Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/K_2f59FL8s25BJuwTWdhdKqnmrc.roa (download)

Subject key identifier:   2B:FD:9F:E7:D1:4B:F2:CD:B9:04:9B:B0:4D:67:61:74:AA:A7:9A:B7 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS212032
Prefixes:
    1: 195.85.35.0/24 maxlen: 32
    2: 193.149.161.0/24 maxlen: 32

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/K_2f59FL8s25BJuwTWdhdKqnmrc.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383143398 (0x16d64de6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Nov  9 23:02:04 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2bfd9fe7d14bf2cdb9049bb04d676174aaa79ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b7:ff:19:31:4c:58:4a:99:76:38:d7:69:35:
                    7c:36:f9:7a:87:b1:c2:7d:bb:dd:ca:77:5a:17:f1:
                    81:af:f8:ca:40:52:73:61:16:6e:be:b4:7d:4a:30:
                    46:fb:ba:d8:b0:16:30:90:ca:28:98:66:ff:78:3c:
                    36:da:3c:60:6a:5a:e4:29:98:f0:34:1b:c5:8d:ee:
                    8b:1a:f5:5d:82:89:4c:d7:94:d0:84:42:4a:31:d9:
                    53:64:83:d6:57:fb:81:10:35:c6:00:55:06:d7:a5:
                    d5:e3:b5:60:b7:f7:da:49:b9:2b:ac:0e:84:ae:2f:
                    65:dd:2e:08:8b:9d:85:9e:3a:f8:5f:b3:eb:d7:c4:
                    f9:c1:65:31:f7:e5:6d:c8:7f:16:4a:84:50:8e:a4:
                    7f:fc:10:85:d6:41:aa:be:fc:08:c5:3c:63:f8:60:
                    06:43:b6:73:09:4e:77:42:e9:a4:47:2a:99:8c:41:
                    f6:8b:7b:7d:81:0e:e3:fc:bb:cd:a6:e4:40:e3:12:
                    80:e8:0c:4a:27:e7:eb:56:7e:d1:95:77:36:7e:23:
                    a0:82:d5:57:42:fa:b2:9d:ce:b6:fd:50:18:c8:96:
                    77:1b:db:fa:c6:09:8a:8e:4c:fa:ac:ba:c1:5d:ec:
                    11:29:7e:f0:3c:e1:9d:c1:10:a7:76:04:63:56:7a:
                    ee:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2B:FD:9F:E7:D1:4B:F2:CD:B9:04:9B:B0:4D:67:61:74:AA:A7:9A:B7
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/K_2f59FL8s25BJuwTWdhdKqnmrc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.161.0/24
                  195.85.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:66:6b:4a:98:38:8f:24:2e:7c:56:b6:d7:9e:67:f6:89:81:
         cf:48:e2:3e:f9:ae:b3:fe:f7:b0:a2:51:59:8b:cb:7d:2a:9d:
         54:ca:a2:08:b3:6b:20:3f:3b:c5:93:3e:e5:7b:bd:ed:76:a6:
         af:82:19:1c:fb:45:28:78:b0:0d:62:e4:1c:02:d0:fc:69:9d:
         7c:34:80:6c:80:dc:d6:79:80:9a:e5:96:43:8a:08:db:b3:5b:
         89:f1:fa:ba:f1:4e:8c:46:8a:16:7c:cc:f6:c6:2a:c8:b9:ea:
         5e:67:66:a8:7c:9a:43:d0:b4:4c:8c:59:7a:57:85:be:1a:ed:
         5d:3c:df:30:1b:f1:69:f4:c8:42:69:e8:7e:40:57:0d:e0:8d:
         1a:7f:14:eb:e1:0e:1b:08:48:9f:46:df:b6:6d:72:82:2b:6f:
         37:10:c0:06:4c:f5:3a:98:e1:50:c7:04:16:8f:0d:cb:a4:78:
         bd:0f:ab:ca:9c:49:d0:57:75:81:18:48:40:89:9e:a2:6d:14:
         91:19:5b:54:6a:ed:16:77:4e:5e:eb:55:e7:f6:12:1a:25:0f:
         ae:b3:26:dc:b9:82:26:9b:68:90:eb:af:37:db:ea:a9:6f:6a:
         13:49:20:cf:72:33:5d:45:87:f3:d3:de:ee:dd:0e:ea:34:20:
         34:f1:a4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Nov 10 00:14:51 2021 by LibreSSL & rpki-client.