Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/39/0cc5de-fc04-4017-9bc0-4c45d9f1eaa0/1/DQDpzSJPJ0xh2Ob6JXogQS-2TdI.roa (download)

Subject key identifier:   0D:00:E9:CD:22:4F:27:4C:61:D8:E6:FA:25:7A:20:41:2F:B6:4D:D2 
Authority key identifier: F2:D9:B9:DF:70:7D:4E:E5:53:BB:FE:07:E3:50:E4:A8:3F:B9:89:5E
asID:                     AS399130
Prefixes:
    1: 213.109.148.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/39/0cc5de-fc04-4017-9bc0-4c45d9f1eaa0/1/DQDpzSJPJ0xh2Ob6JXogQS-2TdI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64595 (0xfc53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d9b9df707d4ee553bbfe07e350e4a83fb9895e
        Validity
            Not Before: Oct  6 15:19:34 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0d00e9cd224f274c61d8e6fa257a20412fb64dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:77:99:80:f7:e2:a8:cd:64:4f:14:7d:68:
                    3b:97:bd:1e:50:36:29:01:7d:05:b7:a4:79:c2:f8:
                    cd:6b:35:35:47:51:1d:76:7f:c4:b4:e1:59:f4:59:
                    17:f2:73:67:53:0f:f0:92:32:71:a7:ce:4e:c6:c8:
                    cf:ac:4d:3b:7e:b4:67:c4:3d:b9:f3:89:e5:4e:01:
                    f2:4a:14:d5:5b:27:63:72:b4:9d:7a:92:7c:92:f3:
                    dc:2d:29:c7:10:90:20:41:a9:50:c0:10:e0:7b:79:
                    a7:c1:fc:3b:32:f5:ae:5f:e4:22:d2:23:a9:c4:06:
                    e6:e2:cf:1a:42:18:9b:b1:9d:64:14:e8:07:8d:1d:
                    6c:41:72:c7:12:1d:50:b5:ce:be:1f:e9:bf:8c:00:
                    5a:3f:69:ac:27:ca:af:17:2f:41:69:63:3b:4e:cc:
                    87:02:c0:ad:17:8d:19:e3:2b:9d:e8:16:f8:21:53:
                    dd:8a:bd:33:8f:15:65:18:f1:ac:8c:41:dc:d4:9a:
                    07:84:21:59:21:4f:38:6c:56:fe:8d:de:20:dd:aa:
                    bc:49:7d:32:db:f8:f7:61:80:52:dc:79:4a:7f:d0:
                    55:18:91:0f:84:85:64:7d:0b:9b:7f:6d:ee:55:ed:
                    62:46:88:be:8a:50:0a:b9:de:a9:39:84:d6:74:30:
                    e1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0D:00:E9:CD:22:4F:27:4C:61:D8:E6:FA:25:7A:20:41:2F:B6:4D:D2
            X509v3 Authority Key Identifier: 
                keyid:F2:D9:B9:DF:70:7D:4E:E5:53:BB:FE:07:E3:50:E4:A8:3F:B9:89:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tm533B9TuVTu_4H41DkqD-5iV4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0cc5de-fc04-4017-9bc0-4c45d9f1eaa0/1/DQDpzSJPJ0xh2Ob6JXogQS-2TdI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0cc5de-fc04-4017-9bc0-4c45d9f1eaa0/1/8tm533B9TuVTu_4H41DkqD-5iV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:e7:53:ee:1a:42:25:59:bc:d1:7a:a7:18:7b:80:34:b1:07:
