Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/byWKjdRW1JYZFTdk1LqCvvD-q6E.roa (download)

Subject key identifier:   6F:25:8A:8D:D4:56:D4:96:19:15:37:64:D4:BA:82:BE:F0:FE:AB:A1 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS136933
Prefixes:
    1: 185.171.0.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/byWKjdRW1JYZFTdk1LqCvvD-q6E.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379029865 (0x16978969)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Oct 27 22:14:08 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6f258a8dd456d49619153764d4ba82bef0feaba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:c6:ab:41:20:51:11:71:50:b7:f5:56:2e:
                    7a:d9:3a:cb:47:c6:07:a0:41:c3:10:c4:be:63:3c:
                    8c:c5:44:f2:51:94:ef:51:29:68:25:94:4b:1f:f4:
                    00:7a:d6:55:29:1d:ae:5c:9b:e8:7f:15:c5:6a:89:
                    b0:a7:33:c3:ca:3d:85:19:ed:ab:0b:3e:33:40:4b:
                    ad:13:1e:39:98:9a:42:33:27:6c:62:7b:d8:d9:ea:
                    dc:03:0b:e8:80:41:3f:66:5d:25:f1:5b:80:35:47:
                    ae:6d:6d:77:cb:05:da:49:f4:ff:91:b9:24:e2:fb:
                    b9:89:7a:bb:86:3b:37:60:a0:e1:1a:b0:2a:29:33:
                    03:eb:d2:e6:02:6d:1f:31:66:8b:66:5c:f4:83:40:
                    15:5a:b3:a4:5d:fb:72:1e:55:d4:70:0d:31:4e:b9:
                    66:ac:b0:c2:97:16:ed:6a:6e:96:56:ab:6f:af:90:
                    5d:34:8f:0b:e5:0a:ec:11:d5:60:5b:d3:94:ce:9e:
                    ac:55:ec:7b:8c:af:b7:0f:5f:72:28:4f:52:84:d1:
                    f4:93:55:66:96:d3:37:d2:b8:c9:5c:62:d4:20:39:
                    a3:76:4d:bb:7b:02:f2:fd:64:32:53:30:2a:2e:00:
                    1d:e7:99:05:7c:73:fb:29:bf:a3:19:96:dc:ab:aa:
                    7c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6F:25:8A:8D:D4:56:D4:96:19:15:37:64:D4:BA:82:BE:F0:FE:AB:A1
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/byWKjdRW1JYZFTdk1LqCvvD-q6E.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.171.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:b1:af:5d:4c:d7:d3:39:d5:c6:5c:76:4a:6c:be:53:1d:3d:
         aa:13:f0:41:b6:02:86:a1:b0:85:62:8f:75:aa:61:0a:4e:37:
         7f:5e:47:53:f3:2e:0d:ad:f6:39:bd:75:5c:38:82:05:f2:c7:
         4e:7f:c5:92:03:8b:2c:d7:d0:8f:be:28:7e:51:f3:6b:72:c1:
         1a:a5:d0:df:fb:1e:4f:52:2b:01:33:89:8d:99:f1:9a:79:1a:
         b6:fb:ea:93:bb:c1:db:ba:3b:8e:7f:4d:9f:b5:31:93:5a:6f:
         0d:12:f8:31:08:2c:34:5b:db:f3:43:5c:57:d7:b9:17:0f:8c:
         a6:a4:df:f6:b2:01:1c:0b:b3:92:1c:8d:47:14:d5:10:e0:6f:
         a4:65:a8:76:ab:2e:d4:83:77:95:b6:f3:c3:06:bb:93:5e:f3:
         66:ce:ae:91:c4:4a:04:84:4c:b9:04:90:49:04:ee:da:90:db:
         ab:89:30:ae:1b:ce:f2:be:c5:70:d4:6d:7f:01:35:be:9f:0a:
         72:51:cb:72:80:16:86:a1:73:8b:0f:25:ad:6d:9a:91:6d:7f:
         4c:d0:c4:5a:9f:2b:45:26:a8:9a:48:c5:b0:8e:69:a3:99:24:
         be:b2:f7:8d:0b:46:a7:22:2a:70:be:34:fc:11:b3:21:07:c1:
         c2:9e:7b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----