Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/188pzr7KW2BmITZlwI4EPfXCTFg.roa (download)

Subject key identifier:   D7:CF:29:CE:BE:CA:5B:60:66:21:36:65:C0:8E:04:3D:F5:C2:4C:58 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS60721
Prefixes:
    1: 185.120.5.0/24 (max: 24)
    2: 185.171.1.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/188pzr7KW2BmITZlwI4EPfXCTFg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262205322 (0xfa0ef8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 06:55:00 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d7cf29cebeca5b6066213665c08e043df5c24c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:da:3a:81:f0:f5:91:a0:72:ee:7f:06:63:
                    df:55:b2:0d:a6:ca:d8:11:07:c3:da:11:af:ac:72:
                    46:35:3d:0d:ee:7f:2c:51:99:b7:6a:0a:23:dc:03:
                    3f:31:2d:a5:96:0e:39:e2:6b:c5:26:ad:61:87:13:
                    df:9f:28:d4:8d:d5:59:15:82:a3:b7:f8:03:74:a6:
                    48:5b:21:34:86:f6:84:13:3b:25:e3:ac:94:32:bc:
                    81:fa:b1:a3:b8:f1:01:a8:77:cf:72:41:88:0a:4d:
                    32:d9:ca:a0:4b:c4:e5:47:ec:2b:e9:1d:af:40:56:
                    2d:5c:53:24:a4:eb:bc:5a:65:84:25:ed:b7:7d:b1:
                    31:14:2b:79:38:96:6a:7d:c2:74:80:ec:55:5c:89:
                    ba:c1:f0:ae:11:7a:8b:14:fe:32:a0:c6:0c:17:51:
                    33:a1:81:57:0e:82:83:70:ee:a5:27:b5:60:d6:69:
                    fc:e5:b9:e1:9f:03:b4:de:da:c9:88:55:c3:b8:7f:
                    c2:33:47:97:af:6c:5e:6b:22:f4:3a:ad:0c:7b:f3:
                    da:7d:ef:93:2f:c5:2b:71:0a:9f:3c:93:d6:1c:9c:
                    e7:4d:55:ff:89:d5:66:cf:f7:b1:cd:12:1c:68:79:
                    10:4d:7e:ed:f3:fe:61:44:92:81:10:7c:9b:0c:de:
                    77:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D7:CF:29:CE:BE:CA:5B:60:66:21:36:65:C0:8E:04:3D:F5:C2:4C:58
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/188pzr7KW2BmITZlwI4EPfXCTFg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....x.......
    Signature Algorithm: sha256WithRSAEncryption
         12:a8:36:20:bf:f6:aa:0b:c2:b4:fc:b0:65:71:26:2b:ca:67:
         7f:80:5d:fb:a6:7b:e6:bd:37:25:aa:c7:8c:1d:f2:cd:67:ab:
         1f:d9:02:2d:58:1f:7b:e9:37:d9:16:17:fd:1f:67:a7:5a:d7:
         92:43:fb:7d:9b:4b:f2:a6:ff:68:dc:24:93:e3:f0:ae:c7:e9:
         1b:29:d6:42:5e:fe:e3:0f:51:14:b7:42:e6:a3:5a:c9:44:00:
         f8:18:2d:e7:54:cb:77:60:44:8a:b3:e0:ff:85:3d:94:7a:c9:
         e5:2d:54:f0:36:01:72:3c:4e:41:d7:2b:e3:e2:37:2e:3f:20:
         a0:54:50:2b:c0:2d:89:ea:f3:cf:81:e0:81:36:70:4b:01:84:
         65:60:11:37:38:3f:c9:a3:ce:ef:24:7f:8b:1c:2b:3c:e3:f7:
         5d:4c:45:ea:b2:50:a8:38:bb:3a:ef:b2:a7:26:9f:97:a4:da:
         5c:ce:9e:6c:47:ac:6a:9d:d6:ad:48:97:41:97:69:6c:40:e6:
         c9:42:f3:14:bb:dd:73:ec:e0:3b:33:b8:e4:79:f1:70:aa:af:
         ba:b0:58:1a:3d:74:10:a5:a9:e7:4d:fd:22:86:0e:a6:8c:3e:
         f7:79:35:b5:e1:17:b5:d4:92:63:60:67:02:ef:2a:9a:d5:25:
         37:ba:5a:1a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIED6DvijANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIxMDEw
MTA2NTUwMFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDdjZjI5Y2ViZWNh
NWI2MDY2MjEzNjY1YzA4ZTA0M2RmNWMyNGM1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALgO2jqB8PWRoHLufwZj31WyDabK2BEHw9oRr6xyRjU9De5/
LFGZt2oKI9wDPzEtpZYOOeJrxSatYYcT358o1I3VWRWCo7f4A3SmSFshNIb2hBM7
JeOslDK8gfqxo7jxAah3z3JBiApNMtnKoEvE5UfsK+kdr0BWLVxTJKTrvFplhCXt
t32xMRQreTiWan3CdIDsVVyJusHwrhF6ixT+MqDGDBdRM6GBVw6Cg3DupSe1YNZp
/OW54Z8DtN7ayYhVw7h/wjNHl69sXmsi9DqtDHvz2n3vky/FK3EKnzyT1hyc501V
/4nVZs/3sc0SHGh5EE1+7fP+YUSSgRB8mwzedwUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTXzynOvspbYGYhNmXAjgQ99cJMWDAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
LzE4OHB6cjdLVzJCbUlUWmx3STRFUGZYQ1RGZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALl4BQMEALmrATANBgkqhkiG9w0B
AQsFAAOCAQEAEqg2IL/2qgvCtPywZXEmK8pnf4Bd+6Z75r03JarHjB3yzWerH9kC
LVgfe+k32RYX/R9np1rXkkP7fZtL8qb/aNwkk+PwrsfpGynWQl7+4w9RFLdC5qNa
yUQA+Bgt51TLd2BEirPg/4U9lHrJ5S1U8DYBcjxOQdcr4+I3Lj8goFRQK8Atierz
z4HggTZwSwGEZWARNzg/yaPO7yR/ixwrPOP3XUxF6rJQqDi7Ou+ypyafl6TaXM6e
bEesap3WrUiXQZdpbEDmyULzFLvdc+zgOzO45HnxcKqvurBYGj10EKWp5039IoYO
pow+93k1teEXtdSSY2BnAu8qmtUlN7paGg==
-----END CERTIFICATE-----