Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/dZz1yirPWolZjAN7XSwxKBzmx_M.roa (download)

Subject key identifier:   75:9C:F5:CA:2A:CF:5A:89:59:8C:03:7B:5D:2C:31:28:1C:E6:C7:F3 
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
asID:                     AS0
Prefixes:
    1: 185.1.86.0/24 (max: 32)
    2: 2001:7f8:af::/48 (max: 128)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/dZz1yirPWolZjAN7XSwxKBzmx_M.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80766043 (0x4d0645b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
        Validity
            Not Before: Jan  1 03:27:56 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=759cf5ca2acf5a89598c037b5d2c31281ce6c7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ec:05:bf:4c:fd:af:0c:e3:8e:7e:f4:3f:10:
                    76:7f:79:12:b7:db:b1:04:3a:19:34:a7:1f:3f:02:
                    bc:79:7a:e6:5c:70:e0:f6:66:24:24:55:bd:10:2d:
                    42:9b:c0:26:d7:c1:a7:8e:7b:fe:0e:6b:56:3a:f6:
                    f0:fd:cd:37:d9:8a:da:49:15:b7:80:1c:7e:8c:c5:
                    4d:71:b4:70:9f:e8:86:7e:37:a1:e0:f9:8a:67:01:
                    0d:4e:13:06:4b:93:c7:dd:95:d2:ca:5b:db:a5:97:
                    bb:79:14:6e:ce:35:79:e2:ee:fa:ee:e9:58:0c:3c:
                    13:55:03:4b:56:7e:81:82:71:99:fc:4c:65:38:98:
                    ec:20:a2:33:ec:4a:74:ed:b1:f0:47:49:66:e6:3f:
                    9a:48:2d:28:78:3c:d9:d2:00:af:b1:54:fa:10:b8:
                    20:32:b6:7f:3c:bb:9b:5e:2d:bc:2b:bd:a0:a6:ed:
                    d1:9e:95:ea:4c:ab:0b:89:4e:65:2f:55:47:1d:eb:
                    11:bd:32:af:64:a2:9d:91:1c:1c:92:b6:99:97:63:
                    7f:a5:b6:ff:c9:f6:27:43:a1:44:2a:40:ff:0e:84:
                    fc:6b:d2:27:c3:0a:37:a1:a5:85:eb:a3:b3:b5:94:
                    39:9b:95:7b:36:c1:f5:fd:a7:0b:65:60:88:8a:fc:
                    f2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                75:9C:F5:CA:2A:CF:5A:89:59:8C:03:7B:5D:2C:31:28:1C:E6:C7:F3
            X509v3 Authority Key Identifier: 
                keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/dZz1yirPWolZjAN7XSwxKBzmx_M.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0......V0.....0.... .....
    Signature Algorithm: sha256WithRSAEncryption
         10:2b:1f:06:ce:fa:19:1d:e3:0c:67:a1:b7:31:42:6c:75:90:
         29:53:a7:12:03:f1:48:e4:11:25:53:5a:5f:7f:17:7e:09:fa:
         88:07:c6:c7:11:ba:2a:51:8c:0a:d1:41:b6:fa:75:f9:45:bd:
         81:28:b7:2d:83:2e:78:29:7d:b2:62:2b:36:01:91:f0:ab:40:
         69:42:32:b7:21:c6:6d:b3:08:47:b8:36:5f:61:45:b4:08:34:
         03:7a:eb:83:08:64:5c:8c:7e:ae:60:0d:fd:11:02:45:c3:7d:
         de:9f:29:9e:c5:34:fb:fb:12:51:12:75:0d:30:b4:c4:7b:cf:
         72:5d:54:9f:22:28:8d:48:f8:eb:34:ba:73:f6:e9:e8:89:8b:
         52:17:ed:59:a1:5d:7f:cd:0e:54:f6:17:7f:db:94:c6:97:59:
         d8:97:3d:bb:39:72:a9:5e:4e:33:8d:a1:11:18:62:ef:cb:ab:
         95:6f:ef:1c:73:94:b3:f3:3c:53:e7:6b:09:ce:86:85:88:4d:
         a0:9d:6f:ea:ff:10:1a:3b:90:fc:80:5c:b6:20:99:8c:c2:27:
         33:79:4e:bc:76:bc:81:91:88:d7:6d:f6:0a:b6:00:0b:56:1c:
         12:85:04:d6:b7:4d:a2:86:a8:5f:72:e7:81:86:f3:70:4e:54:
         b7:18:d4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:19:48 2021 by LibreSSL & rpki-client.