Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/8AIQ2q3Hy0kgBEfpJ8Vqfr_9Bx4.roa (download)

Subject key identifier:   F0:02:10:DA:AD:C7:CB:49:20:04:47:E9:27:C5:6A:7E:BF:FD:07:1E 
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
asID:                     AS394434
Prefixes:
    1: 185.194.138.0/23 maxlen: 24
    2: 185.194.136.0/23 maxlen: 24
    3: 2a0a:4bc0::/29 maxlen: 48

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/8AIQ2q3Hy0kgBEfpJ8Vqfr_9Bx4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88928476 (0x54cf0dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
        Validity
            Not Before: Jan  1 12:02:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f00210daadc7cb49200447e927c56a7ebffd071e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:27:1c:f6:e7:dc:b5:53:a2:77:42:66:9e:
                    10:f6:65:5e:3c:ee:5c:5e:a0:7f:fc:74:ef:f7:eb:
                    8f:39:48:d8:63:0f:21:eb:3a:a3:a8:cb:51:32:1e:
                    0f:d6:ec:de:e7:66:13:7e:f9:e5:50:7f:5d:1e:5e:
                    de:ce:69:37:08:da:e8:a8:5f:87:50:33:70:b0:e7:
                    06:50:67:a3:0b:08:9f:a5:5d:16:39:14:6b:61:ee:
                    1c:d2:45:d1:cf:ba:13:43:ab:b9:ac:7b:e7:09:bb:
                    84:0f:46:19:8b:87:8e:1d:93:17:6c:45:b9:fe:48:
                    0b:be:9d:16:1f:38:6b:20:1d:70:03:3f:88:bd:36:
                    a4:48:a0:76:f2:20:37:64:84:3d:c9:d1:b9:49:63:
                    d3:70:01:f5:a9:be:22:8c:e5:3e:81:4b:ab:59:d8:
                    ef:35:7f:9f:11:80:0d:85:51:cd:34:94:45:d1:62:
                    e4:fc:2f:38:34:e4:d6:a9:92:32:51:7a:f1:60:ea:
                    23:5e:bd:14:12:3c:f3:00:b3:67:f1:b4:0d:07:e1:
                    2e:bd:ed:e6:d2:b4:a8:ba:fe:82:2c:6d:84:b0:eb:
                    20:5b:12:95:89:20:71:65:7d:05:9b:d2:54:dc:58:
                    1a:2f:fe:d0:1e:08:8f:3d:46:ff:e5:78:20:e3:7f:
                    a5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F0:02:10:DA:AD:C7:CB:49:20:04:47:E9:27:C5:6A:7E:BF:FD:07:1E
            X509v3 Authority Key Identifier: 
                keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/8AIQ2q3Hy0kgBEfpJ8Vqfr_9Bx4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.136.0/22
                IPv6:
                  2a0a:4bc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         0d:94:5b:17:a6:9a:78:2c:49:ba:e0:6d:13:74:31:18:db:8a:
         9b:0f:28:00:3e:fc:e1:15:d1:1c:df:31:63:5b:8b:34:00:ba:
         ac:ec:4d:7e:fa:6d:1f:57:65:42:c6:a0:4b:26:2d:1c:fb:8f:
         15:46:f2:db:3a:dc:5a:4f:25:af:8a:42:bb:b9:75:04:38:e1:
         79:74:0b:08:36:cb:6e:38:53:a1:43:81:63:f1:02:1d:52:bd:
         a2:b4:e2:19:ab:75:33:0a:94:7d:4a:93:90:d6:5b:8d:ef:f2:
         b0:37:1c:bd:9b:eb:97:dc:15:80:5c:aa:47:10:65:2a:50:04:
         84:20:02:59:2c:f8:38:59:93:00:9e:b5:cd:f4:4e:cd:65:45:
         c5:b8:9f:76:c7:5f:e3:af:aa:23:2d:04:76:3d:e3:4d:f6:0d:
         e3:4a:39:81:e5:5b:93:98:fd:ee:f7:2a:99:d1:99:ec:d2:32:
         96:fc:d4:d4:8b:62:0b:72:56:eb:b1:90:2c:49:6c:76:29:fc:
         cb:d1:98:12:8c:de:e9:37:b5:5e:cc:80:f8:ec:f2:1e:f3:0f:
         ec:41:82:86:b1:1f:8f:49:d9:0c:e5:4f:60:56:fe:cf:9e:d2:
         99:e8:89:76:2e:4e:0a:2c:72:2a:3b:d4:e5:b4:65:51:a0:e0:
         b1:54:2c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 13:54:45 2022 by LibreSSL & rpki-client.