Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/zofigkY1Hzy_zkene1An03Q9e5k.roa (download)

Subject key identifier:   CE:87:E2:82:46:35:1F:3C:BF:CE:47:A7:7B:50:27:D3:74:3D:7B:99 
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
asID:                     AS28753
Prefixes:
    1: 85.203.20.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/zofigkY1Hzy_zkene1An03Q9e5k.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35731097 (0x2213699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
        Validity
            Not Before: Jan  8 23:32:21 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ce87e28246351f3cbfce47a77b5027d3743d7b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:d6:ca:54:e0:54:ed:6e:6a:73:89:00:49:
                    d6:aa:61:c2:11:e5:36:52:da:bf:8c:8d:6c:7f:4e:
                    8d:d7:ed:aa:08:08:aa:fc:59:89:f3:75:78:48:d4:
                    73:69:77:54:f3:c8:7d:1c:a5:3c:6e:8e:b3:77:89:
                    fc:f5:45:f0:1e:85:eb:53:f0:69:f5:11:84:ab:95:
                    49:b0:dd:93:ba:a6:86:2d:6d:b6:e6:76:c7:14:d8:
                    fc:9a:62:f5:74:b3:05:2d:e1:4c:f1:98:9d:1c:f6:
                    1c:b1:78:a3:95:d8:d8:27:58:34:a1:9c:25:f4:35:
                    0c:3b:1f:99:23:ba:8c:90:9c:1b:10:4e:00:95:bc:
                    3b:36:82:26:bf:30:c4:e3:bf:8e:fa:ad:44:45:15:
                    93:62:5f:c1:5b:b2:64:ff:7a:a5:e8:a8:44:39:64:
                    39:2b:eb:7a:95:19:53:72:1a:d5:24:e2:29:72:b0:
                    5a:e9:27:fc:46:33:7b:a3:30:aa:df:45:0e:a9:71:
                    3b:f7:36:97:2b:66:7a:19:4e:65:61:ab:e0:d7:ef:
                    5a:de:d0:05:6e:4a:ca:14:bb:a6:6a:70:b4:6b:e5:
                    ad:86:eb:20:53:b3:aa:49:13:a5:f2:1d:e4:10:63:
                    a3:de:7c:bf:bf:2b:77:63:04:5b:83:a5:0a:21:65:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CE:87:E2:82:46:35:1F:3C:BF:CE:47:A7:7B:50:27:D3:74:3D:7B:99
            X509v3 Authority Key Identifier: 
                keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/zofigkY1Hzy_zkene1An03Q9e5k.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....U..
    Signature Algorithm: sha256WithRSAEncryption
         14:4e:78:68:2c:80:c8:29:b5:71:f6:d8:b0:cf:8b:82:d7:33:
         ea:97:ca:a0:74:e0:18:95:0f:f1:36:b4:7c:ef:90:2d:11:e8:
         57:31:bd:fc:b4:48:70:49:e5:23:64:b3:06:82:6b:79:62:69:
         3f:81:5e:4c:ca:e7:a3:a1:d2:f4:a0:b9:48:87:7f:80:59:8a:
         4c:26:df:7d:88:cb:ce:ed:fd:ef:2e:77:27:97:23:84:1e:8b:
         c6:18:3c:0c:2f:ca:1e:f3:8e:1c:86:85:7f:74:ab:e3:4f:17:
         df:06:3a:3e:ef:d6:2d:be:8e:3a:49:bf:d8:9c:36:d4:3f:82:
         d5:5c:38:89:72:45:d2:c2:27:2e:5f:77:da:f5:f7:97:72:73:
         0d:9c:97:a5:0f:d7:c6:f1:c6:7a:66:68:3f:a8:8c:1e:04:26:
         5e:20:cd:a6:f0:cf:e6:28:53:cb:7e:ab:8c:17:d6:8e:42:cb:
         4e:3e:a2:44:f2:31:97:fb:92:fa:dc:45:fa:02:de:12:e0:5e:
         30:a6:1e:1c:5f:4d:96:32:b6:d1:ff:c9:f2:54:80:81:fa:a9:
         11:56:b7:8a:a4:d7:6e:47:e4:79:f5:af:dd:6c:69:bf:8c:d0:
         16:b7:28:69:44:a1:3b:9e:dd:f3:19:bf:97:36:31:3f:75:d1:
         0d:0d:4e:f0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAiE2mTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NDViZGY2ZWVjMDgzNzBhZTFmNjdlODNmOTliNWFjMWZlMjY4NzJjMB4XDTIxMDEw
ODIzMzIyMVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2U4N2UyODI0NjM1
MWYzY2JmY2U0N2E3N2I1MDI3ZDM3NDNkN2I5OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJTR1spU4FTtbmpziQBJ1qphwhHlNlLav4yNbH9OjdftqggI
qvxZifN1eEjUc2l3VPPIfRylPG6Os3eJ/PVF8B6F61PwafURhKuVSbDdk7qmhi1t
tuZ2xxTY/Jpi9XSzBS3hTPGYnRz2HLF4o5XY2CdYNKGcJfQ1DDsfmSO6jJCcGxBO
AJW8OzaCJr8wxOO/jvqtREUVk2JfwVuyZP96peioRDlkOSvrepUZU3Ia1STiKXKw
Wukn/EYze6Mwqt9FDqlxO/c2lytmehlOZWGr4NfvWt7QBW5KyhS7pmpwtGvlrYbr
IFOzqkkTpfId5BBjo958v78rd2MEW4OlCiFlqZMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTOh+KCRjUfPL/OR6d7UCfTdD17mTAfBgNVHSMEGDAWgBTUW99u7Ag3CuH2
foP5m1rB/iaHLDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFGdmZidXdJTndyaDluNkQtWnRhd2Y0bWh5dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDEvZTJkZmZmLThiYTgtNGJjZi1hYzMxLTk4NDYzODU5ZWNjMS8x
L3pvZmlna1kxSHp5X3prZW5lMUFuMDNROWU1ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEv
ZTJkZmZmLThiYTgtNGJjZi1hYzMxLTk4NDYzODU5ZWNjMS8xLzFGdmZidXdJTndy
aDluNkQtWnRhd2Y0bWh5dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFXLFDANBgkqhkiG9w0BAQsFAAOC
AQEAFE54aCyAyCm1cfbYsM+Lgtcz6pfKoHTgGJUP8Ta0fO+QLRHoVzG9/LRIcEnl
I2SzBoJreWJpP4FeTMrno6HS9KC5SId/gFmKTCbffYjLzu397y53J5cjhB6Lxhg8
DC/KHvOOHIaFf3Sr408X3wY6Pu/WLb6OOkm/2Jw21D+C1Vw4iXJF0sInLl932vX3
l3JzDZyXpQ/XxvHGemZoP6iMHgQmXiDNpvDP5ihTy36rjBfWjkLLTj6iRPIxl/uS
+txF+gLeEuBeMKYeHF9NljK20f/J8lSAgfqpEVa3iqTXbkfkefWv3Wxpv4zQFrco
aUShO57d8xm/lzYxP3XRDQ1O8A==
-----END CERTIFICATE-----

Generated at Sun Aug 1 19:10:29 2021 by LibreSSL & rpki-client.