Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/9c2l0n-8TbeNW_MJmUVlv-llCFw.roa (download)

Subject key identifier:   F5:CD:A5:D2:7F:BC:4D:B7:8D:5B:F3:09:99:45:65:BF:E9:65:08:5C 
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
asID:                     AS1239
Prefixes:
    1: 185.84.160.0/22 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/9c2l0n-8TbeNW_MJmUVlv-llCFw.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874530237 (0x342045bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Jan  1 09:02:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f5cda5d27fbc4db78d5bf309994565bfe965085c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:57:5a:a5:72:d4:3e:64:02:68:0e:ff:41:cf:
                    09:a5:ef:49:ee:57:bf:01:94:e1:fd:74:0b:ba:12:
                    f1:cb:92:3e:0b:d9:47:e1:39:97:27:d8:3b:85:a5:
                    ee:d7:b0:63:51:77:11:ab:78:cf:3d:91:eb:68:89:
                    bc:2a:59:69:e5:d6:3e:61:36:d5:c8:b9:fa:70:85:
                    98:0e:00:bb:79:18:49:2d:c0:90:d2:18:82:0e:41:
                    b4:08:86:98:79:c2:cb:8f:bb:0a:89:48:94:06:8c:
                    8f:d8:2d:2f:0f:53:de:ba:9c:16:39:bb:8d:d6:85:
                    38:8d:88:62:69:d2:ab:90:62:de:db:bc:7c:43:c3:
                    3c:2f:44:88:83:0f:4d:e5:cd:41:ea:f0:31:62:50:
                    39:b9:da:51:53:c1:3c:d6:dd:0a:ab:52:1f:6c:1b:
                    54:d7:68:37:72:b4:ee:70:84:84:59:9e:e4:5b:99:
                    bc:08:ca:f6:08:b9:1f:ef:a6:29:f7:68:5b:3e:74:
                    2c:3e:11:74:63:41:ec:a6:a6:91:01:fe:1f:e4:e5:
                    ab:a7:6f:e9:91:36:ec:8f:f7:6c:e8:37:ed:39:7b:
                    39:58:30:cd:7d:4e:b2:c3:cd:d6:5b:c3:67:24:e7:
                    b7:0c:57:1e:4d:fe:e7:2b:b9:f8:d9:ce:65:e3:05:
                    44:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F5:CD:A5:D2:7F:BC:4D:B7:8D:5B:F3:09:99:45:65:BF:E9:65:08:5C
            X509v3 Authority Key Identifier: 
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/9c2l0n-8TbeNW_MJmUVlv-llCFw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.84.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:ea:74:79:35:cc:dd:d3:cc:e4:fa:32:fe:08:c3:32:ce:38:
         95:28:b5:7a:2c:c2:30:9a:71:ff:a7:9a:7e:bf:c8:11:a6:43:
         d9:ea:8a:27:cd:a6:89:12:aa:df:2d:1e:b9:68:fa:bf:ff:4f:
         84:39:ab:8d:c6:db:3e:7a:d1:ac:6b:a2:7f:68:38:13:22:32:
         ef:d8:27:fc:9f:91:29:79:84:55:b8:75:dd:80:2f:08:53:d7:
         00:59:9a:0f:74:62:06:0b:bc:aa:a4:31:9e:ae:2a:7b:f7:f6:
         7e:df:b0:ba:d7:69:3f:95:35:22:de:b8:99:50:93:b5:67:91:
         a6:4b:ad:bb:12:c5:0e:4c:d4:22:22:f8:51:b7:a5:24:2d:99:
         19:65:9c:7f:89:e8:8c:4b:20:26:13:c1:70:65:3c:ca:b5:a3:
         10:84:51:b6:80:3b:60:a8:59:43:4f:8a:3e:03:27:96:7c:99:
         e3:06:8f:25:f6:f3:42:68:b6:60:f7:f5:bd:f4:b0:57:e0:6b:
         72:b9:6a:36:80:3f:35:3e:f2:87:7e:6d:60:0c:7a:4c:e2:7d:
         5e:48:f3:1f:06:13:85:99:9c:8f:4e:4a:d4:58:c1:2e:91:4f:
         55:b7:6d:63:61:5d:9b:66:4c:bc:0a:74:da:8d:e3:50:ca:a1:
         06:af:4b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 12:29:31 2022 by LibreSSL & rpki-client.