Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Z_mrnJA5J779IoKqFiJV2jZ3meg.roa (download)

Subject key identifier:   67:F9:AB:9C:90:39:27:BE:FD:22:82:AA:16:22:55:DA:36:77:99:E8 
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
asID:                     AS33387
Prefixes:
    1: 185.127.94.0/24 (max: 24)
    2: 185.127.93.0/24 (max: 24)
    3: 147.189.142.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Z_mrnJA5J779IoKqFiJV2jZ3meg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1762114 (0x1ae342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
        Validity
            Not Before: Jun 18 22:04:01 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=67f9ab9c903927befd2282aa162255da367799e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bf:b7:b0:bf:00:04:60:d0:89:7b:6d:ca:eb:
                    3d:d8:ac:1c:ab:d0:fd:d5:c4:18:b5:0a:ac:d4:b4:
                    e0:f6:d3:29:cb:90:87:c0:dc:80:b6:5f:55:0f:98:
                    98:64:5c:3f:e6:bf:9e:48:d8:83:f3:4b:02:2f:d5:
                    02:03:2d:55:c0:83:39:d7:a0:b0:3b:5a:87:fa:d5:
                    2d:50:e5:52:a9:41:0f:95:8e:e2:25:ce:51:9d:d7:
                    d5:16:8e:3a:83:fe:56:a8:fb:9b:d7:4d:1d:ae:37:
                    0e:8b:66:30:31:d5:4a:e2:fc:a9:7b:0a:6d:79:93:
                    00:39:3f:5d:a1:66:e2:92:ef:9c:52:cd:29:bd:09:
                    24:b8:2b:c6:5d:ce:40:bc:e8:b9:ef:3e:5b:31:cb:
                    48:10:f0:05:f3:b9:d1:a9:1c:c2:2f:23:85:e2:3e:
                    8a:6e:59:5e:6f:c6:e0:3e:c7:3c:b0:46:0d:a0:ad:
                    61:2b:cc:30:77:06:ab:2b:28:9c:8a:aa:d2:ea:20:
                    09:0b:75:c8:7e:a5:b6:c3:9a:f7:e9:4f:b7:14:5e:
                    9e:58:73:76:46:1d:31:6b:86:2e:dd:26:a6:94:e7:
                    91:ed:bf:3d:0e:52:14:74:97:21:63:6b:48:ef:87:
                    ff:fe:7c:74:03:a8:50:fd:70:60:01:2f:f0:ca:25:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                67:F9:AB:9C:90:39:27:BE:FD:22:82:AA:16:22:55:DA:36:77:99:E8
            X509v3 Authority Key Identifier: 
                keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Z_mrnJA5J779IoKqFiJV2jZ3meg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.......0......].....^
    Signature Algorithm: sha256WithRSAEncryption
         96:18:bb:42:ec:c0:ea:b5:d5:15:35:a1:f1:61:ae:52:55:22:
         fd:d0:f6:af:f7:19:c3:16:06:f4:13:98:9a:c7:e7:d7:f7:df:
         13:f4:6c:b7:61:93:c9:16:2a:48:f3:b7:d0:03:fb:dc:25:62:
         8d:8e:eb:58:86:37:23:fd:8d:0c:24:36:71:43:40:3e:d1:09:
         36:26:36:59:6c:d8:3c:97:d2:1e:2c:eb:54:79:ca:36:93:21:
         0f:86:7a:19:d6:77:e9:95:33:e0:74:c6:e0:57:2f:48:e3:5e:
         87:51:64:18:2c:59:3f:f8:0a:3e:01:29:c8:8b:60:62:87:b1:
         d8:35:03:0f:9a:4a:1d:31:b7:ef:d6:e3:74:94:41:f8:d6:9b:
         f3:05:c3:19:40:29:8d:b3:25:76:3c:8a:6d:4d:e8:30:b3:da:
         bd:a3:2f:74:ca:57:53:23:db:4f:4b:79:e5:f9:cb:2d:52:cd:
         dd:68:30:93:7a:87:a4:7a:66:78:39:55:2d:2f:d0:b0:9d:4f:
         5c:94:33:f7:91:89:a2:3e:f0:1e:1e:7c:10:40:37:9c:0e:c8:
         1b:96:74:1a:7f:6e:2d:ed:81:fb:c5:68:3e:1f:28:fa:f3:ff:
         34:c7:52:95:25:99:4c:20:7a:9c:e9:41:9d:e5:ce:9d:b1:a4:
         1b:a8:1e:6b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIDGuNCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY5
M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4N2NhMjQwHhcNMjEwNjE4
MjIwNDAxWhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2N2Y5YWI5YzkwMzky
N2JlZmQyMjgyYWExNjIyNTVkYTM2Nzc5OWU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkb+3sL8ABGDQiXttyus92Kwcq9D91cQYtQqs1LTg9tMpy5CH
wNyAtl9VD5iYZFw/5r+eSNiD80sCL9UCAy1VwIM516CwO1qH+tUtUOVSqUEPlY7i
Jc5RndfVFo46g/5WqPub100drjcOi2YwMdVK4vypewpteZMAOT9doWbiku+cUs0p
vQkkuCvGXc5AvOi57z5bMctIEPAF87nRqRzCLyOF4j6Kblleb8bgPsc8sEYNoK1h
K8wwdwarKyiciqrS6iAJC3XIfqW2w5r36U+3FF6eWHN2Rh0xa4Yu3SamlOeR7b89
DlIUdJchY2tI74f//nx0A6hQ/XBgAS/wyiXTmQIDAQABo4ICGTCCAhUwHQYDVR0O
BBYEFGf5q5yQOSe+/SKCqhYiVdo2d5noMB8GA1UdIwQYMBaAFPk6xs0iQCSbumAX
HwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEFBQcBAQRZMFcwVQYIKwYB
BQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVmYi8x
L1pfbXJuSkE1Sjc3OUlvS3FGaUpWMmpaM21lZy5yb2EwgYIGA1UdHwR7MHkwd6B1
oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgv
YjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVmYi8xLzEtVHJHelNKQUpK
dTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
LQYIKwYBBQUHAQcBAf8EHjAcMBoEAgABMBQDBACTvY4wDAMEALl/XQMEALl/XjAN
BgkqhkiG9w0BAQsFAAOCAQEAlhi7QuzA6rXVFTWh8WGuUlUi/dD2r/cZwxYG9BOY
msfn1/ffE/Rst2GTyRYqSPO30AP73CVijY7rWIY3I/2NDCQ2cUNAPtEJNiY2WWzY
PJfSHizrVHnKNpMhD4Z6GdZ36ZUz4HTG4FcvSONeh1FkGCxZP/gKPgEpyItgYoex
2DUDD5pKHTG379bjdJRB+Nab8wXDGUApjbMldjyKbU3oMLPavaMvdMpXUyPbT0t5
5fnLLVLN3Wgwk3qHpHpmeDlVLS/QsJ1PXJQz95GJoj7wHh58EEA3nA7IG5Z0Gn9u
Le2B+8VoPh8o+vP/NMdSlSWZTCB6nOlBneXOnbGkG6geaw==
-----END CERTIFICATE-----

Generated at Sun Aug 1 21:55:24 2021 by LibreSSL & rpki-client.