Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3OkcqEUtN8n5729y9aIWPeQhikA.roa (download)

Subject key identifier:   DC:E9:1C:A8:45:2D:37:C9:F9:EF:6F:72:F5:A2:16:3D:E4:21:8A:40 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS31762
Prefixes:
    1: 185.249.219.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3OkcqEUtN8n5729y9aIWPeQhikA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259843712 (0xf7ce680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 06:54:37 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dce91ca8452d37c9f9ef6f72f5a2163de4218a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:1c:8c:60:15:17:22:e3:5e:01:19:a5:b0:
                    26:a6:e2:d9:df:c3:f7:09:22:1b:0e:01:2d:c5:9a:
                    09:cd:d5:e6:00:b4:93:9b:4e:c6:4c:28:78:5b:92:
                    e5:bf:40:ef:d5:30:04:09:b5:4c:e5:2e:0f:f2:54:
                    43:ac:02:f3:03:1a:2f:f7:26:42:7a:53:fa:e4:c6:
                    52:59:15:34:fa:db:09:12:ce:be:ff:e3:62:a6:d2:
                    43:23:ab:08:d2:99:10:ca:37:e8:bd:a9:ac:98:24:
                    e6:60:b3:1a:c3:4a:8a:48:88:38:46:83:8c:5f:82:
                    f2:b6:e6:08:3b:41:13:82:b9:32:4d:ca:0a:8c:ac:
                    c7:f6:29:c8:b5:76:90:44:5d:d3:d9:6d:27:de:7a:
                    86:0d:ab:4b:97:3b:58:26:43:d7:d5:0c:33:cb:c1:
                    43:f9:aa:c0:1a:eb:91:ca:3b:84:61:c5:70:d8:45:
                    43:24:2f:08:2b:74:e0:41:b4:a1:7d:de:c0:f9:90:
                    e2:c1:e7:82:70:47:d6:01:c2:e0:c4:50:3e:06:86:
                    72:66:4e:e1:88:ac:fe:ed:cd:6b:55:16:b0:7c:3e:
                    34:40:2a:bc:fe:e0:4e:4b:48:f3:58:16:f4:86:4a:
                    d4:e3:e7:ca:6e:9b:cf:45:47:5a:8b:98:6b:81:8d:
                    10:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DC:E9:1C:A8:45:2D:37:C9:F9:EF:6F:72:F5:A2:16:3D:E4:21:8A:40
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3OkcqEUtN8n5729y9aIWPeQhikA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:c7:bc:82:80:44:84:01:e9:bb:ab:3c:70:33:41:9c:45:42:
         90:95:eb:95:4f:92:cb:18:ef:9c:95:66:1d:45:62:8a:7a:de:
         7c:09:6a:0f:ae:4e:21:dd:c5:31:8e:4c:19:37:0e:c7:02:cb:
         c8:5f:af:8d:77:ba:95:db:a1:be:8e:d4:77:60:33:1f:12:b1:
         f7:f8:2c:b4:67:07:8a:e5:ad:5e:29:28:ca:cc:73:84:30:38:
         6c:f5:3b:43:a0:73:46:59:81:28:64:42:ed:7c:a1:b2:f9:5b:
         f7:96:0a:35:88:5c:71:f9:6b:42:1d:6d:3b:bf:af:54:d7:d1:
         be:f3:ca:3e:c0:11:5f:bc:00:06:c7:ae:c9:8d:5f:ff:42:03:
         07:99:3e:55:a3:1c:95:ef:ff:9f:be:94:81:f5:a1:f5:f0:ad:
         55:f0:1c:4a:3d:e5:49:fc:7c:60:bf:ec:a6:f2:69:f8:43:fe:
         5a:47:dc:8f:47:d8:7c:00:b0:f2:92:a8:2c:70:66:a8:80:bd:
         6d:a1:64:0b:ae:5c:f5:21:75:d5:74:5f:b7:e4:a2:da:84:3c:
         cc:30:57:cd:76:96:95:32:ad:6b:fa:7d:26:56:99:73:35:e8:
         f6:1a:ea:42:2b:d5:41:df:22:5f:3d:72:9f:cc:4a:03:45:96:
         68:f2:2f:20
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED3zmgDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIxMDEw
MTA2NTQzN1oXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGNlOTFjYTg0NTJk
MzdjOWY5ZWY2ZjcyZjVhMjE2M2RlNDIxOGE0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJSUHIxgFRci414BGaWwJqbi2d/D9wkiGw4BLcWaCc3V5gC0
k5tOxkwoeFuS5b9A79UwBAm1TOUuD/JUQ6wC8wMaL/cmQnpT+uTGUlkVNPrbCRLO
vv/jYqbSQyOrCNKZEMo36L2prJgk5mCzGsNKikiIOEaDjF+C8rbmCDtBE4K5Mk3K
Coysx/YpyLV2kERd09ltJ956hg2rS5c7WCZD19UMM8vBQ/mqwBrrkco7hGHFcNhF
QyQvCCt04EG0oX3ewPmQ4sHngnBH1gHC4MRQPgaGcmZO4Yis/u3Na1UWsHw+NEAq
vP7gTktI81gW9IZK1OPnym6bz0VHWouYa4GNEGECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTc6RyoRS03yfnvb3L1ohY95CGKQDAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
LzNPa2NxRVV0TjhuNTcyOXk5YUlXUGVRaGlrQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn52zANBgkqhkiG9w0BAQsFAAOC
AQEAEse8goBEhAHpu6s8cDNBnEVCkJXrlU+SyxjvnJVmHUViinrefAlqD65OId3F
MY5MGTcOxwLLyF+vjXe6lduhvo7Ud2AzHxKx9/gstGcHiuWtXikoysxzhDA4bPU7
Q6BzRlmBKGRC7Xyhsvlb95YKNYhccflrQh1tO7+vVNfRvvPKPsARX7wABseuyY1f
/0IDB5k+VaMcle//n76UgfWh9fCtVfAcSj3lSfx8YL/spvJp+EP+Wkfcj0fYfACw
8pKoLHBmqIC9baFkC65c9SF11XRft+Si2oQ8zDBXzXaWlTKta/p9JlaZczXo9hrq
QivVQd8iXz1yn8xKA0WWaPIvIA==
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:04:50 2021 by LibreSSL & rpki-client.