Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/uwEOYG8VgkHnCSOjRFOtN_2JuSI.roa (download)

Subject key identifier:   BB:01:0E:60:6F:15:82:41:E7:09:23:A3:44:53:AD:37:FD:89:B9:22 
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
asID:                     AS397423
Prefixes:
    1: 85.237.203.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/uwEOYG8VgkHnCSOjRFOtN_2JuSI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30214242 (0x1cd0862)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: May  9 01:38:44 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=bb010e606f158241e70923a34453ad37fd89b922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:94:02:70:2c:69:01:02:08:e1:3c:39:8c:69:
                    cd:c2:0a:95:6c:01:e0:12:76:ab:ec:cc:a1:7a:4d:
                    cb:64:f2:c7:6b:46:bd:86:5b:14:df:0d:be:fc:ba:
                    9e:32:e1:58:a9:97:f3:3a:26:58:f5:88:32:81:a7:
                    74:a0:3d:8d:ab:3a:7e:46:03:d4:13:ae:f4:e6:d4:
                    de:d5:d7:87:9c:b9:c9:d2:ef:b5:23:61:35:6e:15:
                    25:32:11:87:94:0e:a1:e5:02:05:b1:b8:40:27:75:
                    56:0c:41:51:05:3a:a4:27:86:58:6b:13:81:54:a7:
                    13:7c:cd:e6:1d:b7:bd:17:3d:b0:25:00:70:b8:d0:
                    d6:10:e2:e7:37:45:8e:8b:ab:05:da:cd:78:63:aa:
                    48:2a:ba:1e:11:6f:be:a7:05:10:ed:e5:2b:e9:4b:
                    f9:bc:a2:0b:d9:02:9f:3a:36:0f:27:f5:1a:ff:aa:
                    d3:66:9d:f2:17:bb:59:b6:e2:c6:a1:d9:b5:a3:06:
                    15:b6:76:36:10:56:99:8c:50:ca:ec:4e:ed:dc:2c:
                    fa:24:ce:0c:a8:ba:31:95:e1:e2:a1:8b:12:35:ca:
                    4a:f2:e7:f2:51:40:a6:7c:94:de:a2:53:64:f7:49:
                    52:7f:c5:1d:34:4d:7a:b4:1b:dc:c2:13:5f:69:4a:
                    c7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BB:01:0E:60:6F:15:82:41:E7:09:23:A3:44:53:AD:37:FD:89:B9:22
            X509v3 Authority Key Identifier: 
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/uwEOYG8VgkHnCSOjRFOtN_2JuSI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:bd:2c:4e:d7:f3:2e:82:8d:cc:60:55:0d:7c:99:cb:ca:9b:
         f4:36:2c:0f:7c:17:c8:9f:84:93:27:87:90:ac:97:c5:93:1b:
         fe:ef:1a:b9:80:cb:e5:8c:6a:47:22:0d:57:56:bb:d9:17:d5:
         ec:72:09:9c:0d:b5:c5:54:5e:ac:28:84:2e:6d:39:e9:d6:62:
         77:82:27:17:b5:99:24:4e:f6:ce:01:de:01:f0:e8:30:5b:db:
         b7:23:f4:5b:03:0f:dc:be:9f:a6:2a:18:f4:5b:ff:a2:90:b5:
         c5:b4:a7:87:5b:08:6b:31:f5:13:97:92:ff:ca:08:47:ea:14:
         f1:1a:ea:57:90:e5:58:87:81:11:18:e5:d2:1b:24:ee:d2:69:
         40:b9:f0:01:83:c9:08:4f:63:a2:fa:5e:fa:57:a5:e7:d3:fb:
         f5:32:e9:8d:2f:75:8b:70:e8:4f:17:32:6b:04:6c:76:14:c8:
         dc:fd:b8:69:c5:95:f2:0d:c0:52:47:12:e7:e8:c5:e1:61:8e:
         8d:3d:b9:8d:54:2a:88:90:b4:9f:5f:e3:83:ab:e1:6e:0f:71:
         01:9a:48:c5:1c:f4:0a:0e:31:57:4c:87:e6:c7:70:52:ce:36:
         2c:3a:b8:09:b3:2c:59:11:49:8d:7e:2a:d6:3a:a7:fd:32:8c:
         7d:0d:59:49
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAc0IYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OTBiNjczNjhjOTFiODVlODQ4ODhjNWVkMmU4MjRkMTM5MDgxMGJiMB4XDTIxMDUw
OTAxMzg0NFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmIwMTBlNjA2ZjE1
ODI0MWU3MDkyM2EzNDQ1M2FkMzdmZDg5YjkyMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKKUAnAsaQECCOE8OYxpzcIKlWwB4BJ2q+zMoXpNy2Tyx2tG
vYZbFN8Nvvy6njLhWKmX8zomWPWIMoGndKA9jas6fkYD1BOu9ObU3tXXh5y5ydLv
tSNhNW4VJTIRh5QOoeUCBbG4QCd1VgxBUQU6pCeGWGsTgVSnE3zN5h23vRc9sCUA
cLjQ1hDi5zdFjourBdrNeGOqSCq6HhFvvqcFEO3lK+lL+byiC9kCnzo2Dyf1Gv+q
02ad8he7WbbixqHZtaMGFbZ2NhBWmYxQyuxO7dws+iTODKi6MZXh4qGLEjXKSvLn
8lFApnyU3qJTZPdJUn/FHTRNerQb3MITX2lKx98CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS7AQ5gbxWCQecJI6NEU603/Ym5IjAfBgNVHSMEGDAWgBQ5C2c2jJG4XoSI
jF7S6CTROQgQuzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09RdG5Ob3lSdUY2RWlJeGUwdWdrMFRrSUVMcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvMTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8x
L3V3RU9ZRzhWZ2tIbkNTT2pSRk90Tl8ySnVTSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
MTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8xL09RdG5Ob3lSdUY2
RWlJeGUwdWdrMFRrSUVMcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFXtyzANBgkqhkiG9w0BAQsFAAOC
AQEAjb0sTtfzLoKNzGBVDXyZy8qb9DYsD3wXyJ+EkyeHkKyXxZMb/u8auYDL5Yxq
RyINV1a72RfV7HIJnA21xVRerCiELm056dZid4InF7WZJE72zgHeAfDoMFvbtyP0
WwMP3L6fpioY9Fv/opC1xbSnh1sIazH1E5eS/8oIR+oU8RrqV5DlWIeBERjl0hsk
7tJpQLnwAYPJCE9jovpe+lel59P79TLpjS91i3DoTxcyawRsdhTI3P24acWV8g3A
UkcS5+jF4WGOjT25jVQqiJC0n1/jg6vhbg9xAZpIxRz0Cg4xV0yH5sdwUs42LDq4
CbMsWRFJjX4q1jqn/TKMfQ1ZSQ==
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:14:42 2021 by LibreSSL & rpki-client.