Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/2a/d17ad9-7b1d-43f4-be4a-121015308acd/1/Co0tHHzSxyXZxGDttKhjArH5QfY.roa (download)

Subject key identifier:   0A:8D:2D:1C:7C:D2:C7:25:D9:C4:60:ED:B4:A8:63:02:B1:F9:41:F6 
Authority key identifier: AA:02:03:60:BC:B0:6B:B5:4F:7A:52:00:4B:7D:7C:69:B0:33:B6:52
asID:                     AS26636
Prefixes:
    1: 185.232.85.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/2a/d17ad9-7b1d-43f4-be4a-121015308acd/1/Co0tHHzSxyXZxGDttKhjArH5QfY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41412055 (0x277e5d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa020360bcb06bb54f7a52004b7d7c69b033b652
        Validity
            Not Before: Apr  7 15:40:35 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0a8d2d1c7cd2c725d9c460edb4a86302b1f941f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3a:ff:ce:80:4c:3a:00:df:ed:89:d8:80:b2:
                    46:69:7f:60:06:ea:30:a3:6d:ea:d2:66:09:62:55:
                    8a:fc:2b:34:40:a4:06:e1:c9:30:c2:68:75:c8:5d:
                    dc:f0:7b:63:d8:ba:2d:76:3a:be:30:0a:d5:18:5b:
                    bd:0c:60:8f:9f:0c:2b:b3:05:a3:a3:5d:93:01:50:
                    53:b9:59:22:66:82:a2:68:ce:80:4c:13:a1:5f:ce:
                    37:8d:36:17:f2:21:b9:1e:da:b3:dd:f6:ad:90:00:
                    b6:13:55:ab:79:55:97:15:12:31:e7:a1:04:94:e3:
                    97:29:26:30:5e:57:9a:2f:b5:b1:9a:1e:46:3e:6d:
                    08:0a:13:8f:49:c0:5e:6a:95:33:32:f0:34:ea:29:
                    04:15:4f:a6:3e:fd:f1:01:d1:16:ec:a2:4a:2d:2a:
                    93:b1:b8:d6:8a:b2:60:47:7c:54:93:01:d7:f7:21:
                    f2:ce:b5:a8:90:09:62:49:f9:cf:35:90:87:96:05:
                    47:c6:61:8d:eb:08:1a:d8:7a:16:53:05:23:7f:52:
                    d5:35:31:eb:1a:de:ee:bf:f0:0d:88:85:a9:ed:89:
                    9d:a1:ab:a5:fa:2d:e7:b6:5d:74:23:84:42:b0:2a:
                    1b:15:0f:a1:51:f8:20:c1:18:91:89:e3:39:48:29:
                    c3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0A:8D:2D:1C:7C:D2:C7:25:D9:C4:60:ED:B4:A8:63:02:B1:F9:41:F6
            X509v3 Authority Key Identifier: 
                keyid:AA:02:03:60:BC:B0:6B:B5:4F:7A:52:00:4B:7D:7C:69:B0:33:B6:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgIDYLywa7VPelIAS318abAztlI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d17ad9-7b1d-43f4-be4a-121015308acd/1/Co0tHHzSxyXZxGDttKhjArH5QfY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d17ad9-7b1d-43f4-be4a-121015308acd/1/qgIDYLywa7VPelIAS318abAztlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:dc:4e:1a:3c:57:87:bf:9c:6b:f8:54:28:08:58:95:e0:50:
         e3:31:15:07:05:df:76:64:a5:54:6e:d0:ce:88:ef:40:cc:3c:
         44:7c:9e:08:6b:3b:ed:96:3a:63:6b:54:0b:93:08:43:ef:69:
         41:0a:8a:77:a3:df:8d:6e:f8:70:3c:1a:8f:e7:84:0f:c6:7a:
         e0:48:32:97:af:0d:57:71:1f:fe:a4:ae:70:4b:8b:16:af:42:
         e6:1c:f6:de:b2:e2:f6:8a:76:20:5d:6c:f2:14:4f:dd:07:bc:
         d7:9e:4d:69:72:4e:2d:fb:e4:6a:69:7b:0d:d3:bb:50:e6:34:
         5f:78:df:b8:ef:31:2c:00:e5:73:21:c7:23:ad:48:d8:e1:4c:
         ea:81:83:41:3a:45:32:62:11:d3:11:0e:d7:12:83:58:c8:26:
         61:e9:5e:dc:6c:51:2d:5e:ab:1c:56:40:db:4e:7c:41:28:db:
         55:2a:29:03:91:1c:e0:49:7a:ce:f6:ed:7b:03:f6:e9:1d:be:
         7c:b7:ed:f5:fe:ae:7b:4a:12:58:8c:e1:d7:f5:c4:70:57:92:
         84:62:bf:83:58:19:fb:79:10:94:cc:84:25:d9:81:ff:91:18:
         e3:a6:40:91:2b:6f:4a:e4:74:1a:8f:77:f5:b2:1c:03:8c:a2:
         3d:f0:89:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:25:47 2021 by LibreSSL & rpki-client.