Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/5d/4c8dd0-af96-44e3-b0fe-4d89397d9898/1/fxFsqVijm8RYqAkySFRMlYpcjlk.roa (download)

Subject key identifier:   7F:11:6C:A9:58:A3:9B:C4:58:A8:09:32:48:54:4C:95:8A:5C:8E:59 
Authority key identifier: A3:85:C3:CB:A3:12:A0:78:C4:D0:A7:12:AF:53:16:DD:1E:41:C4:66
asID:                     AS1239
Prefixes:
    1: 185.252.212.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/5d/4c8dd0-af96-44e3-b0fe-4d89397d9898/1/fxFsqVijm8RYqAkySFRMlYpcjlk.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16810293 (0x1008135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a385c3cba312a078c4d0a712af5316dd1e41c466
        Validity
            Not Before: Jan  1 08:02:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7f116ca958a39bc458a8093248544c958a5c8e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:0f:b4:b1:c7:51:d2:18:ee:6e:c6:b6:aa:
                    72:74:64:a6:c1:f7:48:7f:c8:b3:de:62:c0:57:b3:
                    03:23:30:ae:50:6d:3e:48:7b:4d:e5:19:b7:e8:38:
                    c3:3f:e9:a8:86:42:23:6f:3f:39:a1:72:b0:89:00:
                    67:22:f0:15:25:e0:a5:79:c3:67:02:2c:12:f5:d7:
                    06:b6:b1:8c:cb:67:05:85:2a:31:d7:b2:1b:f7:71:
                    48:52:27:d7:82:6b:d7:ec:0c:36:0b:79:66:10:c6:
                    9a:27:eb:34:de:54:69:75:e0:28:5a:e6:d8:e3:37:
                    5c:e6:cb:a8:75:02:6f:c2:6d:f1:6b:f4:bd:d0:48:
                    2f:79:1b:c2:5d:8e:61:49:16:49:79:27:be:45:4a:
                    49:1f:51:a3:91:aa:24:1e:e1:51:72:4e:a1:c8:42:
                    9f:73:bf:e5:61:4d:56:59:58:15:e2:43:43:86:ba:
                    d4:2e:41:d0:a2:05:d1:c1:51:1e:c1:b7:e1:07:bf:
                    64:07:3b:f2:c7:a8:7c:5b:e6:93:09:4e:bf:5a:b0:
                    0e:e0:05:52:0d:63:11:e6:01:3f:d0:c6:c0:33:98:
                    5d:0c:fa:4e:68:44:d8:4b:98:1d:bf:87:da:67:e6:
                    3d:2d:99:33:e0:8c:2c:f7:34:5b:39:89:d8:f9:31:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7F:11:6C:A9:58:A3:9B:C4:58:A8:09:32:48:54:4C:95:8A:5C:8E:59
            X509v3 Authority Key Identifier: 
                keyid:A3:85:C3:CB:A3:12:A0:78:C4:D0:A7:12:AF:53:16:DD:1E:41:C4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4XDy6MSoHjE0KcSr1MW3R5BxGY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4c8dd0-af96-44e3-b0fe-4d89397d9898/1/fxFsqVijm8RYqAkySFRMlYpcjlk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4c8dd0-af96-44e3-b0fe-4d89397d9898/1/o4XDy6MSoHjE0KcSr1MW3R5BxGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:0c:4a:eb:c0:56:0f:0a:4f:da:8d:7e:7c:d8:c1:22:58:9b:
         eb:8c:01:a8:1f:97:07:07:1b:c3:4c:3a:82:0f:76:b2:35:ce:
         f9:05:2e:11:a3:11:67:c6:c7:7a:62:82:b5:58:e9:87:27:2c:
         66:0c:5b:1c:d8:3b:07:15:8e:0a:87:d3:ac:26:f4:bc:41:da:
         cd:b4:1b:b6:7a:38:ea:cd:69:02:c3:f0:a8:d7:c7:c3:3d:84:
         3e:e4:05:b6:6b:5a:d2:2d:29:7f:f8:55:49:a5:18:55:b4:18:
         5a:d1:a9:b9:e1:d7:43:10:64:c6:75:59:fd:b6:8c:74:f5:78:
         17:79:80:21:37:32:53:95:47:c5:35:64:36:d6:d6:85:5a:7d:
         a5:a8:4d:91:fd:54:83:d5:1b:6a:86:16:fa:9d:91:41:5a:9b:
         e7:6b:e5:8c:30:b5:9a:14:d1:f6:69:fe:1a:33:cf:d7:bf:be:
         da:9b:85:d9:74:99:6f:ff:f8:37:66:a2:9d:ba:24:d7:b7:f2:
         f6:72:65:13:b6:62:9c:84:e0:2a:6b:f8:51:22:35:9c:f8:16:
         d3:44:00:a1:99:e6:33:ad:95:13:21:aa:7d:a4:8f:7a:f3:37:
         a7:b3:95:cd:db:7b:9d:f0:0f:49:dc:1e:bd:f3:0a:93:5b:bf:
         50:65:44:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 12:51:28 2022 by LibreSSL & rpki-client.