Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/H8jjSMKX3CG4ZOD2t5ewuucpaNE.roa (download)

Subject key identifier:   1F:C8:E3:48:C2:97:DC:21:B8:64:E0:F6:B7:97:B0:BA:E7:29:68:D1 
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
asID:                     AS174
Prefixes:
    1: 185.201.19.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/H8jjSMKX3CG4ZOD2t5ewuucpaNE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196027961 (0xbaf2639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
        Validity
            Not Before: Jan  1 00:51:27 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=1fc8e348c297dc21b864e0f6b797b0bae72968d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0a:e4:fc:37:f7:48:e3:3e:c3:00:bf:3d:ec:
                    3d:49:ca:89:dc:0f:86:c5:10:59:8b:bb:e8:30:a7:
                    44:eb:8c:16:be:d7:fe:1d:a7:2b:24:83:45:15:68:
                    1d:bc:cf:89:0a:c5:38:a8:87:5e:47:d8:68:9b:5e:
                    83:6d:a5:60:49:58:e0:e5:94:e8:e4:a6:23:63:f9:
                    f8:6b:53:db:7c:3a:60:b1:46:b7:fa:ae:ea:95:1d:
                    9a:67:cb:8a:34:34:de:68:45:27:80:b0:5f:ba:54:
                    87:2c:56:e4:66:75:d1:23:bf:e5:0b:6d:65:10:65:
                    73:48:ff:65:3e:e3:60:23:a4:37:40:0b:f1:eb:fb:
                    c5:6f:a2:d2:06:0e:5a:06:48:52:05:e4:56:1d:51:
                    69:e3:9c:f0:32:a0:d0:ce:44:be:ab:20:11:da:7a:
                    82:ca:97:e9:67:de:41:46:0c:fd:7e:74:ce:1e:4c:
                    2e:e2:b3:4c:83:27:2b:db:68:c1:5a:c0:3c:84:90:
                    c7:01:cd:7e:23:47:92:6e:7e:dc:af:e7:76:46:eb:
                    c2:75:c3:f4:d5:86:c3:62:6c:ed:1a:16:c7:20:55:
                    95:3c:e4:34:8d:74:8d:2c:55:44:7e:08:09:05:63:
                    7c:68:04:fb:51:b9:6f:9f:e5:d5:99:2c:ae:bd:49:
                    11:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1F:C8:E3:48:C2:97:DC:21:B8:64:E0:F6:B7:97:B0:BA:E7:29:68:D1
            X509v3 Authority Key Identifier: 
                keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/H8jjSMKX3CG4ZOD2t5ewuucpaNE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:af:c6:12:a4:21:84:49:2a:65:d7:58:51:0f:7a:af:72:80:
         c8:23:22:87:72:b3:19:f9:aa:a2:27:d1:72:85:6f:55:d0:bf:
         eb:dd:aa:fb:72:c8:60:ac:f6:40:7f:b0:94:2c:40:74:7c:59:
         60:d6:62:8b:d0:d1:4c:63:b3:15:d7:21:6b:91:31:fd:3a:99:
         1c:19:b0:49:59:95:56:f5:c0:8d:48:e5:97:1e:66:10:df:bb:
         0a:67:10:02:3d:69:03:09:d2:46:99:2a:56:b0:6c:a1:36:14:
         c4:42:98:df:fa:ad:41:80:d7:97:42:3d:1f:44:8f:ef:99:c4:
         3d:9f:bb:36:ac:1b:94:a2:ea:51:aa:f3:9e:b8:8d:28:f3:37:
         db:ba:b5:95:ae:a1:5b:ae:da:37:01:3a:87:94:4e:42:88:b3:
         eb:99:43:05:bd:80:5b:3b:b2:00:31:0d:a4:57:e0:a2:94:ac:
         b4:29:7b:18:0d:58:fd:0a:30:9c:dc:ac:07:c1:ab:83:0f:9e:
         4d:39:c0:17:3c:7f:24:76:b4:78:4a:e1:9b:37:d2:ab:37:be:
         e9:d7:35:c8:b8:9f:58:41:39:1e:45:ce:9c:10:e5:c5:12:57:
         97:10:58:49:5e:78:58:7f:e2:38:3c:08:48:fd:e7:d2:31:84:
         a2:74:85:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 12:16:09 2021 by LibreSSL & rpki-client.