Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/hdvsrFElw9kymKF8dSjG0R11wsg.roa (download)

Subject key identifier:   85:DB:EC:AC:51:25:C3:D9:32:98:A1:7C:75:28:C6:D1:1D:75:C2:C8 
Authority key identifier: BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
asID:                     AS394814
Prefixes:
    1: 88.218.172.0/22 maxlen: 22

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/hdvsrFElw9kymKF8dSjG0R11wsg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48520058 (0x2e45b7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde75079618691bae1f47bcbed52314496963891
        Validity
            Not Before: Jan  1 10:01:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=85dbecac5125c3d93298a17c7528c6d11d75c2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:f5:19:21:6b:13:fb:df:73:c8:fe:09:74:
                    19:76:ac:a8:fb:f2:c3:60:56:8f:eb:b1:fa:4c:2e:
                    94:b0:82:bd:ca:6f:75:3f:e5:c9:33:ce:16:ad:b4:
                    f4:27:d9:ef:86:5a:6a:36:96:27:73:42:26:73:dd:
                    fc:94:66:65:d7:6f:3f:f3:28:78:6b:7a:6e:f0:98:
                    fb:22:47:78:f5:01:15:f6:41:e0:1c:f2:cd:7a:7f:
                    c9:f7:cc:43:dd:a9:a1:bb:ba:f1:a6:b7:fb:24:c6:
                    5e:d7:fd:06:9d:d7:01:51:48:0b:1e:9e:a0:7e:72:
                    8b:65:f5:81:49:6f:d4:38:81:9b:54:27:38:3e:84:
                    d5:44:fe:c0:9b:ff:45:6a:fc:e2:ec:73:0d:ee:64:
                    e0:4c:40:5f:0f:8a:2f:6d:00:d8:1f:cb:9c:f5:69:
                    6c:61:7e:73:cc:10:c6:2d:83:ef:c8:a7:28:18:38:
                    63:b8:a0:9b:1c:90:cd:b6:22:35:54:4b:bc:ec:d3:
                    5a:44:96:36:5c:8e:6a:a0:f4:7d:31:94:36:95:ef:
                    a0:8f:1d:a6:a7:0e:b8:e8:a8:72:77:37:ac:d3:7f:
                    b3:fd:41:63:86:e3:dc:01:9e:8e:88:f5:2b:4c:f2:
                    b6:7e:13:e1:9b:83:44:e1:c4:8d:a7:46:8f:51:a5:
                    ce:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                85:DB:EC:AC:51:25:C3:D9:32:98:A1:7C:75:28:C6:D1:1D:75:C2:C8
            X509v3 Authority Key Identifier: 
                keyid:BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/hdvsrFElw9kymKF8dSjG0R11wsg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:35:4f:5b:d5:bc:26:c7:e1:cf:67:38:51:ee:29:e2:a8:97:
         28:d6:9a:72:05:c5:7b:c3:92:eb:70:ab:74:34:cf:ae:ca:6f:
         17:16:f5:bf:78:89:d1:40:5f:45:fc:a7:b3:3b:50:14:f2:25:
         c2:d9:e5:f6:ce:a3:20:a5:d4:d1:02:48:9b:2e:bf:a9:74:6c:
         f8:f5:27:6c:44:73:90:99:cf:32:e1:28:81:63:38:b0:06:ec:
         a1:de:46:02:3f:cb:35:f3:6e:66:08:0f:f8:82:83:a0:bd:61:
         9a:10:fe:d7:31:09:d4:3f:82:2f:65:9a:b9:79:f4:9e:32:b6:
         7e:59:17:a9:07:ba:87:41:f0:9c:0d:5c:a8:84:6d:df:a1:c2:
         60:1d:d3:6a:49:fd:19:74:80:b9:1f:17:9e:8f:85:89:c8:2a:
         72:0b:66:69:b9:26:6e:f3:50:0d:c7:80:89:ed:70:65:d3:4a:
         63:b2:ef:7e:0e:92:a2:77:02:15:00:69:86:d1:c8:a3:78:af:
         f2:cf:1d:ab:a6:3e:67:66:ef:9a:fb:fa:6e:c0:ac:36:bb:2a:
         a9:67:03:32:84:9b:b2:71:ca:06:e9:c5:56:d4:90:7b:c1:26:
         4d:9f:89:68:fd:c1:98:2a:c0:bd:3d:b8:c3:a5:a7:bf:5e:8d:
         92:a5:7f:55
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAuRbejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZGU3NTA3OTYxODY5MWJhZTFmNDdiY2JlZDUyMzE0NDk2OTYzODkxMB4XDTIyMDEw
MTEwMDE0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODVkYmVjYWM1MTI1
YzNkOTMyOThhMTdjNzUyOGM2ZDExZDc1YzJjODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMeW9RkhaxP733PI/gl0GXasqPvyw2BWj+ux+kwulLCCvcpv
dT/lyTPOFq209CfZ74ZaajaWJ3NCJnPd/JRmZddvP/MoeGt6bvCY+yJHePUBFfZB
4BzyzXp/yffMQ92pobu68aa3+yTGXtf9Bp3XAVFICx6eoH5yi2X1gUlv1DiBm1Qn
OD6E1UT+wJv/RWr84uxzDe5k4ExAXw+KL20A2B/LnPVpbGF+c8wQxi2D78inKBg4
Y7igmxyQzbYiNVRLvOzTWkSWNlyOaqD0fTGUNpXvoI8dpqcOuOiocnc3rNN/s/1B
Y4bj3AGejoj1K0zytn4T4ZuDROHEjadGj1GlztsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSF2+ysUSXD2TKYoXx1KMbRHXXCyDAfBgNVHSMEGDAWgBS951B5YYaRuuH0
e8vtUjFElpY4kTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZlZFFlV0dHa2JyaDlIdkw3Vkl4UkphV09KRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGIvOGYyMDkzLTAzMTgtNDc2Yy05ZTljLTUzZmM0OTA1NjI5Yi8x
L2hkdnNyRkVsdzlreW1LRjhkU2pHMFIxMXdzZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIv
OGYyMDkzLTAzMTgtNDc2Yy05ZTljLTUzZmM0OTA1NjI5Yi8xL3ZlZFFlV0dHa2Jy
aDlIdkw3Vkl4UkphV09KRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAljarDANBgkqhkiG9w0BAQsFAAOC
AQEANzVPW9W8Jsfhz2c4Ue4p4qiXKNaacgXFe8OS63CrdDTPrspvFxb1v3iJ0UBf
RfynsztQFPIlwtnl9s6jIKXU0QJImy6/qXRs+PUnbERzkJnPMuEogWM4sAbsod5G
Aj/LNfNuZggP+IKDoL1hmhD+1zEJ1D+CL2WauXn0njK2flkXqQe6h0HwnA1cqIRt
36HCYB3Takn9GXSAuR8Xno+FicgqcgtmabkmbvNQDceAie1wZdNKY7Lvfg6SoncC
FQBphtHIo3iv8s8dq6Y+Z2bvmvv6bsCsNrsqqWcDMoSbsnHKBunFVtSQe8EmTZ+J
aP3BmCrAvT24w6Wnv16NkqV/VQ==
-----END CERTIFICATE-----

Generated at Sat Jan 1 12:06:09 2022 by LibreSSL & rpki-client.