Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/n-x0K1goETHpOpGuQTtTxNV4Hy0.roa (download)

Subject key identifier:   9F:EC:74:2B:58:28:11:31:E9:3A:91:AE:41:3B:53:C4:D5:78:1F:2D 
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
asID:                     AS399471
Prefixes:
    1: 185.126.34.0/24 (max: 24)
    2: 185.28.37.0/24 (max: 24)
    3: 185.28.39.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/n-x0K1goETHpOpGuQTtTxNV4Hy0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19303300 (0x1268b84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
        Validity
            Not Before: Jun  1 03:56:01 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9fec742b58281131e93a91ae413b53c4d5781f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c8:17:86:39:f3:1d:a5:36:33:c4:13:00:bd:
                    cb:53:3e:05:03:51:58:36:99:bf:24:9a:e3:34:e0:
                    82:2a:11:c2:da:94:c9:26:b8:5a:08:17:1d:8f:2c:
                    36:02:e7:47:49:73:ea:74:22:c8:da:64:61:35:04:
                    65:9b:64:97:43:bc:5d:7d:35:8f:f8:44:f5:e7:21:
                    ed:a5:08:9f:40:bd:8f:76:6d:8d:92:f4:7f:e6:f8:
                    61:82:83:33:0c:a5:94:9c:17:4a:e6:03:48:ce:7d:
                    4b:a9:50:f9:05:b2:6c:bf:6e:75:f6:fd:b1:3a:a2:
                    02:32:da:bf:b4:c1:ee:46:c5:bf:3b:ce:77:3a:0f:
                    37:08:a3:aa:d8:f8:81:9e:9e:e9:07:a0:2c:93:ab:
                    1b:84:08:91:78:53:fb:47:61:17:b2:8a:64:19:ac:
                    2c:b2:e4:39:11:3d:ee:ec:48:52:12:b3:b1:fd:d0:
                    08:6b:a2:58:27:59:a8:13:93:ae:97:14:85:21:99:
                    eb:13:1d:bc:1e:0f:e4:a0:b4:e5:80:0b:20:1c:1a:
                    02:e9:ac:83:1e:ba:d8:fc:26:f2:ea:54:d1:4b:af:
                    4c:bd:48:64:df:f5:9f:2a:ae:02:3d:ad:49:d7:c3:
                    0b:9a:95:a8:ad:66:ea:e0:ee:db:2a:9f:4e:17:26:
                    89:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9F:EC:74:2B:58:28:11:31:E9:3A:91:AE:41:3B:53:C4:D5:78:1F:2D
            X509v3 Authority Key Identifier: 
                keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/n-x0K1goETHpOpGuQTtTxNV4Hy0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.28.37.0/24
                  185.28.39.0/24
                  185.126.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:a0:98:56:7b:01:78:95:72:52:d5:f6:7a:c9:53:75:d5:ad:
         46:79:56:fc:bc:36:eb:90:1a:b9:ed:93:34:d6:ad:61:84:ad:
         b1:2a:95:62:7d:ae:25:15:05:ca:3b:f3:3d:07:ea:02:38:e5:
         9d:9e:d0:e3:da:a5:c5:c8:bf:1a:bb:17:e7:53:33:8d:e5:28:
         ff:78:66:c0:a5:71:47:c2:53:87:9b:8a:37:63:6c:55:50:8c:
         e9:4c:8b:cf:57:a7:9c:71:e5:dc:c1:1f:8a:4a:c8:f9:2a:67:
         be:86:18:ff:ef:7a:a8:ef:02:ac:fe:5a:b2:18:40:c7:56:86:
         dd:66:58:98:2b:6e:ba:f6:86:18:d1:8f:50:c8:71:59:81:31:
         d0:e0:02:64:2b:0c:b1:3a:0c:71:a7:d9:63:64:b9:4a:08:07:
         a6:b5:e2:69:cb:61:7c:fd:ea:80:0d:90:d1:07:1a:ea:73:5f:
         6c:86:9d:3c:e5:59:a6:c2:48:ac:9c:df:88:21:99:e6:69:41:
         2b:04:9b:cb:f8:bb:99:4a:19:ad:f0:5b:34:a0:92:80:08:91:
         3c:96:c8:d5:2a:5e:5c:7a:8c:5b:8b:d5:79:7b:ac:4c:aa:8b:
         d7:9e:3d:04:b0:c8:1c:c8:2e:9b:50:df:26:71:54:87:7b:3d:
         f5:1b:39:8c
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEASaLhDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
Yjk3YzIyZDBiMzM4YThhNDVhYTEzNDViMDkxN2JhMGRjOTczMzkwMB4XDTIxMDYw
MTAzNTYwMVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWZlYzc0MmI1ODI4
MTEzMWU5M2E5MWFlNDEzYjUzYzRkNTc4MWYyZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANTIF4Y58x2lNjPEEwC9y1M+BQNRWDaZvySa4zTggioRwtqU
ySa4WggXHY8sNgLnR0lz6nQiyNpkYTUEZZtkl0O8XX01j/hE9ech7aUIn0C9j3Zt
jZL0f+b4YYKDMwyllJwXSuYDSM59S6lQ+QWybL9udfb9sTqiAjLav7TB7kbFvzvO
dzoPNwijqtj4gZ6e6QegLJOrG4QIkXhT+0dhF7KKZBmsLLLkORE97uxIUhKzsf3Q
CGuiWCdZqBOTrpcUhSGZ6xMdvB4P5KC05YALIBwaAumsgx662Pwm8upU0UuvTL1I
ZN/1nyquAj2tSdfDC5qVqK1m6uDu2yqfThcmiUcCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSf7HQrWCgRMek6ka5BO1PE1XgfLTAfBgNVHSMEGDAWgBSbl8ItCzOKikWq
E0WwkXug3JczkDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L201ZkNMUXN6aW9wRnFoTkZzSkY3b055WE01QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGMvZTIyNThkLThiYzUtNDRlZC04MDczLWFlOTk5ZWQ3YzVkNC8x
L24teDBLMWdvRVRIcE9wR3VRVHRUeE5WNEh5MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMv
ZTIyNThkLThiYzUtNDRlZC04MDczLWFlOTk5ZWQ3YzVkNC8xL201ZkNMUXN6aW9w
RnFoTkZzSkY3b055WE01QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEALkcJQMEALkcJwMEALl+IjANBgkq
hkiG9w0BAQsFAAOCAQEAPaCYVnsBeJVyUtX2eslTddWtRnlW/Lw265Aaue2TNNat
YYStsSqVYn2uJRUFyjvzPQfqAjjlnZ7Q49qlxci/GrsX51MzjeUo/3hmwKVxR8JT
h5uKN2NsVVCM6UyLz1ennHHl3MEfikrI+SpnvoYY/+96qO8CrP5ashhAx1aG3WZY
mCtuuvaGGNGPUMhxWYEx0OACZCsMsToMcafZY2S5SggHprXiacthfP3qgA2Q0Qca
6nNfbIadPOVZpsJIrJzfiCGZ5mlBKwSby/i7mUoZrfBbNKCSgAiRPJbI1SpeXHqM
W4vVeXusTKqL1549BLDIHMgum1DfJnFUh3s99Rs5jA==
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:05:58 2021 by LibreSSL & rpki-client.