Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/vVF7_jfJfrVaFGACFGc45j8ThF4.roa (download)

Subject key identifier:   BD:51:7B:FE:37:C9:7E:B5:5A:14:60:02:14:67:38:E6:3F:13:84:5E 
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
asID:                     AS201411
Prefixes:
    1: 185.70.143.0/24 maxlen: 24
    2: 185.70.140.0/22 maxlen: 23
    3: 185.70.142.0/24 maxlen: 24
    4: 2a05:2a40::/29 maxlen: 48

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/vVF7_jfJfrVaFGACFGc45j8ThF4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350183874 (0x14df61c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
        Validity
            Not Before: Jan  1 06:05:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd517bfe37c97eb55a146002146738e63f13845e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:0d:14:a8:b0:8b:8d:b5:af:25:9a:37:46:
                    0f:e2:52:9f:5b:4f:6f:b5:94:33:6c:50:b7:20:83:
                    eb:18:44:34:75:c1:93:0a:3a:dd:bc:38:4f:f2:ca:
                    c6:23:d5:b9:fa:fa:2e:5d:70:e7:e0:c0:f2:d2:f5:
                    32:ec:7a:e5:01:8c:6a:76:49:b3:5b:b8:24:dc:d1:
                    61:84:19:45:10:99:49:93:a5:93:de:e9:f6:ee:bd:
                    5d:6d:65:3e:aa:55:33:f7:71:3f:d8:a6:66:e8:fc:
                    6a:d3:6d:ae:05:8c:01:0b:ad:c9:4f:42:ff:40:67:
                    90:00:6c:0f:f7:9f:3b:59:13:75:52:f7:88:96:2b:
                    5d:30:30:48:7a:64:d0:58:c7:f8:c9:9d:9c:e4:dc:
                    de:7b:35:76:c4:f2:4d:b7:9f:e0:21:24:42:10:3c:
                    b8:b5:40:00:d9:4c:a6:da:6b:1c:93:77:1b:80:ae:
                    11:c7:f5:ef:51:84:bc:03:9b:b8:57:36:d6:a8:5c:
                    c1:d9:83:8c:23:c7:2d:a9:76:df:21:89:f8:8e:db:
                    8f:b7:06:dd:a6:c8:3b:02:04:2f:61:69:f8:33:a2:
                    63:41:4e:1e:be:37:36:9f:32:f6:00:c5:63:ab:7b:
                    fa:a1:a2:3d:08:05:be:ae:15:4c:f4:2e:ee:23:20:
                    5e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BD:51:7B:FE:37:C9:7E:B5:5A:14:60:02:14:67:38:E6:3F:13:84:5E
            X509v3 Authority Key Identifier: 
                keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/vVF7_jfJfrVaFGACFGc45j8ThF4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.70.140.0/22
                IPv6:
                  2a05:2a40::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:b7:bf:61:ae:d1:9a:c6:a8:45:bb:1e:fe:01:cb:cf:0d:2d:
         85:4a:14:7b:a4:e7:80:ab:84:e2:36:3a:a1:0d:2f:ee:7b:cd:
         06:41:4a:a9:f6:1c:dd:37:0b:96:78:2c:bb:a0:95:13:b1:40:
         c7:b2:a6:81:8c:e4:74:cd:ef:22:73:f8:d8:fa:4b:a2:c9:68:
         c7:13:f0:9b:80:30:2d:78:be:15:e3:db:ee:65:31:c1:fc:42:
         55:a3:b5:58:ae:7b:ea:c3:cc:5a:6f:bd:6d:c9:af:b8:f2:ac:
         54:96:35:6b:e6:29:b4:4a:6a:d2:53:94:f8:e9:0c:2e:a8:28:
         89:5c:36:64:ea:39:0a:69:0a:e1:63:20:19:79:65:a5:78:f9:
         51:26:6e:82:01:8b:3f:55:29:cd:ca:8d:fd:10:c6:74:1f:b6:
         25:e6:91:20:6f:01:39:f4:31:0b:c1:38:23:17:47:1d:c0:57:
         cb:97:06:ad:eb:0c:95:27:6d:64:6d:60:d3:f5:67:70:5d:42:
         6f:da:a4:a1:d8:3a:fc:38:00:8a:d2:14:c8:80:d5:54:12:09:
         5f:f8:c4:6e:b0:62:21:b5:e4:55:97:e2:f8:0c:89:60:6f:b5:
         b8:0c:b7:a0:a5:65:68:ad:97:fc:8a:95:b0:ac:8f:eb:37:1c:
         5b:fe:18:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 12:59:37 2022 by LibreSSL & rpki-client.