Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/acCJ7iccNeGnLEjzhBIbbl_zsj0.roa (download)

Subject key identifier:   69:C0:89:EE:27:1C:35:E1:A7:2C:48:F3:84:12:1B:6E:5F:F3:B2:3D 
Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
asID:                     AS0
Prefixes:
    1: 185.224.60.0/22 (max: 32)
    2: 185.224.104.0/22 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/acCJ7iccNeGnLEjzhBIbbl_zsj0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49241545 (0x2ef5dc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf
        Validity
            Not Before: May  5 09:31:27 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=69c089ee271c35e1a72c48f384121b6e5ff3b23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9b:dc:3e:3e:d6:19:7e:97:0d:d1:d5:90:1a:
                    6c:24:e5:ae:bb:38:38:81:f2:5d:09:41:e3:61:96:
                    8b:70:1a:df:15:8c:f6:fd:63:2c:30:01:b9:31:bb:
                    69:bf:d3:ea:d6:22:7d:23:dc:e6:e1:be:4b:c2:00:
                    db:8a:70:56:2b:e1:e7:e1:69:99:42:32:88:1e:20:
                    dd:0b:3e:c7:aa:2a:97:a4:8b:1d:14:a0:1d:14:3f:
                    fe:59:00:aa:e1:9a:d9:99:ae:e2:d2:77:18:cd:2f:
                    47:3c:4a:7a:83:89:7c:ce:cd:d0:05:86:8b:37:75:
                    ea:3c:fe:22:1b:dd:a3:78:b9:0b:1e:88:43:90:99:
                    24:c6:73:1d:c9:cb:26:73:5c:7a:87:2a:07:e7:e5:
                    8c:9f:e6:e0:9c:e4:47:bb:e5:b9:3f:f3:4e:46:43:
                    5f:d2:df:16:c4:07:3f:8a:2c:24:f0:7c:b2:cd:e9:
                    63:41:bf:fd:de:ab:8f:95:b1:ff:e3:27:46:ee:4a:
                    80:16:7b:76:2b:6a:20:e4:f3:58:6d:49:a1:38:b4:
                    53:76:29:5b:9a:12:76:ad:da:dd:c8:be:31:83:af:
                    d5:ff:6d:b3:c6:d8:4c:db:44:7b:05:47:80:e5:91:
                    56:b1:fe:45:dd:b4:a4:9e:dd:fd:95:90:6f:9b:04:
                    60:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                69:C0:89:EE:27:1C:35:E1:A7:2C:48:F3:84:12:1B:6E:5F:F3:B2:3D
            X509v3 Authority Key Identifier: 
                keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/acCJ7iccNeGnLEjzhBIbbl_zsj0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0......<.....h
    Signature Algorithm: sha256WithRSAEncryption
         b1:b5:a2:66:1c:92:81:45:c2:bb:37:5a:8c:8a:66:12:d2:d5:
         1f:d2:5e:6a:3c:56:44:13:17:77:c6:b3:18:92:6d:f7:2e:d1:
         9a:0e:6c:f0:66:26:d3:f4:25:40:bf:34:d3:f7:08:5c:b5:83:
         9f:80:81:01:59:ad:dc:c5:7b:af:17:4a:36:30:dc:59:b1:cc:
         fb:2a:ff:1d:cd:bb:6a:c7:05:09:7c:d4:88:9a:d0:c6:b9:34:
         5f:19:1b:95:52:df:b1:21:88:2a:34:53:68:9d:ff:ff:32:af:
         24:05:4d:81:c2:07:e3:b5:61:52:75:13:d7:2b:d7:72:67:f5:
         70:70:a7:0b:d5:73:44:f4:69:02:8b:0d:86:75:ff:9a:a1:e8:
         e7:0e:3c:f3:22:f7:95:01:e3:c3:7b:a7:a3:25:e7:48:cf:b1:
         10:eb:44:ee:78:b8:54:87:bd:2a:ae:5c:22:a0:c7:46:0e:34:
         42:ea:cd:9f:73:a8:b1:07:eb:58:0f:ea:6f:f1:12:e6:63:fd:
         a2:38:24:b6:8e:40:94:b8:2e:47:17:de:d3:cd:ad:ec:2a:f3:
         7a:bd:d1:93:b7:a9:7e:24:ca:57:8a:8d:1f:49:c0:09:17:21:
         33:c2:b4:d7:b3:43:1a:ca:a6:0a:fc:89:15:55:7f:e9:a4:52:
         16:ce:55:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:24:04 2021 by LibreSSL & rpki-client.