Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/NNW1XyO7DXi_HKiCOEdgqH9mp5I.roa (download)

Subject key identifier:   34:D5:B5:5F:23:BB:0D:78:BF:1C:A8:82:38:47:60:A8:7F:66:A7:92 
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
asID:                     AS399746
Prefixes:
    1: 185.221.218.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/NNW1XyO7DXi_HKiCOEdgqH9mp5I.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167671932 (0x9fe787c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
        Validity
            Not Before: Jan  1 02:54:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=34d5b55f23bb0d78bf1ca882384760a87f66a792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:ea:04:15:c6:ec:4d:e1:49:14:33:0f:4a:
                    b2:4a:ca:33:99:1c:de:43:06:37:c8:02:9f:8f:3a:
                    bd:a2:a3:2b:12:9b:a0:f3:a4:20:60:38:29:fe:33:
                    00:00:16:14:36:c7:06:15:c7:4e:50:6a:2d:e0:09:
                    4c:f1:6a:5d:3f:59:cd:c0:32:b4:8b:7a:43:cb:8f:
                    30:4e:a4:53:d5:68:b6:f0:5a:1a:b4:89:c0:ca:7e:
                    5c:ce:b5:f3:15:af:2c:c2:b8:43:c7:f4:38:17:14:
                    60:83:31:e6:65:58:3c:54:4e:5d:1f:11:76:7f:30:
                    19:09:3e:ee:c7:ac:23:16:5a:96:3c:2b:61:98:91:
                    52:ee:03:aa:fb:a5:19:ca:f9:dd:9a:72:86:8f:4c:
                    a0:87:15:07:4a:a1:1d:4b:78:27:b3:1f:df:90:eb:
                    2b:12:a8:9d:7f:c2:f1:d3:37:3d:36:86:b5:e9:13:
                    f7:36:2d:94:ed:7b:ea:ab:24:02:c8:1e:bf:56:fb:
                    a5:52:71:05:fb:41:1a:e7:71:e4:05:cd:5d:a9:23:
                    83:ae:34:36:fb:fa:83:4f:c4:1a:30:7f:e9:11:f1:
                    57:08:2b:cd:f0:4b:f1:9d:5b:95:a3:3e:b0:1a:02:
                    bc:5a:8c:81:22:f5:0e:62:59:a0:28:b7:c1:0a:bb:
                    86:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                34:D5:B5:5F:23:BB:0D:78:BF:1C:A8:82:38:47:60:A8:7F:66:A7:92
            X509v3 Authority Key Identifier: 
                keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/NNW1XyO7DXi_HKiCOEdgqH9mp5I.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.221.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:0c:d2:4b:19:9c:96:13:d4:0c:ac:44:62:ad:0f:58:ff:90:
         41:06:37:47:5a:55:7c:12:c9:80:c7:99:06:5a:04:54:44:35:
         e5:4d:68:12:8b:ce:f0:aa:bf:1e:62:bd:93:79:36:d3:86:60:
         42:5e:88:bf:a5:eb:78:b5:7c:c6:2e:99:a1:1a:c1:d8:52:f1:
         e8:20:9b:39:48:a8:9a:fb:19:1d:70:cd:32:23:9f:c3:b1:12:
         4c:1e:0a:52:29:00:9e:f6:40:17:e9:a0:a6:cf:06:2f:22:a7:
         25:31:da:59:c2:40:aa:37:72:3b:a9:ec:af:fc:df:f1:17:05:
         7e:e5:d6:58:f2:8b:47:1e:5c:33:d4:d2:0a:a4:c0:bd:5d:17:
         86:fe:84:11:2c:20:f6:98:31:d5:60:ae:3f:cf:da:9e:a5:d5:
         a8:5a:37:37:1b:e8:bf:2d:dc:01:c4:f3:fd:c2:de:03:23:02:
         9f:cd:80:dc:19:37:34:8e:9e:6c:4f:29:0f:36:c9:31:b1:de:
         35:d9:db:78:f9:5c:c0:c8:29:2b:2b:13:4b:e6:e7:d1:4d:4d:
         23:34:4c:a3:99:ee:60:f1:77:c2:64:dc:fd:0c:05:37:85:43:
         de:de:e0:8d:ec:63:94:72:e3:99:dd:05:70:13:b5:e7:5c:46:
         b1:92:9f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 13:06:21 2022 by LibreSSL & rpki-client.