Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/7vGYXmQ6yAwQQARMQ37YdOwbguU.roa (download)

Subject key identifier:   EE:F1:98:5E:64:3A:C8:0C:10:40:04:4C:43:7E:D8:74:EC:1B:82:E5 
Authority key identifier: 85:C3:F6:A9:E8:55:0C:09:0B:C3:B2:57:F7:2B:8F:65:B6:9A:9F:61
asID:                     AS399045
Prefixes:
    1: 185.212.119.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/7vGYXmQ6yAwQQARMQ37YdOwbguU.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2980494 (0x2d7a8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85c3f6a9e8550c090bc3b257f72b8f65b69a9f61
        Validity
            Not Before: Sep 27 06:57:39 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=eef1985e643ac80c1040044c437ed874ec1b82e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:6d:28:5b:ef:7d:b3:91:3c:af:3a:49:14:
                    89:af:6f:56:39:31:7f:7e:8d:ff:6e:f3:7d:3e:c2:
                    50:4e:6e:60:b4:f1:06:82:ec:23:a2:d7:72:05:ca:
                    cc:36:93:4b:05:98:6b:4f:3d:33:6a:bf:7a:4d:12:
                    d2:3c:0e:2f:70:91:d6:37:19:c7:08:04:7b:56:03:
                    68:1f:63:93:d3:ad:b0:bf:60:5b:0b:e8:96:c7:99:
                    59:5a:0f:9f:13:7a:82:e8:ea:60:50:d5:02:be:87:
                    ca:44:24:17:57:0e:c7:2d:af:53:28:67:d5:89:81:
                    84:9a:11:ba:23:6d:de:ef:96:ae:96:75:2c:98:74:
                    a2:25:22:d7:1d:19:95:2a:80:60:bf:ce:75:99:da:
                    1f:98:b8:62:c2:07:05:3e:c5:3b:3a:40:39:65:73:
                    5c:79:8b:3f:1b:28:61:99:aa:8f:a8:18:7f:42:a0:
                    ab:58:8b:aa:fe:e9:b8:72:c5:36:15:7b:e3:bf:f7:
                    50:1a:cc:df:2f:ab:f5:21:fa:59:80:41:8f:ea:1c:
                    68:29:69:a8:6d:03:4f:c2:df:5c:0e:65:68:b4:a3:
                    63:36:3f:65:20:e5:65:01:98:78:df:d8:4e:98:d3:
                    ee:61:3d:eb:1c:a2:1a:c5:77:3e:a1:02:91:1d:ee:
                    f8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EE:F1:98:5E:64:3A:C8:0C:10:40:04:4C:43:7E:D8:74:EC:1B:82:E5
            X509v3 Authority Key Identifier: 
                keyid:85:C3:F6:A9:E8:55:0C:09:0B:C3:B2:57:F7:2B:8F:65:B6:9A:9F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcP2qehVDAkLw7JX9yuPZbaan2E.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/7vGYXmQ6yAwQQARMQ37YdOwbguU.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/hcP2qehVDAkLw7JX9yuPZbaan2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:a2:ed:ec:e9:2b:1c:0b:37:d5:07:82:b5:da:8f:b4:37:f5:
         9e:ef:4f:11:53:dc:62:d9:58:b7:7c:e1:17:5e:e3:53:43:31:
         ad:ea:f8:3b:cb:28:4a:db:81:b2:ae:3f:76:b7:d6:33:61:7f:
         12:29:b1:d6:bd:61:ba:e9:e1:ff:45:c1:6d:05:2a:0d:0c:d8:
         0d:42:09:67:59:02:e2:a7:c4:a0:c6:14:31:29:3c:29:41:b0:
         9d:ea:d1:62:b0:42:b4:ab:9e:7e:11:6b:f3:b1:8b:67:7c:a8:
         1f:35:7f:77:c7:9a:24:b1:bf:ce:8d:fb:7c:54:71:8c:b9:f1:
         a4:d3:30:27:52:9e:2c:e3:36:14:b5:1f:21:91:b4:b0:f0:27:
         4e:07:36:35:e1:53:f3:d5:15:6b:35:79:c9:82:8a:f5:15:41:
         b2:47:b5:6f:83:de:fe:9f:4d:7e:bc:86:d0:81:2a:52:30:ed:
         be:c2:0f:3a:59:a7:73:ff:6b:e8:15:d8:49:ce:5e:3c:69:f7:
         9c:17:31:2b:89:6f:49:92:20:e5:e0:b5:d7:4c:45:74:cb:6d:
         dd:35:78:25:1c:b3:be:a4:35:ff:b3:a1:45:07:e8:6d:37:21:
         b6:a9:9f:a5:7d:5d:b4:41:9b:3b:82:dc:d6:71:81:bb:db:1c:
         ad:55:53:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Sep 29 21:57:33 2021 by LibreSSL & rpki-client.