Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/JJIvyTfLdvpekpXAAVhIC3BDL3E.roa (download)

Subject key identifier:   24:92:2F:C9:37:CB:76:FA:5E:92:95:C0:01:58:48:0B:70:43:2F:71 
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
asID:                     AS0
Prefixes:
    1: 185.1.102.0/24 (max: 24)
    2: 2001:7f8:bd::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/JJIvyTfLdvpekpXAAVhIC3BDL3E.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862652350 (0x336b07be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
        Validity
            Not Before: Jan  1 02:06:01 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=24922fc937cb76fa5e9295c00158480b70432f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:54:b7:97:56:36:c9:f0:d4:93:a7:5b:ff:c2:
                    c9:61:0b:66:26:bc:cd:a5:e7:bb:27:28:c1:c3:bd:
                    16:ac:a0:66:b8:9a:cc:98:d1:be:70:1d:bc:0a:0e:
                    fa:3b:fb:87:23:00:51:2b:56:bd:e3:ca:02:fe:73:
                    c6:45:f5:53:a6:cb:81:6e:c1:ca:c4:c7:6f:81:2f:
                    a9:6d:b3:01:a4:b2:11:a6:1d:c8:d2:33:de:9a:35:
                    46:ea:23:56:bd:23:0c:32:d7:eb:25:33:79:a2:05:
                    60:aa:39:9c:ca:f0:39:ea:fd:17:c6:bd:eb:f8:2b:
                    d5:34:35:52:1d:f7:fd:e9:6f:3c:19:5c:22:31:be:
                    d7:13:6b:70:26:1f:9c:d3:50:01:d1:ec:99:7d:bd:
                    4d:ba:ea:02:e3:81:47:98:8f:38:d1:18:d6:dc:25:
                    d3:05:e3:a8:65:60:3c:8c:e0:8a:3d:cd:ac:38:57:
                    3b:f3:db:06:e9:33:33:b2:66:90:94:c3:28:d6:7c:
                    17:88:c7:a0:92:7f:e0:48:14:26:d6:69:7e:78:ae:
                    30:88:ee:fb:c0:e5:6a:11:8c:16:97:7c:12:9b:5f:
                    c9:9a:ad:46:dc:fe:38:98:92:b0:8c:65:66:36:93:
                    27:2f:43:29:4f:34:79:83:94:9f:81:b2:70:c0:a4:
                    01:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                24:92:2F:C9:37:CB:76:FA:5E:92:95:C0:01:58:48:0B:70:43:2F:71
            X509v3 Authority Key Identifier: 
                keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/JJIvyTfLdvpekpXAAVhIC3BDL3E.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0......f0.....0.... .....
    Signature Algorithm: sha256WithRSAEncryption
         45:90:48:bb:f2:1b:dc:e3:ee:0f:13:4b:3a:6e:3a:ce:ac:be:
         b9:6d:76:60:df:81:f2:81:b4:35:7c:cb:f4:4a:21:3e:81:31:
         69:df:96:21:43:db:a0:3b:6c:e9:5f:0f:77:73:6e:4f:bd:09:
         02:20:46:0f:a3:09:99:bb:c7:39:d4:84:a1:6e:1d:41:b6:e8:
         b7:e2:ed:4f:da:31:69:bb:3d:c3:91:71:20:1f:76:71:7e:7f:
         9e:91:51:7d:fa:18:1e:d0:28:66:46:26:d7:48:20:18:03:ee:
         ab:bc:c8:3f:64:a0:9e:33:10:65:2b:5e:72:09:d3:37:24:4d:
         7c:11:3a:1e:97:43:f3:e6:ef:55:cc:67:2f:c3:5b:bb:4c:3d:
         3f:10:99:20:e5:f3:6e:ae:b5:32:4d:94:d0:e2:c6:52:e1:c1:
         42:ea:e9:78:2b:9d:d2:7e:90:93:b1:14:10:ba:75:33:27:4c:
         5c:72:e3:28:31:f8:66:78:27:23:ab:ce:c2:9c:c3:d9:a9:db:
         25:88:c6:6d:21:fd:69:2f:67:37:56:7e:49:bb:14:d2:7d:fc:
         23:5d:cf:50:af:d9:49:8e:b4:fb:52:b4:0e:3f:75:18:94:f5:
         b9:f8:b3:c3:dd:1a:15:b6:93:cf:e9:05:09:47:29:d0:cb:09:
         41:b6:4d:65
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEM2sHvjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Y2E3N2M3MDhhZjBiYTFmODE1NDljOWY4NzA4OTU1OTM5MDE2N2E1MB4XDTIxMDEw
MTAyMDYwMVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjQ5MjJmYzkzN2Ni
NzZmYTVlOTI5NWMwMDE1ODQ4MGI3MDQzMmY3MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALxUt5dWNsnw1JOnW//CyWELZia8zaXnuycowcO9FqygZria
zJjRvnAdvAoO+jv7hyMAUStWvePKAv5zxkX1U6bLgW7BysTHb4EvqW2zAaSyEaYd
yNIz3po1RuojVr0jDDLX6yUzeaIFYKo5nMrwOer9F8a96/gr1TQ1Uh33/elvPBlc
IjG+1xNrcCYfnNNQAdHsmX29TbrqAuOBR5iPONEY1twl0wXjqGVgPIzgij3NrDhX
O/PbBukzM7JmkJTDKNZ8F4jHoJJ/4EgUJtZpfniuMIju+8DlahGMFpd8EptfyZqt
Rtz+OJiSsIxlZjaTJy9DKU80eYOUn4GycMCkAYMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQkki/JN8t2+l6SlcABWEgLcEMvcTAfBgNVHSMEGDAWgBSsp3xwivC6H4FU
nJ+HCJVZOQFnpTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JLZDhjSXJ3dWgtQlZKeWZod2lWV1RrQlo2VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDUvOGZlN2Q4LTAxN2ItNDFhYS1hOTFmLTI4YjE5ZTNmZDRhNi8x
L0pKSXZ5VGZMZHZwZWtwWEFBVmhJQzNCREwzRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUv
OGZlN2Q4LTAxN2ItNDFhYS1hOTFmLTI4YjE5ZTNmZDRhNi8xL3JLZDhjSXJ3dWgt
QlZKeWZod2lWV1RrQlo2VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEALkBZjAPBAIAAjAJAwcAIAEH+AC9
MA0GCSqGSIb3DQEBCwUAA4IBAQBFkEi78hvc4+4PE0s6bjrOrL65bXZg34HygbQ1
fMv0SiE+gTFp35YhQ9ugO2zpXw93c25PvQkCIEYPowmZu8c51IShbh1Btui34u1P
2jFpuz3DkXEgH3Zxfn+ekVF9+hge0ChmRibXSCAYA+6rvMg/ZKCeMxBlK15yCdM3
JE18EToel0Pz5u9VzGcvw1u7TD0/EJkg5fNurrUyTZTQ4sZS4cFC6ul4K53SfpCT
sRQQunUzJ0xccuMoMfhmeCcjq87CnMPZqdsliMZtIf1pL2c3Vn5JuxTSffwjXc9Q
r9lJjrT7UrQOP3UYlPW5+LPD3RoVtpPP6QUJRynQywlBtk1l
-----END CERTIFICATE-----

Generated at Sat Jun 12 09:33:59 2021 by LibreSSL & rpki-client.