Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/jeyX9iTpBKm-9khN9UWw6Dexa9Q.roa (download)

Subject key identifier:   8D:EC:97:F6:24:E9:04:A9:BE:F6:48:4D:F5:45:B0:E8:37:B1:6B:D4 
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
asID:                     AS397423
Prefixes:
    1: 88.214.59.0/24 (max: 24)
    2: 185.249.196.0/24 (max: 24)
    3: 194.156.89.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/jeyX9iTpBKm-9khN9UWw6Dexa9Q.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220530 (0x35d72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
        Validity
            Not Before: May  7 10:10:40 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=8dec97f624e904a9bef6484df545b0e837b16bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:1e:e9:b6:30:74:0f:e3:68:bf:bc:d9:ae:
                    7f:cc:b3:93:2a:6c:7f:b6:db:0c:62:99:25:5a:8c:
                    0d:9c:02:33:4f:aa:c1:ec:b6:cb:7a:44:91:dd:de:
                    51:ad:3a:4c:59:2a:3c:2d:10:8e:03:a2:bc:1c:95:
                    49:03:af:19:a4:29:b8:a3:38:3a:9c:e7:fe:d8:c8:
                    bf:4e:0f:cf:bb:5d:20:57:f8:f9:81:ff:8c:5e:34:
                    38:65:47:88:c6:5a:aa:a6:a2:d0:4d:09:1e:31:c4:
                    6e:8f:b6:86:0e:33:77:90:fc:93:74:ee:65:d0:2d:
                    96:55:eb:67:c3:a2:e1:b5:3d:5c:60:c3:85:0d:49:
                    a8:ae:7e:fa:b9:ba:87:c8:57:5b:69:a3:ff:9c:27:
                    bf:7a:28:fa:32:ef:e7:5e:be:8a:66:e4:53:42:ec:
                    7e:98:21:06:25:cd:8e:6a:67:63:5e:51:43:24:86:
                    ef:83:43:51:d1:5d:fa:42:df:ca:c4:f7:35:3c:0b:
                    aa:f5:24:23:4a:b5:2b:66:8b:a8:5f:98:62:4d:b5:
                    50:5b:04:6e:22:bd:51:f7:d1:4d:6e:3c:79:57:8b:
                    e2:30:e7:4d:8d:3d:48:55:0a:75:62:dd:49:ec:d3:
                    5b:74:0d:da:c7:55:d9:ef:53:97:2c:e1:08:cb:58:
                    a1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8D:EC:97:F6:24:E9:04:A9:BE:F6:48:4D:F5:45:B0:E8:37:B1:6B:D4
            X509v3 Authority Key Identifier: 
                keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/jeyX9iTpBKm-9khN9UWw6Dexa9Q.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.214.59.0/24
                  185.249.196.0/24
                  194.156.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:15:c9:3f:64:b3:7b:6a:94:2b:0a:88:3e:51:18:12:a2:41:
         48:6a:31:be:e3:b6:4c:92:ad:bb:05:f5:fa:7d:ec:75:ac:e6:
         2b:ae:d6:b4:a0:b3:be:ff:cc:3c:81:4b:1c:8b:4e:25:99:d2:
         f2:ed:82:2a:bd:e2:67:3b:5b:39:4d:03:e0:49:f3:2f:5b:05:
         52:d7:4a:3e:63:b1:1e:04:24:9e:7c:e1:a7:89:47:54:5c:3f:
         93:21:3f:12:cb:ac:5e:a9:cc:08:3d:be:3d:29:32:ad:a3:38:
         93:b1:c6:1b:0f:ef:31:75:15:5e:10:72:51:ca:50:be:f7:29:
         60:d1:1c:bf:fb:41:0a:2c:95:77:92:12:cd:8c:e5:09:06:95:
         0e:74:2b:f4:06:fd:9b:8b:2a:16:2b:8b:f8:92:38:ff:4b:25:
         7d:70:5f:ba:5a:4a:a9:16:39:1e:aa:3f:0c:77:92:28:fe:1f:
         8d:59:63:93:5a:be:a8:7e:ba:2a:0c:77:d8:27:3c:7f:44:61:
         e4:be:e5:9f:9c:f3:3b:16:d6:83:11:9f:21:41:d2:d6:31:9c:
         1b:40:32:ff:6e:42:b3:5d:8f:7f:0d:fe:9c:68:4d:8f:13:3c:
         b5:0d:1b:74:2f:f9:25:10:fd:ae:24:c9:e6:a0:82:4c:32:98:
         6f:ed:b1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:12:12 2021 by LibreSSL & rpki-client.