Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/81WPeJPFDyUtJius2d9xv57yAVA.roa (download)

Subject key identifier:   F3:55:8F:78:93:C5:0F:25:2D:26:2B:AC:D9:DF:71:BF:9E:F2:01:50 
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
asID:                     AS61317
Prefixes:
    1: 185.229.200.0/22 (max: 24)
    2: 185.213.240.0/22 (max: 24)
    3: 185.130.60.0/22 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/81WPeJPFDyUtJius2d9xv57yAVA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14824245 (0xe23335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
        Validity
            Not Before: Apr 30 06:14:34 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f3558f7893c50f252d262bacd9df71bf9ef20150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b9:34:0b:81:ad:6b:5d:ab:46:93:19:c7:f7:
                    b5:fb:5d:54:d9:0a:87:10:7b:08:9a:8d:61:db:16:
                    e7:f2:b3:09:4d:f2:94:b3:f1:5b:16:f1:12:e1:49:
                    18:ab:ea:18:6c:b1:28:05:23:b4:40:41:1c:df:b6:
                    66:53:f1:cd:cc:ba:5d:91:48:06:76:20:38:0d:43:
                    b4:6e:58:18:26:96:c6:1e:f1:77:3f:0c:0f:8b:e1:
                    0b:8f:e0:53:09:bb:f6:fd:8e:4e:12:49:00:03:7d:
                    fd:75:58:7e:1a:fa:c8:47:d1:4e:96:48:fc:8f:1d:
                    2d:2f:db:41:96:c7:ba:df:8b:19:f1:2e:db:8b:67:
                    64:72:42:10:b5:ef:48:3a:68:d7:09:bf:6d:1a:d1:
                    61:f3:66:61:f3:3c:6e:94:cd:4f:d1:40:ad:6d:a4:
                    df:e0:01:95:a9:85:1d:3c:6b:85:e4:e4:a0:79:eb:
                    92:42:25:ff:cf:c1:5c:5c:d6:79:7c:2e:55:71:e4:
                    e8:3a:57:18:96:66:de:da:54:8d:67:7b:bd:d5:27:
                    fe:82:22:58:0c:04:27:bd:4d:5b:36:01:ac:eb:2f:
                    9a:c2:59:20:df:66:36:a4:7d:e9:aa:a4:81:33:06:
                    c8:da:18:67:4c:28:e2:ba:ce:89:a1:f9:40:c4:5c:
                    6d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F3:55:8F:78:93:C5:0F:25:2D:26:2B:AC:D9:DF:71:BF:9E:F2:01:50
            X509v3 Authority Key Identifier: 
                keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/81WPeJPFDyUtJius2d9xv57yAVA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0......<............
    Signature Algorithm: sha256WithRSAEncryption
         16:8b:19:f3:37:63:66:37:4a:90:8c:79:b4:53:51:47:0b:19:
         f7:67:71:29:79:91:16:b5:df:a8:af:b2:b5:2e:19:49:76:36:
         d3:a3:8f:a8:72:b6:9c:08:15:e5:fb:f5:93:a4:1f:ef:6a:b7:
         65:b7:3b:0e:d6:7d:f1:a2:98:73:b8:0d:aa:f1:5e:b7:f6:6e:
         50:2f:08:36:8a:ea:6b:7c:78:71:c0:53:14:ab:f3:70:58:60:
         7c:bf:61:e6:d2:bb:f3:08:36:4f:c1:41:77:95:37:2a:78:21:
         c1:f2:75:09:71:5a:e9:31:8f:56:95:06:e9:ef:c3:6a:e6:ab:
         76:16:d6:39:f1:ce:e5:c0:a1:4a:09:ac:1a:ee:b0:aa:33:37:
         40:41:7b:93:be:77:26:f2:2c:c3:29:91:21:2e:16:00:ba:e4:
         a3:2d:63:4e:80:55:da:0e:87:3e:2f:a2:ed:5f:41:d5:b3:45:
         4c:f8:cb:3c:ed:98:93:b4:5c:19:ef:e0:ac:ae:0e:56:30:28:
         81:30:e7:0b:cd:42:cd:94:b0:bc:83:a4:38:eb:f0:a5:da:cb:
         10:f4:fe:14:99:92:64:32:6a:de:87:7a:6a:28:14:bd:8e:92:
         ec:c7:0b:26:f0:62:af:a2:7e:4f:99:96:66:1d:cf:1c:17:d9:
         64:11:f9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 15:51:00 2021 by LibreSSL & rpki-client.