Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/EiJiy8JsBabgqyZhmWN-1Z3I8FQ.roa (download)

Subject key identifier:   12:22:62:CB:C2:6C:05:A6:E0:AB:26:61:99:63:7E:D5:9D:C8:F0:54 
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
asID:                     AS397525
Prefixes:
    1: 185.200.244.0/24 (max: 24)
    2: 185.200.246.0/23 (max: 23)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/EiJiy8JsBabgqyZhmWN-1Z3I8FQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204868251 (0xc360a9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
        Validity
            Not Before: Jan  1 03:35:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=122262cbc26c05a6e0ab266199637ed59dc8f054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:c4:b8:6c:fa:49:26:76:92:6d:87:29:e4:
                    e1:3a:89:8b:58:21:56:c0:70:f8:d9:08:ef:0b:aa:
                    2a:a8:8b:dd:a5:5b:d7:be:a9:0c:ec:d4:19:fd:b4:
                    6a:ca:66:c9:35:df:e5:f5:67:e8:23:17:b8:41:e2:
                    b4:c8:f0:1e:b8:75:4d:3f:57:f4:72:58:7d:37:7f:
                    ae:27:ec:30:f6:66:67:54:ff:f2:6f:51:95:51:91:
                    30:22:51:ca:48:d3:17:d9:fe:ac:e9:6c:74:a1:03:
                    ae:80:1f:6c:a3:ea:99:e8:d7:c7:a8:15:e3:e3:b3:
                    d4:72:06:1a:79:a3:bb:7f:fb:10:59:7f:6f:c7:ca:
                    66:73:28:3a:79:2b:2b:84:3e:2e:25:58:8c:c1:dd:
                    26:29:43:19:04:db:22:7b:4d:31:61:d8:12:10:6d:
                    54:9b:d9:ce:42:c6:0a:38:24:06:dc:31:88:c9:ff:
                    d8:0d:bc:58:5f:d4:01:89:f2:08:35:32:19:15:4b:
                    04:0f:b7:af:78:84:10:ab:89:1a:56:dd:b7:41:85:
                    1c:c9:34:48:7a:0b:97:29:f0:77:d0:13:73:f3:b6:
                    42:3f:ca:af:8c:34:e1:70:b4:32:ea:e6:ef:67:08:
                    70:db:49:c9:9f:4c:71:50:b8:61:43:66:e4:12:a0:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                12:22:62:CB:C2:6C:05:A6:E0:AB:26:61:99:63:7E:D5:9D:C8:F0:54
            X509v3 Authority Key Identifier: 
                keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/EiJiy8JsBabgqyZhmWN-1Z3I8FQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.200.244.0/24
                  185.200.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:df:2a:e5:ad:a8:ac:07:cc:77:c6:7f:1c:12:f5:21:d7:2a:
         6a:15:49:59:10:29:6b:3f:23:9a:a4:00:1e:2f:b0:0b:f2:dd:
         b6:27:c1:ad:3c:1e:31:56:3c:22:90:00:c1:54:9a:85:c6:69:
         e1:22:04:20:2a:1b:c1:2e:6b:c2:4b:6c:17:0a:03:65:cc:98:
         ca:9b:b9:60:a6:03:8a:6a:c7:e4:a0:44:b8:80:68:cb:77:ff:
         1b:2c:2c:6a:bf:2b:ed:8d:da:41:2a:29:2b:59:20:b7:29:41:
         ac:00:1f:1e:6e:05:fc:72:b0:d8:21:1b:24:d2:6e:13:68:4f:
         cc:26:71:d5:13:e0:b3:cd:85:e4:f5:ed:1b:87:5d:ce:fc:75:
         1b:22:d5:9c:91:04:1d:c1:db:8e:df:23:77:2c:c1:aa:d7:d4:
         47:08:3b:db:72:b5:15:c2:4d:f9:a4:09:14:87:8a:f9:6a:89:
         b4:88:41:39:ae:86:13:f2:63:0c:96:94:0b:bc:da:c0:46:2b:
         7b:65:83:ea:37:83:8c:58:f1:6b:d0:8a:db:21:c9:7a:03:ca:
         74:18:d8:6f:10:ba:3b:ed:18:d3:c4:f8:32:36:36:d4:ad:72:
         69:0e:73:51:e5:c2:1b:f4:70:66:d6:88:df:c3:a6:2b:3a:a4:
         52:6c:fc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:50:04 2021 by LibreSSL & rpki-client.