Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/nNM2kmSIlk09BZ9ZOC_q7urTBZg.roa (download)

Subject key identifier:   9C:D3:36:92:64:88:96:4D:3D:05:9F:59:38:2F:EA:EE:EA:D3:05:98 
Authority key identifier: FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
asID:                     AS213035
Prefixes:
    1: 185.138.233.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/nNM2kmSIlk09BZ9ZOC_q7urTBZg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10322645 (0x9d82d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
        Validity
            Not Before: Feb  7 12:10:23 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9cd336926488964d3d059f59382feaeeead30598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:51:ec:81:b7:7d:c3:68:b5:17:b1:ad:34:
                    a3:5d:70:05:ac:da:12:d7:5b:22:9a:cf:b1:07:36:
                    6f:ce:59:a1:6f:38:00:04:0a:59:e1:82:ec:c4:75:
                    72:36:8a:31:75:06:0d:5c:ed:84:de:52:c6:9d:1c:
                    1d:51:ea:7e:6d:76:bd:1d:c0:f1:60:1b:85:3f:85:
                    21:42:19:03:80:e6:5c:f6:3f:4d:30:2f:42:dd:41:
                    d3:c1:ff:27:d3:f9:66:7d:75:29:44:4e:95:42:dc:
                    b7:11:e8:c5:d5:b2:38:36:4a:95:ce:fc:1e:a5:66:
                    62:18:41:e0:6c:b4:22:bd:b7:d5:ff:19:20:63:d7:
                    d9:c0:f1:ab:69:dc:dc:51:2d:f1:ef:e9:6e:a0:3e:
                    af:ef:a5:e1:d4:d0:fe:d4:08:43:1b:21:9a:81:54:
                    42:16:ba:45:9d:93:b6:1e:2a:e1:36:96:8f:50:47:
                    76:91:19:67:68:d4:c0:3a:32:cf:32:f0:63:a6:14:
                    69:21:89:0e:9d:6e:48:2d:39:fe:fa:3d:52:6f:5f:
                    05:bf:90:31:3a:b1:21:77:79:80:54:58:ad:54:82:
                    4c:ae:9f:33:57:df:61:b9:83:e6:a3:40:de:f9:ff:
                    7a:d9:6c:9c:1c:02:fa:00:e2:4f:f5:b5:54:40:b1:
                    a3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9C:D3:36:92:64:88:96:4D:3D:05:9F:59:38:2F:EA:EE:EA:D3:05:98
            X509v3 Authority Key Identifier: 
                keyid:FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/nNM2kmSIlk09BZ9ZOC_q7urTBZg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.......
    Signature Algorithm: sha256WithRSAEncryption
         59:df:c1:8d:c3:9f:c7:ce:61:24:ba:8a:11:11:2f:d6:c5:79:
         f2:52:f1:26:fe:c4:69:fe:c0:e5:b6:2e:0e:43:6d:a6:a8:25:
         a2:27:79:5c:86:50:b9:7a:fd:ba:6e:3c:da:fa:3e:e8:bd:86:
         47:b0:43:18:27:09:52:30:a4:8b:f9:b1:de:af:51:4b:50:b4:
         87:38:58:d4:42:40:e1:34:4f:6c:68:df:27:fd:c2:81:8b:6e:
         e2:bb:0a:98:6d:a3:e0:38:c8:2b:cf:27:1d:15:4b:6d:b4:77:
         dc:80:6e:7d:38:e4:e6:cf:da:d0:70:84:b9:c7:c2:d1:fd:37:
         36:ce:ed:5f:44:43:cc:ac:f8:06:81:00:ae:9d:fe:8d:0d:55:
         53:4d:8a:57:53:52:52:bf:ae:d8:25:05:f8:7e:7c:7e:cb:0a:
         7e:21:fe:40:a7:cd:72:ae:97:58:02:1e:f7:f0:25:72:44:b3:
         df:2a:df:20:2d:d4:56:6a:b1:e0:42:63:21:8e:4a:58:99:a4:
         54:49:a7:bc:19:71:40:d4:36:b4:e2:30:14:71:db:15:59:d0:
         4e:4e:ac:0d:91:43:23:4b:e5:1a:02:ca:db:4e:fd:81:af:f4:
         01:04:fd:ab:05:54:7e:12:13:89:5c:1b:5b:9a:c2:e7:36:11:
         7c:78:5f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----