Route Origin Authorization
Location: rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/UL_CqmpCHS3raFxT7ImdbFpcp8U.roa (download)

Subject key identifier:   50:BF:C2:AA:6A:42:1D:2D:EB:68:5C:53:EC:89:9D:6C:5A:5C:A7:C5 
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
asID:                     AS206238
Prefixes:
    1: 185.93.175.0/24 (max: 24)
    2: 185.238.128.0/22 (max: 22)
    3: 2a10:3780::/29 (max: 29)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/UL_CqmpCHS3raFxT7ImdbFpcp8U.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14186123 (0xd8768b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
        Validity
            Not Before: Jan  1 00:38:19 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=50bfc2aa6a421d2deb685c53ec899d6c5a5ca7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:49:60:b0:10:51:f9:93:bb:55:17:ef:fd:23:
                    b4:a8:ee:25:ba:23:d3:d6:66:c4:6e:8d:9a:bb:ee:
                    2d:1f:84:f6:c9:db:48:b3:ac:1b:94:31:4d:73:00:
                    46:1f:d2:6a:42:bb:e6:8b:68:c8:3a:1c:55:77:bd:
                    83:f9:35:0f:2f:73:00:dd:dd:10:0e:5b:44:4c:34:
                    e1:3e:18:55:40:10:fb:4d:b0:6b:68:7d:1e:2f:7d:
                    3f:a8:22:19:29:f2:b3:74:9e:60:14:72:b0:f8:3b:
                    1b:4f:f8:cc:52:71:10:70:5d:26:2f:9f:d1:89:ba:
                    c2:e3:81:5e:ef:e3:aa:b9:9d:31:7c:50:5e:89:38:
                    c3:fa:8f:c9:50:42:b0:e6:06:0d:4c:fe:5a:0c:62:
                    04:8a:99:b1:25:f1:8c:76:3b:ba:34:e7:e3:bd:9e:
                    3e:de:d6:e1:6e:f8:6a:65:76:1a:8a:32:98:d9:7e:
                    c0:d2:7b:79:db:1d:c0:90:06:94:ea:96:85:50:8c:
                    0d:63:39:5d:42:08:1e:0c:e7:a5:1d:37:dc:60:16:
                    43:2e:ae:98:75:0b:26:25:6e:e0:23:e6:7f:70:0d:
                    c9:c7:49:3c:d1:27:ea:2d:c7:83:f4:bd:74:b6:3c:
                    da:ce:53:15:d2:ec:de:52:ae:82:8c:15:cd:82:53:
                    2f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                50:BF:C2:AA:6A:42:1D:2D:EB:68:5C:53:EC:89:9D:6C:5A:5C:A7:C5
            X509v3 Authority Key Identifier: 
                keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer

            Subject Information Access: 
                1.3.6.1.5.5.7.48.11 - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/UL_CqmpCHS3raFxT7ImdbFpcp8U.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0#0.....0.....].......0
....0....*.7.
    Signature Algorithm: sha256WithRSAEncryption
         66:a8:1e:67:0f:5f:e3:3d:22:d4:3d:0f:eb:8b:88:6d:75:34:
         07:b8:fa:6e:44:44:2c:99:ea:17:5c:ae:68:4a:f4:dd:8f:be:
         02:92:0b:bd:38:01:3a:d8:f4:44:eb:cd:b1:b9:bf:8d:31:20:
         17:b3:a7:62:43:67:9c:b1:44:1d:7a:4b:f0:19:1b:8b:56:6a:
         2e:f6:74:40:4e:e7:5d:22:74:b3:f0:21:23:72:89:60:5b:74:
         b8:af:84:87:62:fb:e8:96:9f:f1:43:92:75:57:94:e3:68:56:
         a8:b8:e6:cd:41:93:67:dd:f0:73:00:66:1a:6d:d0:ed:f9:66:
         91:60:3e:9b:22:49:65:0f:96:68:61:2b:37:47:af:97:f8:79:
         54:b4:e2:8c:a2:e6:d6:2c:75:d0:7a:cd:f5:dd:08:c6:65:e7:
         6a:20:8c:73:4c:9d:b8:d3:86:9e:b5:7a:b8:74:7f:e0:ca:30:
         eb:43:c4:a3:e2:c8:85:77:5c:c9:70:25:8b:58:70:6e:8b:0a:
         8f:cf:87:37:e5:d8:d0:f3:c0:74:65:39:c2:28:d0:16:31:3b:
         6d:38:a4:8b:c4:0b:ff:b3:86:7b:8e:1e:0c:bd:ea:8a:5f:1b:
         2b:dc:10:a6:6c:a5:55:da:77:b9:1f:a7:56:85:64:77:9a:23:
         5d:94:1b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:27:02 2021 by LibreSSL & rpki-client.