Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/zsqE03bSEvBbAoXj8LVVlgWHPNY.roa (download)

Subject key identifier:   CE:CA:84:D3:76:D2:12:F0:5B:02:85:E3:F0:B5:55:96:05:87:3C:D6 
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
asID:                     AS399746
Prefixes:
    1: 185.221.218.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/zsqE03bSEvBbAoXj8LVVlgWHPNY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138762008 (0x8455718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
        Validity
            Not Before: Jun 16 17:16:17 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ceca84d376d212f05b0285e3f0b5559605873cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:3b:5f:5a:fa:d9:7b:04:51:37:0e:8d:a3:
                    f8:2b:50:0c:b5:fc:db:6e:ab:b3:f7:2f:69:ef:72:
                    0e:41:e9:e9:c9:78:83:57:5c:3e:c6:1a:b1:33:9d:
                    0c:f2:18:ec:11:7b:aa:dc:a6:dc:a6:c4:f7:ed:db:
                    3a:4c:05:92:c0:a1:4b:6c:bd:08:41:0d:36:58:e5:
                    7f:d3:3b:87:57:af:9a:59:70:1d:13:e5:96:8b:45:
                    13:55:61:89:d9:18:92:32:a1:11:65:07:71:4e:f6:
                    d6:c3:c5:51:e1:25:a0:58:35:27:2e:61:e0:e5:e8:
                    69:3e:fe:65:19:ab:b5:6b:53:46:54:91:d6:54:d1:
                    71:22:ef:72:34:9a:ec:29:27:43:94:74:2f:49:41:
                    7e:1d:bf:48:d9:6b:5e:73:94:a5:07:44:0d:b2:82:
                    31:3e:c5:36:4a:eb:6d:d2:18:c6:29:ca:7d:b2:7c:
                    50:11:ea:f7:77:f5:1f:97:0b:56:a3:4d:09:a7:a3:
                    9c:9a:e6:c1:d0:a9:bd:ac:cb:30:80:2f:5c:c3:0f:
                    97:1a:8f:77:1d:94:58:e1:88:16:12:d6:ab:34:fb:
                    ee:16:51:7d:96:9f:f4:f4:ee:15:61:93:67:44:18:
                    6c:c1:74:05:74:5f:b9:49:37:10:4e:52:e4:f0:a7:
                    e7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CE:CA:84:D3:76:D2:12:F0:5B:02:85:E3:F0:B5:55:96:05:87:3C:D6
            X509v3 Authority Key Identifier: 
                keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/zsqE03bSEvBbAoXj8LVVlgWHPNY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.221.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:da:6c:29:ee:ac:d9:57:e5:86:e1:77:42:19:e3:49:7a:c6:
         e8:a8:10:c5:c0:15:ab:7a:6b:e5:e1:27:38:42:34:73:8e:05:
         6f:a3:84:44:0f:fa:18:8a:93:cd:88:a8:92:02:56:2c:9c:13:
         44:79:0c:34:76:a4:6a:25:15:2f:52:79:e7:75:cb:00:bf:21:
         ad:21:e8:cb:42:b5:c1:f2:5c:f1:ff:62:b8:4d:e4:f0:d7:38:
         eb:9b:be:dd:94:04:99:5f:05:57:72:de:7b:b7:b9:06:d0:04:
         bc:c5:de:72:2b:d0:ad:3a:5c:77:d4:d9:92:71:21:0b:4e:82:
         7f:80:4f:62:85:c4:89:79:af:4e:66:7e:4d:e3:7f:b0:1e:dd:
         79:51:85:dd:68:9b:19:f9:84:d6:65:e5:0a:d0:e6:68:f9:e3:
         5d:2a:8b:81:48:df:05:90:ce:9c:00:bf:f4:99:0c:0e:c9:72:
         49:82:43:6c:a0:1f:ed:51:b8:ae:d2:51:b7:05:a8:01:3c:e6:
         3e:46:aa:9d:90:cc:53:30:c8:ea:4d:ef:87:5b:0a:e5:22:7b:
         8c:b1:2d:41:0a:71:58:98:2a:42:c8:b5:8f:a7:a5:2b:90:90:
         f8:b9:13:7d:e2:5c:67:56:bb:9f:c4:ab:54:f2:cb:74:97:41:
         0c:96:1f:11
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECEVXGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZDgwMDk1MGEzMWRjZGFjYWFjNTZhZGI5MzZhNDJiZWI4NDVlMjRiMB4XDTIxMDYx
NjE3MTYxN1oXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2VjYTg0ZDM3NmQy
MTJmMDViMDI4NWUzZjBiNTU1OTYwNTg3M2NkNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMF/O19a+tl7BFE3Do2j+CtQDLX8226rs/cvae9yDkHp6cl4
g1dcPsYasTOdDPIY7BF7qtym3KbE9+3bOkwFksChS2y9CEENNljlf9M7h1evmllw
HRPllotFE1VhidkYkjKhEWUHcU721sPFUeEloFg1Jy5h4OXoaT7+ZRmrtWtTRlSR
1lTRcSLvcjSa7CknQ5R0L0lBfh2/SNlrXnOUpQdEDbKCMT7FNkrrbdIYxinKfbJ8
UBHq93f1H5cLVqNNCaejnJrmwdCpvazLMIAvXMMPlxqPdx2UWOGIFhLWqzT77hZR
fZaf9PTuFWGTZ0QYbMF0BXRfuUk3EE5S5PCn5ycCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTOyoTTdtIS8FsChePwtVWWBYc81jAfBgNVHSMEGDAWgBTtgAlQox3NrKrF
atuTakK+uEXiSzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdZQUpVS01kemF5cXhXcmJrMnBDdnJoRjRrcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTgvOGE2ZjcyLWM4MjItNDUxZi1hNWM1LWE3ZmQ2YzhlNzBmZC8x
L3pzcUUwM2JTRXZCYkFvWGo4TFZWbGdXSFBOWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgv
OGE2ZjcyLWM4MjItNDUxZi1hNWM1LWE3ZmQ2YzhlNzBmZC8xLzdZQUpVS01kemF5
cXhXcmJrMnBDdnJoRjRrcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnd2jANBgkqhkiG9w0BAQsFAAOC
AQEAN9psKe6s2VflhuF3QhnjSXrG6KgQxcAVq3pr5eEnOEI0c44Fb6OERA/6GIqT
zYiokgJWLJwTRHkMNHakaiUVL1J553XLAL8hrSHoy0K1wfJc8f9iuE3k8Nc465u+
3ZQEmV8FV3Lee7e5BtAEvMXecivQrTpcd9TZknEhC06Cf4BPYoXEiXmvTmZ+TeN/
sB7deVGF3WibGfmE1mXlCtDmaPnjXSqLgUjfBZDOnAC/9JkMDslySYJDbKAf7VG4
rtJRtwWoATzmPkaqnZDMUzDI6k3vh1sK5SJ7jLEtQQpxWJgqQsi1j6elK5CQ+LkT
feJcZ1a7n8SrVPLLdJdBDJYfEQ==
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:48:16 2021 by LibreSSL & rpki-client.