Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/CJZIGUecOg153kjNH8mNOiOYtcg.roa (download)

Subject key identifier:   08:96:48:19:47:9C:3A:0D:79:DE:48:CD:1F:C9:8D:3A:23:98:B5:C8 
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
asID:                     AS1239
Prefixes:
    1: 185.89.249.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/CJZIGUecOg153kjNH8mNOiOYtcg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358195689 (0x1559a1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
        Validity
            Not Before: Jan  1 08:04:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=08964819479c3a0d79de48cd1fc98d3a2398b5c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:37:ad:d9:52:90:0d:d8:8d:a1:74:15:64:c9:
                    2e:8d:63:23:4b:7c:26:27:15:c9:60:f8:02:b8:ef:
                    d1:36:30:60:74:f3:c4:1a:af:0a:5f:9c:7a:92:7e:
                    0e:b9:7f:85:8c:91:3f:e2:b6:b3:1a:20:f5:3d:ea:
                    ad:0a:40:d0:72:00:6c:01:06:2c:58:b4:70:f2:f1:
                    31:6b:f9:17:bc:dc:71:a2:d3:2e:06:f8:65:a1:9d:
                    c7:92:4f:0f:fb:9a:a9:78:a7:51:cc:cf:39:3f:0c:
                    06:d1:f0:b4:52:0f:4c:76:c0:20:e1:52:62:36:0d:
                    07:41:06:42:ea:02:f6:e4:ee:54:22:35:c9:e2:87:
                    2b:91:10:60:4a:19:06:14:2d:8f:a6:13:98:8d:72:
                    0d:a9:b7:2f:5f:84:36:5e:57:00:6c:2c:36:16:0b:
                    71:26:6f:4a:73:7b:46:80:5f:be:c4:a2:66:a8:ef:
                    ce:5b:ff:c1:ba:3a:1f:bd:b8:79:0c:3b:78:8a:81:
                    9f:8d:2a:83:f0:d5:66:20:10:66:c4:3f:69:2d:8c:
                    26:54:36:94:99:b5:a9:89:3c:b7:45:a7:f9:de:22:
                    d0:35:3a:b6:55:6d:b0:71:b0:17:2f:93:8a:23:2a:
                    a1:1a:36:10:22:52:0e:c5:a8:a8:52:80:97:20:33:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                08:96:48:19:47:9C:3A:0D:79:DE:48:CD:1F:C9:8D:3A:23:98:B5:C8
            X509v3 Authority Key Identifier: 
                keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/CJZIGUecOg153kjNH8mNOiOYtcg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.89.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:ba:07:f9:59:40:9a:bb:d6:ea:9f:e9:80:31:f0:0a:bf:4a:
         9d:d7:49:13:6a:f1:72:93:89:c7:93:12:b7:bf:9a:f5:03:a7:
         80:67:de:3b:62:70:e9:7f:c1:0b:5d:43:9f:e4:c1:3c:a5:3b:
         1f:47:5b:87:61:27:c1:16:38:d1:46:32:31:98:91:78:92:13:
         2a:0e:24:04:78:95:69:c4:c5:21:0f:61:40:17:3d:92:92:cc:
         fa:3a:d7:41:60:3a:8a:d8:be:72:50:85:58:28:9c:76:fe:26:
         1e:5f:c6:ef:1f:6a:72:17:e5:7e:d8:2e:c6:7e:a0:61:e0:f3:
         b9:65:98:30:d8:9b:da:d7:71:c9:ab:2a:3a:e9:37:80:4d:1d:
         64:88:7c:68:73:fd:73:5f:b4:13:56:f1:ff:8e:8a:36:fb:5e:
         e2:48:41:04:ec:a3:55:21:ac:2e:ed:55:c0:0f:58:40:26:b6:
         cd:f6:15:48:08:a2:d7:80:9f:10:e5:1d:46:c9:64:7d:b0:9b:
         4f:fc:c3:43:53:2d:43:8f:0b:13:80:f1:b0:66:1c:b8:ba:e5:
         ad:37:2b:9a:0f:e4:c2:44:ea:7d:06:f8:66:82:b0:11:6f:6f:
         56:d1:49:cf:33:73:26:65:ff:f4:4c:2c:e9:31:be:be:ec:ac:
         7f:e7:ef:e4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFVmh6TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZjA3NDM0OTZjN2ZmM2VmZmI4NzA2MDExMzljYWQ5ZDJmMjcxZTEwMB4XDTIyMDEw
MTA4MDQ0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDg5NjQ4MTk0Nzlj
M2EwZDc5ZGU0OGNkMWZjOThkM2EyMzk4YjVjODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOE3rdlSkA3YjaF0FWTJLo1jI0t8JicVyWD4Arjv0TYwYHTz
xBqvCl+cepJ+Drl/hYyRP+K2sxog9T3qrQpA0HIAbAEGLFi0cPLxMWv5F7zccaLT
Lgb4ZaGdx5JPD/uaqXinUczPOT8MBtHwtFIPTHbAIOFSYjYNB0EGQuoC9uTuVCI1
yeKHK5EQYEoZBhQtj6YTmI1yDam3L1+ENl5XAGwsNhYLcSZvSnN7RoBfvsSiZqjv
zlv/wbo6H724eQw7eIqBn40qg/DVZiAQZsQ/aS2MJlQ2lJm1qYk8t0Wn+d4i0DU6
tlVtsHGwFy+TiiMqoRo2ECJSDsWoqFKAlyAz5hkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQIlkgZR5w6DXneSM0fyY06I5i1yDAfBgNVHSMEGDAWgBSfB0NJbH/z7/uH
BgETnK2dLyceEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L253ZERTV3hfOC1fN2h3WUJFNXl0blM4bkhoQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvMjJiN2FiLWZjMTEtNDA3YS1iZDNjLTYzNDExMzY3ZDkwYS8x
L0NKWklHVWVjT2cxNTNrak5IOG1OT2lPWXRjZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
MjJiN2FiLWZjMTEtNDA3YS1iZDNjLTYzNDExMzY3ZDkwYS8xL253ZERTV3hfOC1f
N2h3WUJFNXl0blM4bkhoQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlZ+TANBgkqhkiG9w0BAQsFAAOC
AQEAZLoH+VlAmrvW6p/pgDHwCr9KnddJE2rxcpOJx5MSt7+a9QOngGfeO2Jw6X/B
C11Dn+TBPKU7H0dbh2EnwRY40UYyMZiReJITKg4kBHiVacTFIQ9hQBc9kpLM+jrX
QWA6iti+clCFWCicdv4mHl/G7x9qchflftguxn6gYeDzuWWYMNib2tdxyasqOuk3
gE0dZIh8aHP9c1+0E1bx/46KNvte4khBBOyjVSGsLu1VwA9YQCa2zfYVSAii14Cf
EOUdRslkfbCbT/zDQ1MtQ48LE4DxsGYcuLrlrTcrmg/kwkTqfQb4ZoKwEW9vVtFJ
zzNzJmX/9Ews6TG+vuysf+fv5A==
-----END CERTIFICATE-----

Generated at Sun Jan 30 12:41:06 2022 by LibreSSL & rpki-client.