Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/KrqcQhupZHXOiAMUgT6BG8gYt54.roa (download)

Subject key identifier:   2A:BA:9C:42:1B:A9:64:75:CE:88:03:14:81:3E:81:1B:C8:18:B7:9E 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS212032
Prefixes:
    1: 193.149.161.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/KrqcQhupZHXOiAMUgT6BG8gYt54.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338154406 (0x1427d3a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jun 29 07:39:24 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2aba9c421ba96475ce880314813e811bc818b79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:49:a2:48:84:90:e3:c9:32:fd:9e:47:ba:
                    a7:6b:6a:fa:8f:d0:76:0a:00:36:36:a6:9c:ea:f9:
                    2b:4b:c3:82:1b:86:f4:e0:61:82:88:4b:30:1c:b2:
                    34:e9:ce:67:55:0c:a7:65:11:72:f1:d7:cb:6b:a4:
                    22:5d:e1:69:93:20:c1:80:74:db:0a:76:14:a4:a0:
                    94:c0:2b:b5:c5:2b:e6:30:35:7b:15:3d:0a:99:21:
                    84:1f:5a:c7:42:7a:9c:e0:76:12:28:e4:a0:d4:37:
                    3d:3c:13:8f:ac:76:5e:a3:07:3f:7c:ba:e0:42:9d:
                    4f:82:11:08:3e:ba:8a:03:7f:33:21:26:7c:47:36:
                    40:b0:a2:1c:87:6f:09:fb:a6:f6:cc:d0:3d:52:e6:
                    2c:b5:61:2f:91:82:66:94:e6:8e:1b:59:b6:9b:6e:
                    d8:23:a3:d3:f2:a2:26:bb:25:75:5a:fd:c3:64:17:
                    a8:d8:42:b7:53:fb:50:b0:7c:02:42:40:be:51:a9:
                    83:66:6b:99:24:1a:1c:1c:7e:2e:1b:a8:e9:20:4f:
                    4d:cd:a3:cb:5c:bd:00:2a:c9:51:f4:25:96:7b:06:
                    ce:ef:44:bc:54:da:64:ad:b4:92:f6:79:fd:49:9a:
                    d5:ce:63:66:b0:f7:2e:09:00:4d:16:95:8b:7b:ff:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2A:BA:9C:42:1B:A9:64:75:CE:88:03:14:81:3E:81:1B:C8:18:B7:9E
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/KrqcQhupZHXOiAMUgT6BG8gYt54.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.......
    Signature Algorithm: sha256WithRSAEncryption
         68:83:35:eb:a4:55:77:5a:c7:0a:59:8c:e3:13:3a:11:6f:4f:
         43:c3:92:a2:3a:65:a1:cd:bc:2f:b2:50:09:d3:e1:59:8f:e2:
         34:10:e0:c4:85:97:75:1e:3c:f0:79:03:74:e7:ca:50:ed:40:
         19:ca:ed:16:58:e6:ef:0c:82:5d:0e:df:de:3c:84:90:ca:6b:
         3d:fb:58:36:d6:48:71:95:66:6c:b8:78:03:2c:a4:1f:05:f6:
         36:ad:20:f6:a1:2a:54:0c:d4:05:4d:d9:48:01:12:94:6d:ff:
         b1:e1:b0:d2:b6:44:e2:ac:bc:4f:d6:ca:d1:50:1c:3a:43:c0:
         ee:fc:89:8d:f4:73:e8:b6:21:b8:42:c8:46:af:1d:78:9d:39:
         d6:33:77:0c:41:62:8c:da:92:59:93:0f:f5:cf:ae:eb:13:47:
         93:a9:2b:1c:47:0a:52:eb:c9:ad:83:a4:5b:8e:14:86:9a:10:
         92:11:b3:50:0a:e1:bd:f2:83:a0:0d:94:0d:c5:4c:6a:df:d7:
         41:aa:df:25:d3:92:b1:ea:5d:b3:d0:a8:68:3b:a6:4e:3a:6c:
         ba:e0:55:11:19:0d:bb:cd:59:9f:b1:0c:5e:c0:75:b2:cd:dc:
         5e:9e:22:52:21:0a:b3:f7:81:7a:7f:d8:b9:5b:8e:cf:df:25:
         6b:a7:69:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----