Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/um7WZwi7rdQoKX6Lst3avxF71R0.roa (download)

Subject key identifier:   BA:6E:D6:67:08:BB:AD:D4:28:29:7E:8B:B2:DD:DA:BF:11:7B:D5:1D 
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
asID:                     AS399471
Prefixes:
    1: 2.56.56.0/22 (max: 24)
    2: 37.46.150.0/24 (max: 24)
    3: 185.239.243.0/24 (max: 24)
    4: 185.239.242.0/24 (max: 24)
    5: 2.58.148.0/22 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/um7WZwi7rdQoKX6Lst3avxF71R0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190604428 (0xb5c648c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
        Validity
            Not Before: Oct  1 10:42:57 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ba6ed66708bbadd428297e8bb2dddabf117bd51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:95:fe:d0:44:52:b2:ec:98:74:fc:bc:c6:9b:
                    bb:6b:e6:aa:37:9a:7e:c1:b0:38:c1:0f:bf:72:a5:
                    8c:f8:fa:91:e7:49:c0:e3:e1:54:90:2f:f4:3e:a6:
                    84:49:46:0c:90:a9:52:41:5b:f6:08:0f:4d:1b:8e:
                    51:06:44:f7:83:aa:f7:0b:9a:66:77:bb:67:ac:6d:
                    18:43:ef:fd:6f:63:cb:70:40:eb:1c:e9:21:18:8b:
                    0e:07:25:ad:cb:4b:d2:65:9c:a6:76:71:21:a1:61:
                    66:73:d2:86:e3:12:9c:95:47:a0:87:e6:bd:68:fa:
                    7a:ad:2c:67:46:89:10:35:62:6e:5c:be:1f:84:aa:
                    d2:ce:7c:1a:e5:d6:87:9c:44:31:9a:35:a5:19:de:
                    e2:54:1d:27:c0:fe:e7:f8:8d:6e:0d:12:5d:bd:5b:
                    5a:11:1f:e6:d3:6d:f8:6d:0b:72:94:ef:ab:6c:44:
                    83:e7:9c:a9:09:8b:47:bd:13:0d:b3:a5:24:6e:b5:
                    c2:48:d9:4f:c2:4e:ca:34:8b:38:04:a5:cc:e7:39:
                    a6:e0:b1:2c:d1:8d:f5:a6:52:8e:1f:28:cd:80:f9:
                    fc:30:15:24:18:4e:47:0a:bf:fc:f5:8d:ad:49:d8:
                    69:3b:af:16:c2:84:58:27:c4:49:2e:29:88:8d:03:
                    c8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BA:6E:D6:67:08:BB:AD:D4:28:29:7E:8B:B2:DD:DA:BF:11:7B:D5:1D
            X509v3 Authority Key Identifier: 
                keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/um7WZwi7rdQoKX6Lst3avxF71R0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.56.0/22
                  2.58.148.0/22
                  37.46.150.0/24
                  185.239.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:4b:f2:9c:90:f7:ee:49:1d:92:e4:18:47:cd:6c:ad:97:3a:
         a6:79:ff:30:b1:c4:a1:e4:f4:48:06:ef:9a:b2:2c:b2:c7:7e:
         c2:38:93:9e:6b:20:91:55:91:09:8e:9a:f3:b4:7e:11:c6:83:
         63:79:f4:c6:e1:ef:6d:08:bf:66:21:8a:23:b2:b2:d4:fa:a1:
         3b:c6:f7:7e:3b:18:7b:67:14:23:f0:f8:30:25:9f:aa:de:ef:
         32:48:c8:9b:6c:c3:6f:1c:08:cc:10:12:ab:4e:c2:98:f5:3d:
         6b:fa:75:87:c0:9f:f6:ad:4e:3d:e9:4a:ab:f4:a0:f5:7d:e8:
         2f:26:b3:7c:21:62:f1:d6:3a:78:16:e4:85:05:99:30:2d:0f:
         73:ef:ca:eb:7f:18:e0:05:de:26:d0:94:92:09:5e:04:32:2f:
         e7:3c:78:7f:d5:69:3f:b6:54:29:43:83:00:b5:f5:50:9a:ee:
         26:f5:bc:db:bd:de:c8:22:d8:c4:f2:ee:aa:c5:0a:d5:23:60:
         57:1d:d4:b4:14:53:c3:14:6c:1b:94:93:fa:28:a0:c0:5d:28:
         19:f8:4d:0f:d4:ae:2b:a4:48:25:ea:8f:d3:51:f3:c8:da:f5:
         99:42:1d:c0:5f:8f:46:b9:3c:17:14:ab:43:4f:a8:86:9e:8a:
         00:c5:1c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Oct 1 13:16:15 2021 by LibreSSL & rpki-client.