Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/krYVMgp_4nKG6HPP0O-BmazhHgM.roa (download)

Subject key identifier:   92:B6:15:32:0A:7F:E2:72:86:E8:73:CF:D0:EF:81:99:AC:E1:1E:03 
Authority key identifier: 74:4C:F1:14:4E:49:58:87:E4:8A:7E:3B:B6:4B:17:88:35:FB:3D:C5
asID:                     AS1239
Prefixes:
    1: 185.249.53.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/krYVMgp_4nKG6HPP0O-BmazhHgM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21428525 (0x146f92d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744cf1144e495887e48a7e3bb64b178835fb3dc5
        Validity
            Not Before: Jan  1 11:53:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=92b615320a7fe27286e873cfd0ef8199ace11e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:56:bd:77:e1:4c:3d:c6:2d:dc:35:9a:1e:50:
                    25:d2:70:a2:79:ef:f3:3f:ac:e4:67:ff:88:90:ed:
                    68:6d:59:29:7f:85:1e:24:39:2c:8b:ae:0e:57:0c:
                    28:cf:bb:db:83:50:ff:7c:94:6d:8c:ae:2f:94:d9:
                    80:ec:a1:0b:84:82:a4:fe:33:de:a7:0d:a2:2b:36:
                    e2:54:9a:a1:18:32:63:17:18:14:ca:82:ec:26:49:
                    dc:34:6e:03:4b:c1:bc:d1:88:8a:19:81:a6:0c:42:
                    ee:56:53:af:60:d4:db:f3:97:c5:2e:2b:d8:bb:68:
                    2b:18:04:48:2f:54:36:40:88:c6:36:ca:c1:16:15:
                    ad:e7:ba:d1:c9:78:2d:cb:01:f6:fd:c9:9a:37:09:
                    8f:a7:5e:26:30:1d:86:b5:d8:f4:31:2b:cc:ef:31:
                    a9:ac:93:d9:07:27:3c:46:5f:46:0c:8d:f8:14:0e:
                    c2:53:42:67:f1:1b:95:c4:46:25:aa:cf:56:24:7e:
                    e8:a5:7b:5e:36:21:ea:6a:39:88:42:fc:03:1f:43:
                    c3:8c:a0:56:e8:5e:a3:23:de:e9:eb:12:3b:15:4f:
                    dd:ea:69:8a:41:3b:ae:10:2b:89:7a:88:93:17:77:
                    11:59:ff:27:6b:2f:2e:ba:d0:96:7c:80:5c:6c:40:
                    8c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                92:B6:15:32:0A:7F:E2:72:86:E8:73:CF:D0:EF:81:99:AC:E1:1E:03
            X509v3 Authority Key Identifier: 
                keyid:74:4C:F1:14:4E:49:58:87:E4:8A:7E:3B:B6:4B:17:88:35:FB:3D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEzxFE5JWIfkin47tksXiDX7PcU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/krYVMgp_4nKG6HPP0O-BmazhHgM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/dEzxFE5JWIfkin47tksXiDX7PcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:01:2c:78:b2:74:9e:6d:9d:c6:ce:8c:dc:18:55:f1:de:d0:
         b0:65:ad:a3:04:e6:e7:a1:a7:ec:a4:61:18:fb:a7:43:c6:26:
         84:03:d7:05:4b:b2:0c:fc:f8:98:76:2a:9a:ab:17:d9:c5:56:
         40:53:cd:7d:88:50:ed:24:b4:bd:89:68:71:e9:08:06:68:fd:
         a7:fc:06:95:55:e5:8b:b7:d6:7a:96:8f:59:32:7f:37:1f:ae:
         27:40:a1:44:d7:44:8b:ff:6c:dd:c7:c2:76:98:93:7c:b5:73:
         fb:e4:9a:81:d8:4c:88:4e:11:90:54:08:64:53:43:48:40:89:
         b6:af:06:aa:a0:63:fd:db:8f:40:55:b6:47:c6:e4:78:ad:97:
         03:1e:f9:eb:29:57:a3:29:80:3c:7f:e3:5c:74:06:ff:18:cb:
         35:cc:4c:ad:2d:c0:46:ad:cb:27:2a:08:92:c2:74:b4:e1:46:
         84:66:6d:86:6a:20:6d:8c:09:9a:4e:eb:6b:86:b5:e1:e1:5c:
         85:d1:35:c4:d1:15:51:b0:0e:52:65:67:dd:ef:f2:90:75:16:
         57:2b:fb:92:c9:79:82:b4:23:73:fc:38:b5:d9:dd:18:48:c5:
         08:47:97:ed:79:3a:99:07:bd:0d:23:dd:51:08:fe:b6:4d:fb:
         9d:00:ad:47
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAUb5LTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDRjZjExNDRlNDk1ODg3ZTQ4YTdlM2JiNjRiMTc4ODM1ZmIzZGM1MB4XDTIyMDEw
MTExNTM0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTJiNjE1MzIwYTdm
ZTI3Mjg2ZTg3M2NmZDBlZjgxOTlhY2UxMWUwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFWvXfhTD3GLdw1mh5QJdJwonnv8z+s5Gf/iJDtaG1ZKX+F
HiQ5LIuuDlcMKM+724NQ/3yUbYyuL5TZgOyhC4SCpP4z3qcNois24lSaoRgyYxcY
FMqC7CZJ3DRuA0vBvNGIihmBpgxC7lZTr2DU2/OXxS4r2LtoKxgESC9UNkCIxjbK
wRYVree60cl4LcsB9v3JmjcJj6deJjAdhrXY9DErzO8xqayT2QcnPEZfRgyN+BQO
wlNCZ/EblcRGJarPViR+6KV7XjYh6mo5iEL8Ax9Dw4ygVuheoyPe6esSOxVP3epp
ikE7rhAriXqIkxd3EVn/J2svLrrQlnyAXGxAjGECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSSthUyCn/icoboc8/Q74GZrOEeAzAfBgNVHSMEGDAWgBR0TPEUTklYh+SK
fju2SxeINfs9xTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RFenhGRTVKV0lma2luNDd0a3NYaURYN1BjVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTMvZDA2MDBjLTFhZTEtNDljYS1hYmRmLTRmNDI1ZWNkZDZlMi8x
L2tyWVZNZ3BfNG5LRzZIUFAwTy1CbWF6aEhnTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMv
ZDA2MDBjLTFhZTEtNDljYS1hYmRmLTRmNDI1ZWNkZDZlMi8xL2RFenhGRTVKV0lm
a2luNDd0a3NYaURYN1BjVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn5NTANBgkqhkiG9w0BAQsFAAOC
AQEAXQEseLJ0nm2dxs6M3BhV8d7QsGWtowTm56Gn7KRhGPunQ8YmhAPXBUuyDPz4
mHYqmqsX2cVWQFPNfYhQ7SS0vYlocekIBmj9p/wGlVXli7fWepaPWTJ/Nx+uJ0Ch
RNdEi/9s3cfCdpiTfLVz++SagdhMiE4RkFQIZFNDSECJtq8GqqBj/duPQFW2R8bk
eK2XAx756ylXoymAPH/jXHQG/xjLNcxMrS3ARq3LJyoIksJ0tOFGhGZthmogbYwJ
mk7ra4a14eFchdE1xNEVUbAOUmVn3e/ykHUWVyv7ksl5grQjc/w4tdndGEjFCEeX
7Xk6mQe9DSPdUQj+tk37nQCtRw==
-----END CERTIFICATE-----

Generated at Sun Jan 30 13:25:37 2022 by LibreSSL & rpki-client.