Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/UlDian-Kt7nwAWHqQDF-bIoCWbE.roa (download)

Subject key identifier:   52:50:E2:6A:7F:8A:B7:B9:F0:01:61:EA:40:31:7E:6C:8A:02:59:B1 
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
asID:                     AS397423
Prefixes:
    1: 93.152.210.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/UlDian-Kt7nwAWHqQDF-bIoCWbE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85806679 (0x51d4e57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Validity
            Not Before: Jan  1 06:52:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5250e26a7f8ab7b9f00161ea40317e6c8a0259b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8e:16:f9:fa:0e:03:d0:d2:df:2b:ef:aa:19:
                    4f:13:ff:03:f4:73:b2:ec:95:be:7e:a1:1f:a1:e3:
                    f9:16:30:5a:e9:d2:09:3c:e8:81:44:73:89:ac:3c:
                    1e:c8:08:af:5c:ef:68:80:60:11:27:6f:d9:16:fa:
                    91:9a:97:0d:fc:f7:10:cf:99:2b:fc:4f:b9:dc:79:
                    7b:41:fd:a7:d8:64:da:f4:ce:03:85:5c:fe:ab:35:
                    c9:9d:da:0d:9b:3e:2d:20:65:44:a5:af:24:6b:c6:
                    92:97:81:dc:2d:12:78:d7:5b:6d:05:3a:c6:45:77:
                    b8:0c:42:8f:85:f4:9b:c0:a6:7e:2f:63:88:de:5a:
                    c7:78:25:dc:6e:ac:4f:7a:69:86:d5:d8:5f:4c:58:
                    60:78:77:8d:41:b8:c2:42:3a:13:28:e9:af:14:ae:
                    6c:b6:a8:25:fe:dc:19:c0:a9:f1:81:cc:25:b3:45:
                    6a:09:f3:17:00:02:db:63:72:0a:2d:13:22:07:da:
                    b4:9b:e2:02:13:4a:79:f0:4e:ac:ad:45:28:08:1f:
                    79:37:f1:45:5e:63:29:54:ed:78:e1:ee:89:17:ab:
                    e1:e7:af:c2:1e:26:64:32:67:5c:f6:db:2c:0c:c1:
                    ab:b3:5a:e4:c3:64:2d:65:31:32:0d:58:46:0e:f1:
                    01:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                52:50:E2:6A:7F:8A:B7:B9:F0:01:61:EA:40:31:7E:6C:8A:02:59:B1
            X509v3 Authority Key Identifier: 
                keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/UlDian-Kt7nwAWHqQDF-bIoCWbE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.152.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:fa:2a:73:c1:dd:49:3a:52:2f:39:c5:06:e6:2f:8e:ce:25:
         6f:a7:90:3f:a1:0a:ad:69:b2:60:19:a0:6e:1a:92:08:f9:45:
         f6:d9:20:65:42:84:36:63:e4:6f:a5:8c:1e:b3:fc:a4:21:05:
         29:d4:36:59:78:93:0e:35:c2:75:f9:52:48:95:d5:fc:6e:e3:
         bc:0a:04:f9:26:98:47:8c:3b:32:b8:f0:2d:d8:cd:70:97:2c:
         78:22:8b:ef:70:20:ef:a0:e6:23:f6:82:48:8c:ea:c6:cb:c2:
         f0:a9:81:c7:9f:f2:c3:59:52:e2:70:78:e8:c8:02:fc:30:fa:
         c5:be:f7:57:c1:63:ab:1a:ee:d7:d7:11:7a:54:bb:b2:85:13:
         ed:4b:95:12:50:6e:0a:66:9a:a5:a4:58:cb:c4:0e:21:9e:04:
         5c:22:e6:2e:02:4d:a8:6d:80:a6:c9:b3:a3:2b:82:a2:cf:29:
         5a:e0:57:3d:ee:46:86:10:0e:68:68:63:97:fa:8b:a9:3a:20:
         d2:62:a9:3b:5d:12:61:1f:d5:66:bf:35:b9:a7:2f:7c:d5:96:
         c6:ba:8c:3f:a7:84:00:12:aa:ab:9b:44:7c:25:7d:04:d5:3b:
         a8:6f:52:4e:ac:45:6d:25:17:ab:37:f6:fc:66:96:42:0d:4c:
         9b:39:d4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 10:31:23 2022 by LibreSSL & rpki-client.