Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/4bnlxQdt93M2lfL68GaUzG79dWs.roa (download)

Subject key identifier:   E1:B9:E5:C5:07:6D:F7:73:36:95:F2:FA:F0:66:94:CC:6E:FD:75:6B 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS56856
Prefixes:
    1: 212.21.139.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/4bnlxQdt93M2lfL68GaUzG79dWs.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96145910 (0x5bb11f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 02:43:25 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e1b9e5c5076df7733695f2faf06694cc6efd756b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:cd:2e:b6:cf:36:9f:06:93:fc:17:81:33:
                    94:71:4a:d8:07:3a:ad:85:b3:01:ef:44:37:60:0b:
                    e9:4b:5e:35:6b:15:54:45:6c:ed:bf:08:c3:87:a1:
                    77:1c:91:a1:dc:ae:96:66:71:62:2c:fb:a4:d1:06:
                    45:6a:d5:e1:86:f4:96:b1:53:24:0d:f1:8f:67:78:
                    9c:79:1f:3b:31:0b:d6:f4:e3:04:56:b2:9a:9c:c7:
                    da:f9:e4:73:32:3d:46:a7:d4:fe:2c:05:47:41:aa:
                    48:2c:31:fa:f8:dd:58:55:4e:c8:46:c9:e5:58:1f:
                    67:af:66:87:07:69:f6:7f:71:f1:d5:a9:d1:55:40:
                    79:61:ff:83:d0:9c:bf:27:36:46:5f:cd:c8:c0:58:
                    55:28:fc:fd:72:93:af:6b:34:b7:48:33:78:3b:48:
                    e7:ae:d0:5e:42:d8:24:6d:48:79:cf:cb:6a:c2:ef:
                    95:7a:c3:b7:49:61:03:92:cb:44:d9:f9:95:2f:f3:
                    f3:b8:9d:88:87:f4:43:91:3a:04:37:ba:04:99:bb:
                    71:9b:84:8f:37:0d:82:8e:05:1e:69:dd:ff:ae:74:
                    ba:8d:fa:0d:85:e4:fc:0c:4a:2f:41:af:0e:fa:4c:
                    43:6f:d1:76:8d:69:9b:aa:e1:e2:79:b3:69:b2:5d:
                    fb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E1:B9:E5:C5:07:6D:F7:73:36:95:F2:FA:F0:66:94:CC:6E:FD:75:6B
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/4bnlxQdt93M2lfL68GaUzG79dWs.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.21.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:2d:8e:93:a7:f1:86:80:67:83:3f:d2:18:03:94:12:aa:25:
         af:84:9f:a9:2c:46:bb:08:fb:60:42:94:c6:72:4b:05:fb:15:
         7a:60:ac:ac:b6:f3:a7:06:1e:40:67:38:ea:fd:40:77:20:43:
         08:32:e8:9b:e5:ed:d2:c4:3e:6b:98:b2:b2:1a:6e:39:62:15:
         50:18:78:de:4c:41:e0:2a:e6:8b:a1:e1:41:b0:a0:99:a8:d9:
         f3:0a:8d:12:d6:03:f6:70:f7:d3:7c:62:d5:95:72:f6:fd:5b:
         03:f4:99:a1:25:c4:de:12:74:59:4b:c8:69:a4:b9:f3:53:a7:
         b6:aa:2f:95:e0:f8:e9:54:80:ef:a5:fd:7f:92:f3:d0:a2:ad:
         3b:4f:4c:bb:95:cc:65:cf:c9:ce:52:db:40:cd:f1:69:e1:b6:
         dc:67:71:d4:0d:93:01:ab:b6:02:5d:fd:e9:f8:b3:d3:ff:62:
         5a:93:c4:51:31:5b:93:fb:af:c8:59:94:47:5b:1d:2a:62:a7:
         fc:1c:ac:0c:e6:0a:ec:9c:06:11:08:f1:9a:7e:32:8e:4f:55:
         e3:e5:0d:d3:14:b8:08:d3:fd:81:85:ac:86:b1:ab:dd:7a:f5:
         a8:40:92:a3:40:47:59:ed:1d:c7:a3:cd:1b:5c:57:45:98:90:
         c5:ac:49:c2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBbsR9jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YmVjOTAzMGM3MGEzZDQxOTJkNTljMjhkY2M4ZDU0NzY5NDM0MGIzMB4XDTIxMDEw
MTAyNDMyNVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTFiOWU1YzUwNzZk
Zjc3MzM2OTVmMmZhZjA2Njk0Y2M2ZWZkNzU2YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKVrzS62zzafBpP8F4EzlHFK2Ac6rYWzAe9EN2AL6UteNWsV
VEVs7b8Iw4ehdxyRodyulmZxYiz7pNEGRWrV4Yb0lrFTJA3xj2d4nHkfOzEL1vTj
BFaympzH2vnkczI9RqfU/iwFR0GqSCwx+vjdWFVOyEbJ5VgfZ69mhwdp9n9x8dWp
0VVAeWH/g9Ccvyc2Rl/NyMBYVSj8/XKTr2s0t0gzeDtI567QXkLYJG1Iec/LasLv
lXrDt0lhA5LLRNn5lS/z87idiIf0Q5E6BDe6BJm7cZuEjzcNgo4FHmnd/650uo36
DYXk/AxKL0GvDvpMQ2/Rdo1pm6rh4nmzabJd+9cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBThueXFB233czaV8vrwZpTMbv11azAfBgNVHSMEGDAWgBTr7JAwxwo9QZLV
nCjcyNVHaUNAszAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzYteVFNTWNLUFVHUzFad28zTWpWUjJsRFFMTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvMzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8x
LzRibmx4UWR0OTNNMmxmTDY4R2FVekc3OWRXcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
MzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8xLzYteVFNTWNLUFVH
UzFad28zTWpWUjJsRFFMTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQVizANBgkqhkiG9w0BAQsFAAOC
AQEAni2Ok6fxhoBngz/SGAOUEqolr4SfqSxGuwj7YEKUxnJLBfsVemCsrLbzpwYe
QGc46v1AdyBDCDLom+Xt0sQ+a5iyshpuOWIVUBh43kxB4Crmi6HhQbCgmajZ8wqN
EtYD9nD303xi1ZVy9v1bA/SZoSXE3hJ0WUvIaaS581OntqovleD46VSA76X9f5Lz
0KKtO09Mu5XMZc/JzlLbQM3xaeG23Gdx1A2TAau2Al396fiz0/9iWpPEUTFbk/uv
yFmUR1sdKmKn/BysDOYK7JwGEQjxmn4yjk9V4+UN0xS4CNP9gYWshrGr3Xr1qECS
o0BHWe0dx6PNG1xXRZiQxaxJwg==
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:51:57 2021 by LibreSSL & rpki-client.