Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Mc4VQntPc5rdGlzM5L7_Rugz55k.roa (download)

Subject key identifier:   31:CE:15:42:7B:4F:73:9A:DD:1A:5C:CC:E4:BE:FF:46:E8:33:E7:99 
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
asID:                     AS26636
Prefixes:
    1: 93.152.205.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Mc4VQntPc5rdGlzM5L7_Rugz55k.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45733995 (0x2b9d86b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Validity
            Not Before: Apr 28 06:54:03 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=31ce15427b4f739add1a5ccce4beff46e833e799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c3:78:90:80:06:02:e2:55:73:44:0a:33:c6:
                    29:0d:e1:c7:4b:a4:f0:ee:d0:f0:1d:93:6d:16:d3:
                    fc:48:9f:11:15:e3:96:2c:e4:8b:16:63:f6:c7:0f:
                    40:5a:5e:dd:9f:8c:ab:80:22:49:a7:31:eb:da:11:
                    58:c8:4b:af:1d:19:86:43:f1:ee:0e:7d:21:cd:22:
                    1a:af:03:51:70:1c:e4:b2:dc:52:aa:57:f6:df:0d:
                    95:35:5b:7e:f1:46:4f:f5:0a:69:62:7b:e4:3c:c8:
                    ea:a8:3f:50:80:19:2c:1d:ad:a2:9e:12:86:d9:81:
                    6c:b4:0a:20:7a:2d:ab:82:7a:86:3e:01:f3:48:81:
                    0a:6b:10:0c:29:44:b3:d0:37:a3:fc:90:27:c0:83:
                    63:4a:3f:5b:e1:1e:ae:ca:48:fe:d8:74:6e:b8:58:
                    b5:71:6b:96:ad:bb:48:a3:cb:a6:e5:f4:a5:b0:e5:
                    47:15:ff:7c:de:7b:35:9e:9b:e4:c5:b9:19:ae:bc:
                    98:e2:c5:23:67:57:00:1e:a1:cf:82:76:63:95:a2:
                    c3:11:46:ab:98:c6:63:ab:95:70:44:aa:d5:50:e0:
                    58:10:bf:30:94:f5:98:ff:42:80:dd:a4:5d:a7:40:
                    72:ef:19:7d:07:64:68:b5:62:de:3a:2a:39:a1:8a:
                    72:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                31:CE:15:42:7B:4F:73:9A:DD:1A:5C:CC:E4:BE:FF:46:E8:33:E7:99
            X509v3 Authority Key Identifier: 
                keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Mc4VQntPc5rdGlzM5L7_Rugz55k.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.152.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:0b:b9:76:90:17:bf:e4:0f:9b:76:73:97:0f:3f:83:af:c5:
         5f:35:15:97:3d:f7:ca:d4:cc:5d:f1:16:3d:6b:6e:d0:f1:be:
         5e:7f:c0:ed:a4:d0:51:5d:30:a2:6b:6d:34:33:f7:d3:70:10:
         19:ad:5f:da:3c:6f:f9:7c:88:bd:80:b6:9f:d8:8d:0e:ea:17:
         50:e5:08:af:e8:3a:4d:fc:b9:c7:ca:4a:d9:11:cc:fb:35:13:
         a7:42:a6:f7:b2:d0:29:85:16:21:ea:91:68:4e:ed:41:73:47:
         09:69:73:29:0e:ea:35:a0:1f:58:18:5f:45:02:64:ba:ec:9f:
         d8:ee:0e:c7:4e:a7:01:15:fb:84:25:03:4d:8f:33:64:28:97:
         50:e5:27:01:dd:10:7c:b4:47:1e:b7:b3:d7:dd:b6:f0:19:f4:
         c8:5f:de:71:83:93:b8:3f:73:ec:9f:00:74:b4:69:05:62:4f:
         bf:fb:e6:a3:65:51:fd:4e:d8:0e:ec:30:2b:34:29:3b:d6:43:
         00:35:e7:88:d6:82:63:9e:df:ef:e2:9b:56:0a:0e:91:d8:a4:
         f7:ba:1f:19:2e:8f:94:b9:e7:d8:83:6a:d9:5c:3b:77:c2:11:
         f7:0b:fe:51:5e:09:97:d5:17:ad:0e:cb:cc:b9:e2:46:58:ee:
         eb:e7:70:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:09:16 2021 by LibreSSL & rpki-client.