Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/TyL2fnVRkEqVrE0QuymkvDnFIoU.roa (download)

Subject key identifier:   4F:22:F6:7E:75:51:90:4A:95:AC:4D:10:BB:29:A4:BC:39:C5:22:85 
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
asID:                     AS211832
Prefixes:
    1: 185.189.155.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/TyL2fnVRkEqVrE0QuymkvDnFIoU.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119924857 (0x725e879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Sep 29 10:39:36 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=4f22f67e7551904a95ac4d10bb29a4bc39c52285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:04:5f:f6:9d:a9:5e:9f:9e:b8:a9:a4:ba:
                    34:af:6e:22:6c:64:13:c5:fe:f3:86:95:7f:9d:66:
                    3e:ae:05:8a:78:ea:ef:af:46:87:51:dd:c3:dc:69:
                    61:2d:3c:d1:8f:1d:65:2b:5c:be:db:1d:a0:d4:62:
                    79:2f:d8:39:a1:30:cb:eb:50:1a:4b:cd:c4:b3:3d:
                    4f:11:d2:fe:67:3b:66:80:47:8a:01:4e:4c:2e:6a:
                    6a:5f:b7:0c:0c:e0:df:1e:ef:a2:ba:ea:7c:35:61:
                    3a:8b:6f:89:e9:7b:a1:0a:d1:fa:56:78:bc:7b:b6:
                    a9:5c:b2:06:5e:a2:c9:d8:ec:1c:5b:c5:b2:c8:e9:
                    39:2b:e6:65:98:d0:6b:bf:12:26:68:ae:46:13:d0:
                    4a:8d:ab:56:f5:99:b9:85:f9:8d:a5:c9:72:98:f0:
                    66:0a:c2:8d:09:98:1f:5b:ed:5e:55:22:65:58:91:
                    84:f0:cf:ca:48:a9:a4:4c:e9:79:d1:06:fa:c9:ff:
                    ab:77:58:b7:97:31:01:15:84:12:db:99:fa:12:cb:
                    e3:ce:cd:57:24:fc:b7:e6:a4:3c:ad:fa:4e:b3:40:
                    9c:0c:cf:19:67:25:76:a0:8d:42:bf:ae:31:d4:cf:
                    82:df:5e:e1:9b:21:21:4b:5b:f5:a5:5d:56:97:18:
                    be:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4F:22:F6:7E:75:51:90:4A:95:AC:4D:10:BB:29:A4:BC:39:C5:22:85
            X509v3 Authority Key Identifier: 
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/TyL2fnVRkEqVrE0QuymkvDnFIoU.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.189.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:88:39:80:c7:4f:e3:d5:55:92:26:38:2c:57:bc:0c:24:30:
         3c:56:13:56:8b:4f:47:4f:87:6e:8c:4c:46:d6:56:3f:47:c6:
         bf:16:ab:0f:59:ec:f9:34:fe:d8:b7:55:df:8d:f0:75:1c:d3:
         90:79:b0:37:97:15:e7:39:99:d3:fa:01:28:4a:27:6d:8a:f5:
         f6:72:be:08:b2:77:1e:f9:eb:07:0d:83:e0:c0:a7:de:26:e4:
         26:66:d5:3f:22:89:89:2f:5b:74:db:e2:2b:48:fe:ef:06:47:
         de:a8:00:1b:a4:0d:cc:e7:63:ef:24:ba:9e:25:eb:86:42:78:
         9a:a2:45:96:f1:99:fa:31:1d:1d:09:43:65:c6:dd:ff:78:47:
         43:90:e1:da:a4:71:08:b0:2b:17:47:b2:8b:d4:98:ad:1e:d0:
         1d:97:32:00:65:6a:eb:a1:60:ff:b9:40:f0:ed:3a:38:d1:47:
         41:00:e6:99:fa:85:8d:2f:b5:3f:d4:a9:bc:e5:fb:9b:9f:02:
         62:20:87:0f:5b:a9:be:a4:0a:e5:84:7e:e1:f9:24:69:2c:9c:
         d8:d2:34:07:32:b8:23:03:98:82:5c:a5:a8:af:7e:e6:72:f8:
         ca:4c:67:ee:7a:dd:03:ab:06:a0:4f:48:aa:61:5c:e8:f3:c8:
         6f:52:d3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Sep 29 12:35:14 2021 by LibreSSL & rpki-client.