:a3:63:bc:fd:7b:d6:51:d4:a9:f9:6f:6e:8a:93:
         42:60:6e:81:d0:45:86:85:a5:da:91:db:82:08:ff:5f:13:00:
         52:05:70:56:b0:13:e6:79:52:47:fd:30:ff:06:89:d1:72:92:
         00:45:16:2d:95:da:27:3e:a3:ba:9c:13:2c:67:3e:41:55:e5:
         e9:e8:44:0b:95:39:e8:47:56:43:0a:81:b5:0a:bc:a3:6d:c0:
         7c:dc:c4:19:10:6b:3c:7b:74:c0:37:84:3f:e6:1d:8b:7e:e7:
         b4:d5:b9:22:bc:f9:9a:16:dc:e0:09:23:bd:ee:56:3e:0a:50:
         45:7b:fa:29:99:d3:8c:0e:a4:0b:25:e6:ca:1a:db:6c:02:9e:
         8c:57:6f:59:7f:b3:85:4a:7c:ad:e8:c7:b7:97:c6:23:73:17:
         d2:a3:ec:a6:e3:0a:a4:52:ff:ac:86:4a:7f:d8:07:09:22:7b:
         a9:9b:3c:f6:6a:28:48:57:20:f0:66:65:c0:a6:a1:b2:0d:f4:
         54:95:db:fa:dd:5f:bd:bc:af:db:82:49:15:51:26:cd:17:a3:
         77:18:f9:40:b0:50:04:82:ef:1d:12:ec:83:42:22:9a:08:ca:
         e1:32:2c:81:e5:95:56:3a:ec:2f:6e:03:70:03:e0:24:f2:c8:
         ad:41:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Oct 12 11:38:37 2021 by LibreSSL & rpki-client.