Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/m6I9l60k1eT07WvyZGvsCGyWddY.roa (download)

Subject key identifier:   9B:A2:3D:97:AD:24:D5:E4:F4:ED:6B:F2:64:6B:EC:08:6C:96:75:D6 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS56856
Prefixes:
    1: 212.21.139.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/m6I9l60k1eT07WvyZGvsCGyWddY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149713962 (0x8ec742a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 08:05:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9ba23d97ad24d5e4f4ed6bf2646bec086c9675d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7d:03:a4:b1:ab:ac:b3:64:66:17:9a:b2:0b:
                    08:c8:43:e5:a4:4a:a2:b5:a7:0d:35:78:ce:98:46:
                    2d:52:b1:6e:3e:f6:77:9e:15:ef:40:05:f0:97:7c:
                    bf:1a:ed:50:a1:c0:6e:26:a9:b7:1d:ff:f5:b0:c8:
                    40:46:c6:e6:fc:04:99:ba:51:a2:fa:5b:7e:e5:cd:
                    44:21:29:93:b8:e3:e1:0a:f9:8a:e2:a9:5a:ff:64:
                    99:e3:f6:4c:14:cc:d1:86:72:1e:5d:f4:fb:b7:90:
                    24:8c:56:fb:1a:de:1b:79:55:ee:ec:a3:d2:ed:34:
                    21:cd:51:a3:75:8b:36:69:0d:5a:af:2b:72:95:e4:
                    91:44:90:1f:eb:32:8c:a0:2f:56:c8:aa:dd:50:8d:
                    ad:0b:04:c1:e2:5e:42:42:c5:71:42:46:34:06:86:
                    34:75:6f:e0:66:37:f9:fc:d5:50:73:c7:ba:04:ac:
                    0c:d0:2c:be:e1:41:bd:f4:60:22:c1:76:7d:23:22:
                    2d:90:71:0e:b1:31:3b:93:0e:9f:8b:c3:f0:39:0b:
                    7b:dc:32:7f:63:89:13:ce:4a:39:a3:2a:da:8a:85:
                    11:bb:06:f9:3f:5b:ed:5c:68:7d:34:0f:e5:85:b8:
                    3a:8b:e9:f2:33:16:14:ac:aa:f7:0f:71:39:14:3a:
                    1d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9B:A2:3D:97:AD:24:D5:E4:F4:ED:6B:F2:64:6B:EC:08:6C:96:75:D6
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/m6I9l60k1eT07WvyZGvsCGyWddY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.21.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:84:08:25:10:19:39:ec:45:45:47:34:a8:ec:57:6b:92:8b:
         d4:bd:86:7c:0a:e1:43:97:c9:ac:d6:6b:9f:7b:ac:64:62:32:
         72:11:6e:84:6d:25:e3:90:3a:93:60:f0:14:fd:20:23:ad:cb:
         11:7a:3d:a9:b2:28:bd:7f:f4:8a:02:97:18:d9:4f:4e:e0:d0:
         de:44:dd:2f:d9:10:88:33:4a:6e:bc:9b:e1:f2:33:50:72:88:
         83:ac:ba:84:7d:74:61:be:d6:24:ab:0c:94:d0:df:b6:d8:65:
         38:42:20:6e:c0:8c:1f:43:a6:6e:16:9b:fa:91:f5:3f:58:2a:
         27:f9:5a:a5:e0:6c:75:3e:d7:be:b1:3f:1d:ce:71:f2:6a:54:
         11:d7:03:fb:18:59:ce:c7:04:99:7b:83:eb:6d:ee:48:49:91:
         c2:4b:79:e2:3b:cc:cc:86:2a:ee:43:0f:26:7c:90:eb:8e:9e:
         f3:8d:36:a7:e1:26:63:00:eb:18:55:1c:6c:71:64:6c:08:36:
         fc:9b:0f:5b:0d:26:e5:78:ae:81:5a:b6:15:19:fd:ef:b7:ca:
         81:ab:28:ca:6a:8a:74:1e:e4:b1:37:87:04:82:a3:ba:bf:72:
         ff:26:19:3f:9a:fb:8b:61:17:b7:8c:48:4d:c7:30:9f:b4:91:
         2f:e1:8f:d9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECOx0KjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YmVjOTAzMGM3MGEzZDQxOTJkNTljMjhkY2M4ZDU0NzY5NDM0MGIzMB4XDTIyMDEw
MTA4MDUxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWJhMjNkOTdhZDI0
ZDVlNGY0ZWQ2YmYyNjQ2YmVjMDg2Yzk2NzVkNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANZ9A6Sxq6yzZGYXmrILCMhD5aRKorWnDTV4zphGLVKxbj72
d54V70AF8Jd8vxrtUKHAbiaptx3/9bDIQEbG5vwEmbpRovpbfuXNRCEpk7jj4Qr5
iuKpWv9kmeP2TBTM0YZyHl30+7eQJIxW+xreG3lV7uyj0u00Ic1Ro3WLNmkNWq8r
cpXkkUSQH+syjKAvVsiq3VCNrQsEweJeQkLFcUJGNAaGNHVv4GY3+fzVUHPHugSs
DNAsvuFBvfRgIsF2fSMiLZBxDrExO5MOn4vD8DkLe9wyf2OJE85KOaMq2oqFEbsG
+T9b7VxofTQP5YW4Oovp8jMWFKyq9w9xORQ6HaMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSboj2XrSTV5PTta/Jka+wIbJZ11jAfBgNVHSMEGDAWgBTr7JAwxwo9QZLV
nCjcyNVHaUNAszAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzYteVFNTWNLUFVHUzFad28zTWpWUjJsRFFMTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvMzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8x
L202STlsNjBrMWVUMDdXdnlaR3ZzQ0d5V2RkWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
MzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8xLzYteVFNTWNLUFVH
UzFad28zTWpWUjJsRFFMTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQVizANBgkqhkiG9w0BAQsFAAOC
AQEAr4QIJRAZOexFRUc0qOxXa5KL1L2GfArhQ5fJrNZrn3usZGIychFuhG0l45A6
k2DwFP0gI63LEXo9qbIovX/0igKXGNlPTuDQ3kTdL9kQiDNKbryb4fIzUHKIg6y6
hH10Yb7WJKsMlNDftthlOEIgbsCMH0Ombhab+pH1P1gqJ/lapeBsdT7XvrE/Hc5x
8mpUEdcD+xhZzscEmXuD623uSEmRwkt54jvMzIYq7kMPJnyQ646e8402p+EmYwDr
GFUcbHFkbAg2/JsPWw0m5XiugVq2FRn977fKgasoymqKdB7ksTeHBIKjur9y/yYZ
P5r7i2EXt4xITccwn7SRL+GP2Q==
-----END CERTIFICATE-----

Generated at Sat Jan 1 10:26:28 2022 by LibreSSL & rpki-client.