Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/C5EEx3gERtuq48VbO4FLcnsvpXE.roa (download)

Subject key identifier:   0B:91:04:C7:78:04:46:DB:AA:E3:C5:5B:3B:81:4B:72:7B:2F:A5:71 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS207983
Prefixes:
    1: 185.255.154.0/24 (max: 24)
    2: 185.253.250.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/C5EEx3gERtuq48VbO4FLcnsvpXE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264677791 (0xfc6a99f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 06:55:26 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0b9104c7780446dbaae3c55b3b814b727b2fa571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:e2:0d:9a:aa:f9:0f:fc:e9:94:d2:8b:36:
                    e6:a7:b3:4b:52:f6:5e:ca:89:81:96:2c:37:ce:c4:
                    52:05:f6:79:1e:b4:68:01:7b:13:11:dd:dd:45:6a:
                    c2:2d:6c:e5:9e:ba:f2:52:2f:e8:3c:80:a1:64:79:
                    b0:33:10:74:2d:c1:61:76:8c:8c:45:08:10:56:e5:
                    9f:50:ab:44:c3:c5:3d:9e:71:7b:ff:d4:af:02:f3:
                    62:41:d6:3b:58:2b:de:60:ef:0f:35:52:1d:39:7b:
                    cc:16:c8:17:63:12:bc:5d:68:fd:a4:fd:64:36:fe:
                    e7:4e:65:ba:48:ed:ae:67:aa:5e:b5:a3:a9:f0:7f:
                    17:00:6b:23:01:36:44:25:95:dc:c0:9e:ef:d4:a5:
                    19:2b:7d:e4:ad:d7:f2:dc:4b:7a:b8:77:dd:42:68:
                    0f:f6:45:94:99:41:7e:da:05:0e:94:23:56:fe:0a:
                    89:4c:78:fd:67:78:be:e3:db:44:a1:b0:3d:23:ad:
                    9f:10:d0:f1:22:7a:eb:57:6d:b0:f1:40:c9:87:3f:
                    3e:93:49:5c:fe:df:e9:ea:05:0b:3c:61:fc:9d:92:
                    09:d9:34:7e:67:47:cb:fa:2f:33:cf:1b:18:63:23:
                    e9:bd:f0:b1:30:79:e4:98:45:1f:f9:d8:3d:03:96:
                    46:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0B:91:04:C7:78:04:46:DB:AA:E3:C5:5B:3B:81:4B:72:7B:2F:A5:71
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/C5EEx3gERtuq48VbO4FLcnsvpXE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.250.0/24
                  185.255.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:79:cf:44:43:30:d5:64:0a:0f:8a:ce:be:08:3a:df:78:e9:
         7a:4f:04:80:c4:a4:cf:1b:b0:1a:81:ae:b3:62:3c:cb:d1:f4:
         05:2d:f1:a1:d6:9a:25:d4:0b:c1:4c:2d:2c:54:7a:ed:00:ce:
         42:5a:14:c3:37:2f:53:e1:05:07:3e:bf:01:39:2b:de:05:d3:
         7b:a4:15:80:70:c6:a5:6c:db:ca:39:a0:73:21:b6:b9:25:32:
         9e:23:de:33:31:c8:7a:89:fb:3e:48:0f:2c:5d:85:f5:87:3f:
         3b:ca:3d:32:09:62:7d:3b:68:5e:c2:c1:31:ad:2f:3f:fa:21:
         48:da:4b:12:a3:8f:8e:6f:fa:c9:1a:40:dc:48:c9:0f:02:2e:
         32:9d:95:f1:63:76:5c:b3:b1:46:e3:d3:96:fa:68:8b:c4:e2:
         70:f3:4c:0d:80:ad:f6:fd:78:9e:d8:31:64:d1:60:74:6a:15:
         2e:e4:e3:0b:f8:90:52:69:c0:c0:40:e7:6d:16:be:8c:c0:2b:
         9d:16:e1:96:ba:92:4b:c5:2b:e3:1f:2a:4b:d3:08:c8:c9:cf:
         73:24:1e:2f:08:2b:8b:db:d6:61:6f:e9:c2:73:47:97:99:e4:
         e9:13:f6:86:d3:3e:3a:eb:a1:a7:6c:0d:41:1d:c8:55:22:c5:
         1a:a9:f2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:04:53 2021 by LibreSSL & rpki-client.