         7e:60:5f:1a:ad:ea:bc:14:fa:11:dc:cd:86:04:2b:3b:f7:b2:
         94:02:c1:77:53:14:37:72:f7:2f:b4:83:6a:e7:13:65:c2:31:
         81:70:79:4e:df:83:3d:b0:dd:eb:be:63:3d:9c:1a:5d:67:63:
         eb:fd:15:9d:88:40:84:51:e2:8e:6f:bf:cd:5a:42:de:5f:05:
         df:75:ae:03:3b:38:1e:73:91:a9:ef:1d:27:48:24:56:2a:86:
         b4:56:83:52:a3:ad:d4:4b:81:c9:c2:20:95:09:61:a0:14:cb:
         f0:4f:ec:d9:d2:aa:fa:a3:10:0d:e8:45:bf:67:c3:5b:e6:fe:
         c6:f8:5d:88:67:e6:e5:02:81:f6:63:36:3e:77:a9:63:18:c6:
         79:38:85:de:95:d6:cd:ce:f8:b4:45:21:02:b7:29:87:05:f0:
         f6:d6:84:cc:c4:e7:45:e7:76:96:7f:25:84:66:6b:0c:f8:8e:
         6e:c6:bc:83:52:69:15:ac:cd:b5:c8:b9:51:db:55:2c:53:c2:
         3a:ef:2b:f9:7b:e5:5f:19:e7:f2:07:31:bb:c2:0f:c8:01:5a:
         ba:78:78:2e:b5:28:b9:71:71:3a:ec:b2:9c:65:06:24:87:55:
         7c:cb:87:1b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAPxTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYy
ZDliOWRmNzA3ZDRlZTU1M2JiZmUwN2UzNTBlNGE4M2ZiOTg5NWUwHhcNMjExMDA2
MTUxOTM0WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwZDAwZTljZDIyNGYy
NzRjNjFkOGU2ZmEyNTdhMjA0MTJmYjY0ZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsdJ3mYD34qjNZE8UfWg7l70eUDYpAX0Ft6R5wvjNazU1R1Ed
dn/EtOFZ9FkX8nNnUw/wkjJxp85OxsjPrE07frRnxD2584nlTgHyShTVWydjcrSd
epJ8kvPcLSnHEJAgQalQwBDge3mnwfw7MvWuX+Qi0iOpxAbm4s8aQhibsZ1kFOgH
jR1sQXLHEh1Qtc6+H+m/jABaP2msJ8qvFy9BaWM7TsyHAsCtF40Z4yud6Bb4IVPd
ir0zjxVlGPGsjEHc1JoHhCFZIU84bFb+jd4g3aq8SX0y2/j3YYBS3HlKf9BVGJEP
hIVkfQubf23uVe1iRoi+ilAKud6pOYTWdDDhCwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFA0A6c0iTydMYdjm+iV6IEEvtk3SMB8GA1UdIwQYMBaAFPLZud9wfU7lU7v+
B+NQ5Kg/uYleMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
OHRtNTMzQjlUdVZUdV80SDQxRGtxRC01aVY0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zOS8wY2M1ZGUtZmMwNC00MDE3LTliYzAtNGM0NWQ5ZjFlYWEwLzEv
RFFEcHpTSlBKMHhoMk9iNkpYb2dRUy0yVGRJLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8w
Y2M1ZGUtZmMwNC00MDE3LTliYzAtNGM0NWQ5ZjFlYWEwLzEvOHRtNTMzQjlUdVZU
dV80SDQxRGtxRC01aVY0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1W2UMA0GCSqGSIb3DQEBCwUAA4IB
AQBC51PuGkIlWbzReqcYe4A0sQd+YF8areq8FPoR3M2GBCs797KUAsF3UxQ3cvcv
tINq5xNlwjGBcHlO34M9sN3rvmM9nBpdZ2Pr/RWdiECEUeKOb7/NWkLeXwXfda4D
Ozgec5Gp7x0nSCRWKoa0VoNSo63US4HJwiCVCWGgFMvwT+zZ0qr6oxAN6EW/Z8Nb
5v7G+F2IZ+blAoH2YzY+d6ljGMZ5OIXeldbNzvi0RSECtymHBfD21oTMxOdF53aW
fyWEZmsM+I5uxryDUmkVrM21yLlR21UsU8I67yv5e+VfGefyBzG7wg/IAVq6eHgu
tSi5cXE67LKcZQYkh1V8y4cb
-----END CERTIFICATE-----

Generated at Wed Oct 6 18:07:45 2021 by LibreSSL & rpki-client.