Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/iPzPRS1xQOxmktxv0-A99WwdChg.roa (download)

Subject key identifier:   88:FC:CF:45:2D:71:40:EC:66:92:DC:6F:D3:E0:3D:F5:6C:1D:0A:18 
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
asID:                     AS0
Prefixes:
    1: 185.1.104.0/24 (max: 24)
    2: 185.1.101.0/24 (max: 24)
    3: 2001:7f8:bc::/48 (max: 48)
    4: 2001:7f8:be::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/iPzPRS1xQOxmktxv0-A99WwdChg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868222077 (0x33c0047d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
        Validity
            Not Before: Jan  1 05:34:47 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=88fccf452d7140ec6692dc6fd3e03df56c1d0a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a5:94:cc:bd:82:55:43:1b:6e:1d:6c:da:76:
                    3d:de:45:cc:72:26:bf:5d:4c:ff:e7:69:c4:c5:1e:
                    a7:c6:da:b8:5e:2e:21:1f:25:f9:bf:8b:b6:64:df:
                    b1:dd:80:6d:23:87:82:4a:28:ed:70:09:21:10:68:
                    20:01:a8:7e:5f:5a:57:8c:08:61:3c:a3:e4:8e:87:
                    86:14:5b:42:50:2b:12:9d:3e:6b:d4:6a:31:5e:bc:
                    fe:78:9d:3b:eb:e4:16:f7:81:51:cc:93:36:28:51:
                    a2:7d:4d:14:06:72:0e:07:86:ba:3e:6a:e8:a1:9e:
                    58:6b:81:55:d4:4b:78:fa:3f:53:44:dd:67:c5:29:
                    a9:b0:84:01:ba:b2:a6:fe:12:5a:b1:99:c1:74:26:
                    b1:2f:2f:ac:d7:f5:a1:da:54:19:98:29:94:cc:bc:
                    c4:78:12:91:dd:4f:cc:cb:15:83:47:76:90:b8:2f:
                    5c:d3:8e:2b:6c:37:77:70:a4:a7:9b:cb:81:04:03:
                    54:9c:af:f4:9d:87:ca:a6:3e:e7:0c:14:bb:a2:5a:
                    be:9b:f6:40:1c:ca:b6:5b:bd:df:7f:8f:77:71:ef:
                    be:35:22:6f:6e:bf:f4:85:2d:d0:38:52:9b:79:3f:
                    8e:a0:fc:ca:01:af:dd:33:be:c3:cc:ca:e1:18:7f:
                    35:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                88:FC:CF:45:2D:71:40:EC:66:92:DC:6F:D3:E0:3D:F5:6C:1D:0A:18
            X509v3 Authority Key Identifier: 
                keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/iPzPRS1xQOxmktxv0-A99WwdChg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0......e.....h0.....0.... ........ .....
    Signature Algorithm: sha256WithRSAEncryption
         26:8b:1b:a6:41:3a:4c:a3:32:33:c4:33:15:60:5b:7d:54:2f:
         ca:5d:50:11:69:36:89:03:0e:c6:42:2d:b8:a7:35:55:18:0e:
         d6:84:20:cb:16:4e:2f:7c:ac:d8:62:c9:ed:cc:37:d8:7e:2f:
         b7:54:f9:87:b0:eb:10:85:14:b2:20:0e:77:32:46:fe:83:7e:
         1a:f7:cf:0d:5f:d5:72:54:a9:be:e1:d6:cc:d2:4f:17:15:a9:
         81:c1:1f:5e:13:e8:96:a8:c1:cd:cc:39:c4:42:54:d2:28:eb:
         ad:d5:0c:3c:57:41:97:eb:7e:52:1c:da:00:4a:5c:3b:71:78:
         fa:65:4f:55:43:3d:d1:ce:be:bd:ef:8e:3f:c2:e4:6e:cf:c9:
         31:03:f9:e9:d5:a6:7f:07:80:1e:42:20:2c:a2:23:3d:d7:3d:
         a4:6f:2e:f4:eb:11:87:63:57:fc:70:86:59:15:17:40:fc:60:
         5d:0a:43:08:d4:ac:c0:bb:bf:28:82:f5:8a:d5:2f:d4:34:9c:
         1c:13:b7:f6:ac:09:ac:45:7a:37:2e:ec:db:45:9b:3a:f5:f5:
         19:71:e5:1f:7d:7f:74:07:cb:f0:0e:26:44:84:3f:94:08:20:
         41:e4:3a:56:b4:ea:ae:26:9f:6e:5c:55:ea:8e:f6:e4:1d:b3:
         94:d7:fd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:27:27 2021 by LibreSSL & rpki-client.