Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/gNYoQGlLKnNG-0ufTyJQ01WAd_0.roa (download)

Subject key identifier:   80:D6:28:40:69:4B:2A:73:46:FB:4B:9F:4F:22:50:D3:55:80:77:FD 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS2856
Prefixes:
    1: 185.215.215.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/gNYoQGlLKnNG-0ufTyJQ01WAd_0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258672532 (0xf6b0794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 06:54:22 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=80d62840694b2a7346fb4b9f4f2250d3558077fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:30:37:3a:47:ad:33:43:5c:41:90:8a:2d:8a:
                    87:97:fc:4b:ea:41:9b:e9:6e:e6:46:db:74:3c:c0:
                    0b:f8:a7:b8:9a:b1:b7:74:31:21:7a:66:78:b4:3c:
                    d3:ca:2e:f4:a3:b1:3f:59:55:b5:52:46:55:76:4e:
                    6f:2d:7e:d2:d9:33:20:1c:e6:dc:03:5a:f6:03:cb:
                    17:5c:ef:da:a4:5a:3a:f9:12:f8:e5:79:65:0b:72:
                    82:23:8b:2f:0b:69:06:a0:be:99:39:84:5b:e5:3e:
                    80:0d:2b:29:08:8d:56:54:17:9b:0d:7a:04:82:37:
                    e4:c4:98:12:53:7c:cd:01:da:fb:0d:51:75:38:51:
                    4d:bc:38:d8:92:28:4b:29:90:64:ae:ac:82:c5:3c:
                    97:45:f1:5d:10:d6:72:0f:ec:d3:ff:9e:dd:9a:06:
                    fe:c9:aa:8a:20:4a:e0:30:63:42:3b:ff:92:a7:a5:
                    3a:be:5b:c9:75:cf:4e:09:bc:3c:1f:cb:e7:47:fc:
                    77:a4:96:22:b7:96:31:91:31:92:04:42:e2:e9:45:
                    29:f7:6d:22:d4:c5:72:02:6c:70:2e:04:ce:fa:b3:
                    00:c1:ba:88:60:5e:38:46:86:05:c7:c2:d7:f5:78:
                    86:fa:82:80:0c:de:bf:39:71:cc:59:75:fd:e1:3c:
                    0d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                80:D6:28:40:69:4B:2A:73:46:FB:4B:9F:4F:22:50:D3:55:80:77:FD
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/gNYoQGlLKnNG-0ufTyJQ01WAd_0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:86:5b:e1:65:ef:4e:61:96:92:7a:7a:4f:ae:60:b3:62:5f:
         79:10:65:0f:9c:6f:85:50:e9:8e:ce:f7:9e:3a:ad:f9:1b:6b:
         35:80:2a:2a:5f:f5:2a:0c:c5:95:3d:81:67:67:48:09:fd:74:
         bb:9b:36:a6:35:4a:f5:d5:da:91:ba:1c:dc:2a:0d:22:de:db:
         f8:d5:d3:b8:3e:d5:a0:69:23:d9:9f:d0:e0:92:5d:77:a0:c0:
         37:9d:0b:f8:04:99:74:9a:cb:ac:a4:a7:1f:cc:1f:85:41:a0:
         75:4a:cc:77:3f:23:87:83:a5:66:f9:35:cf:b0:2b:f4:9e:7a:
         6c:e6:ae:74:2a:5a:9c:73:bb:fd:7d:88:89:fa:f7:68:cf:26:
         66:11:c7:fc:3d:5e:bd:d2:0d:f2:65:92:d1:61:ee:c8:cd:92:
         42:a5:45:6f:59:b3:3b:b7:3a:f7:46:44:2c:dd:e0:88:b7:36:
         19:c4:00:75:3d:31:d0:3e:82:b9:08:96:57:6c:a0:48:dc:ef:
         33:10:67:37:10:f7:f9:c4:ec:c3:64:a3:00:8b:a2:03:5f:e3:
         44:53:cd:0e:1d:67:cb:bd:59:de:4c:77:c4:4e:f3:f7:45:9c:
         7c:71:32:76:c4:a6:48:3f:93:7e:af:1c:ae:e3:d7:fc:3b:b7:
         41:43:e9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:04:59 2021 by LibreSSL & rpki-client.