Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/YHHvedjVZgKkLLu1HEUxPcj8PwQ.roa (download)

Subject key identifier:   60:71:EF:79:D8:D5:66:02:A4:2C:BB:B5:1C:45:31:3D:C8:FC:3F:04 
Authority key identifier: E2:C2:1E:54:BB:32:05:A6:E3:99:E7:52:51:5A:BF:62:DF:1B:86:89
asID:                     AS399130
Prefixes:
    1: 185.243.96.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/YHHvedjVZgKkLLu1HEUxPcj8PwQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13178574 (0xc916ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c21e54bb3205a6e399e752515abf62df1b8689
        Validity
            Not Before: Oct 12 13:15:23 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6071ef79d8d56602a42cbbb51c45313dc8fc3f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c2:7d:d0:50:d3:97:09:a6:86:3f:3c:b6:d5:
                    62:6e:c8:8a:0e:49:45:5b:42:3b:b8:c8:04:47:aa:
                    01:12:5c:99:bf:86:17:a7:90:d0:18:19:03:1d:3f:
                    24:23:a5:fb:a8:ec:3a:5e:e1:c1:bd:b7:c3:6e:bf:
                    51:79:c4:1a:ec:f0:e0:4b:3d:41:e0:be:13:fd:9c:
                    a2:12:44:94:b4:db:44:ee:60:46:df:43:44:cf:c6:
                    e0:6f:9e:7c:2e:72:bd:5e:73:60:9e:2a:eb:84:f6:
                    e8:0c:92:8f:ba:77:fd:26:26:e9:f4:33:f0:8d:4e:
                    82:b6:0e:9e:5b:ff:a8:e9:84:bd:ad:44:73:51:a5:
                    28:87:68:42:5b:1e:9f:3d:4f:8b:bc:26:5f:7a:1d:
                    58:c0:0d:e1:6e:a9:8d:95:d9:93:7c:6e:9e:ac:94:
                    34:43:11:61:9e:32:86:ab:f5:cb:de:f9:60:67:56:
                    b3:ad:b8:3a:69:27:39:eb:1e:10:e3:8e:4a:fb:f3:
                    f5:43:49:dd:1e:e8:00:06:af:0b:5c:38:a0:d1:f0:
                    f4:5f:6d:50:47:db:22:bb:e5:30:37:2b:be:41:b8:
                    85:44:2c:33:5e:07:7f:4e:2d:38:57:24:65:95:3a:
                    b9:95:3a:84:45:e4:97:f5:0a:f0:d9:bb:7f:78:f0:
                    7e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                60:71:EF:79:D8:D5:66:02:A4:2C:BB:B5:1C:45:31:3D:C8:FC:3F:04
            X509v3 Authority Key Identifier: 
                keyid:E2:C2:1E:54:BB:32:05:A6:E3:99:E7:52:51:5A:BF:62:DF:1B:86:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sIeVLsyBabjmedSUVq_Yt8bhok.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/YHHvedjVZgKkLLu1HEUxPcj8PwQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/4sIeVLsyBabjmedSUVq_Yt8bhok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:c5:ff:33:ab:fa:c8:6b:10:cd:e1:fd:0f:3f:74:87:81:77:
         39:a4:d3:47:93:a5:0b:af:9d:ff:97:10:23:d2:bc:6d:29:ae:
         f3:a7:9b:eb:b6:1b:49:af:1d:27:53:75:23:a7:00:ba:bd:ea:
         7b:03:2f:95:29:b9:aa:81:1d:ee:98:44:5b:8b:ff:d1:e6:9a:
         cf:39:87:b9:6f:ee:54:f7:8c:46:3c:9d:1c:2a:d1:7c:06:68:
         e7:bd:d4:b4:10:94:f4:05:e1:05:fe:0c:f4:bc:4e:47:d6:92:
         88:83:42:4f:8c:3c:a3:a0:a2:1d:16:a4:68:e3:98:8e:ad:19:
         48:cd:59:7c:c5:99:b3:32:b1:08:92:08:0e:29:70:58:e0:42:
         b2:03:ef:37:c7:b0:09:ac:47:4f:db:02:66:2a:f3:ae:00:b0:
         04:34:69:ee:2c:d2:b1:17:b6:19:40:15:a3:a3:3c:e5:e4:f0:
         44:24:e4:16:b7:5c:4f:6a:b2:58:6f:97:51:0d:a1:d1:48:2e:
         8e:a2:c3:84:0f:5b:8a:8f:22:ce:85:78:79:49:53:1e:f4:f1:
         ea:55:5f:fc:cf:d2:b0:e6:b5:03:24:6f:87:98:19:b8:9c:6c:
         85:17:01:c9:d0:a2:dc:a3:49:4b:0f:61:b4:84:07:b2:4d:5e:
         35:c5:0e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Oct 12 15:08:35 2021 by LibreSSL & rpki-client.