Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/P9IKhXLSayqQxgbOzr5845gT2I0.roa (download)

Subject key identifier:   3F:D2:0A:85:72:D2:6B:2A:90:C6:06:CE:CE:BE:7C:E3:98:13:D8:8D 
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
asID:                     AS0
Prefixes:
    1: 185.1.105.0/24 (max: 24)
    2: 2001:7f8:bf::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/P9IKhXLSayqQxgbOzr5845gT2I0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310158901 (0x127ca635)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
        Validity
            Not Before: Jan  1 04:15:28 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3fd20a8572d26b2a90c606cecebe7ce39813d88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:0c:3d:02:20:95:6a:b9:28:94:1b:5b:ab:
                    20:c7:7b:bf:ff:99:8a:d4:63:03:9e:27:fe:68:3a:
                    db:35:f0:01:35:ba:eb:1c:b2:18:16:1f:2f:88:c3:
                    91:6c:b9:d1:6b:cc:c9:db:e1:0e:4c:94:76:03:b5:
                    60:a1:d3:0b:4d:f5:43:e0:99:b7:7d:f4:c4:f5:53:
                    20:5b:be:67:5b:03:13:f0:df:1d:ad:6f:94:19:73:
                    71:5f:ba:02:1e:1a:f3:ca:55:82:19:f3:7b:73:07:
                    ec:e3:7e:11:3c:d4:84:73:43:ec:e7:99:0f:c0:fd:
                    42:3a:8a:89:41:36:1a:61:14:69:65:06:cd:54:f9:
                    6a:72:f8:37:c7:e0:0d:74:79:17:f8:11:46:cc:23:
                    49:e9:bb:39:e3:10:de:e4:6a:18:65:b1:ac:16:ed:
                    c9:ad:2f:e6:8b:c3:09:83:58:90:a6:f3:79:0b:2d:
                    1d:5b:21:c3:52:33:28:ba:b4:ed:99:08:4e:5e:3d:
                    50:e3:ce:97:50:79:bf:02:4f:d9:26:20:13:a4:ac:
                    68:c0:8b:42:f3:f9:a8:83:76:e5:fc:ad:05:2e:97:
                    75:60:16:d2:f5:71:13:68:b3:23:b8:98:a0:55:d2:
                    da:69:5e:ba:82:d3:99:6d:0e:bf:1b:d9:fb:b0:38:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3F:D2:0A:85:72:D2:6B:2A:90:C6:06:CE:CE:BE:7C:E3:98:13:D8:8D
            X509v3 Authority Key Identifier: 
                keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/P9IKhXLSayqQxgbOzr5845gT2I0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0......i0.....0.... .....
    Signature Algorithm: sha256WithRSAEncryption
         24:63:54:1a:9a:1e:87:15:0c:3e:93:ed:d0:74:31:51:59:be:
         93:4b:53:84:6a:37:73:2b:55:ba:ef:9f:74:92:9c:6d:65:f1:
         18:6c:9b:f8:e8:22:22:20:63:eb:17:fd:57:70:3a:22:86:32:
         0b:4d:d0:f5:af:c8:f7:1f:50:00:49:32:ba:04:07:b7:5e:ab:
         b6:4b:cf:3c:ca:cc:48:c7:40:b0:dd:36:0c:0f:53:7d:b8:71:
         0b:ca:b3:a8:79:77:86:7f:84:62:57:5b:a7:59:b1:cc:6a:ff:
         59:d8:95:b4:11:e7:2a:b3:e9:42:c5:38:fa:86:59:4b:bf:2a:
         2c:81:c9:d9:ab:34:ee:30:28:15:a9:3a:1b:01:eb:d2:34:93:
         95:69:52:45:dc:71:87:05:c0:67:98:ec:09:6d:ed:a3:18:21:
         aa:da:a8:5a:3c:73:74:a1:2c:e6:c1:b2:4d:35:66:45:12:a9:
         85:28:c9:86:81:8d:b4:38:0e:fc:82:fa:e2:fc:37:99:19:3d:
         d5:56:d5:c7:99:e1:c1:f9:10:42:06:36:ad:d5:fa:0f:d1:28:
         53:b7:cc:b3:3b:90:87:3a:09:0b:5e:0a:b6:53:ac:7f:1e:e4:
         fd:ac:a4:3c:f4:33:07:0d:86:be:2b:36:12:91:14:54:8d:ff:
         36:a7:e9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:13:49 2021 by LibreSSL & rpki-client.