Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ki30uLIh2ShsQhqSu8_DPU4Oqw4.roa (download)

Subject key identifier:   92:2D:F4:B8:B2:21:D9:28:6C:42:1A:92:BB:CF:C3:3D:4E:0E:AB:0E 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS212437
Prefixes:
    1: 185.224.147.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ki30uLIh2ShsQhqSu8_DPU4Oqw4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265342001 (0xfd0cc31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 06:55:32 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=922df4b8b221d9286c421a92bbcfc33d4e0eab0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3f:d8:b1:2f:d1:5f:99:bc:43:af:13:29:bc:
                    30:82:e7:6a:3a:a1:18:1e:0d:5a:94:08:31:32:88:
                    fa:f4:47:07:08:fd:4f:e5:15:c7:3e:26:4d:82:23:
                    68:74:9e:41:3b:18:1b:ae:e4:25:4b:9a:b2:2f:ae:
                    ae:16:0f:72:8c:36:4a:41:0e:20:7f:98:01:10:2f:
                    39:03:94:cf:cb:f1:0f:4e:9b:e9:b8:e8:69:09:36:
                    73:39:42:d2:6e:2e:61:67:65:9d:c5:b5:58:52:a4:
                    68:7a:2a:3c:7b:d5:3e:7a:9b:cd:64:e4:fc:c5:8a:
                    8c:c1:fd:de:e0:a7:24:5e:3f:02:9a:27:e0:35:90:
                    f1:f8:95:b8:e4:fa:59:d7:90:39:16:ce:df:42:ca:
                    2d:6a:db:dc:46:ac:ca:cb:08:7d:95:02:50:49:28:
                    ac:f5:84:27:96:6a:b5:3e:eb:e9:cb:af:e8:cc:1b:
                    60:ea:f2:68:b4:7f:b0:ed:ac:3c:26:20:ba:4d:9b:
                    43:54:5d:4b:06:2e:06:c7:1e:11:f0:18:2e:e5:29:
                    a1:a6:f9:98:2a:31:c4:98:f2:99:6b:a1:48:b9:80:
                    89:52:cb:a3:99:a5:f2:0f:21:54:8f:ec:c3:c9:58:
                    6e:03:4a:9f:fe:70:fd:27:e0:52:af:d4:ec:b3:32:
                    12:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                92:2D:F4:B8:B2:21:D9:28:6C:42:1A:92:BB:CF:C3:3D:4E:0E:AB:0E
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ki30uLIh2ShsQhqSu8_DPU4Oqw4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.224.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:94:31:f9:e0:f7:f4:9c:e6:d3:d9:ec:79:32:d9:71:8b:fd:
         be:3b:29:99:4b:80:c3:b4:5b:e2:3c:e4:93:60:de:bf:56:6c:
         0b:5d:94:0b:36:08:f2:d8:58:c7:5a:e2:de:38:e2:15:8c:35:
         d5:80:7c:01:d4:4a:3c:eb:a5:c3:e5:ad:da:de:7c:5c:40:fc:
         2c:58:58:54:9f:73:35:9a:5c:d0:ba:40:5c:97:a4:d2:52:1d:
         16:90:6b:67:c5:cb:76:0e:df:b5:fb:9d:06:4a:24:7f:fb:d1:
         e1:29:4a:40:ff:3b:1a:76:81:4d:d6:f0:52:a3:86:47:18:9e:
         93:8a:85:b0:d2:49:6a:d3:06:c7:44:ff:27:1c:55:32:61:30:
         59:71:f1:5c:06:97:67:73:06:c5:23:3c:d1:b2:73:33:46:ed:
         34:d5:83:ee:9e:cf:e8:e1:ba:20:79:50:b9:b4:68:a7:6f:c3:
         05:4f:35:a3:a2:27:53:b6:65:53:8c:d5:bd:e8:c3:7a:3b:60:
         fa:67:a7:a7:ac:ee:07:ef:8e:c0:17:6e:69:66:74:4d:87:6d:
         41:3c:6f:79:7a:83:a0:8a:df:b9:70:c1:97:32:dd:01:d1:df:
         1e:1d:b0:29:cb:5d:4d:e3:f0:3f:01:95:7a:e4:c4:76:58:4b:
         40:e8:8f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:05:00 2021 by LibreSSL & rpki-client.