Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cSmD-qIDmLCP3tP7YFbYqVj7_Jc.roa (download)

Subject key identifier:   71:29:83:FA:A2:03:98:B0:8F:DE:D3:FB:60:56:D8:A9:58:FB:FC:97 
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
asID:                     AS60117
Prefixes:
    1: 194.87.207.0/24 (max: 24)
    2: 194.135.30.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cSmD-qIDmLCP3tP7YFbYqVj7_Jc.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153192622 (0x92188ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jan  1 02:54:31 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=712983faa20398b08fded3fb6056d8a958fbfc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:7d:81:ad:c1:e2:69:f9:23:9b:b0:66:ca:
                    1f:1c:a9:3f:a8:bf:59:29:1f:97:31:79:f9:fa:2c:
                    0e:3d:a4:85:d5:79:31:69:a5:ea:83:75:8b:c8:3c:
                    98:fd:22:c4:ee:a2:01:6c:5a:16:7c:2b:61:cf:7a:
                    37:b9:a0:fe:03:35:3a:41:e7:0f:1f:13:65:e4:df:
                    c9:a7:d0:16:96:96:11:b9:40:f5:01:a1:f4:97:d1:
                    62:84:85:f6:2a:7b:07:b2:57:36:a8:fa:3c:18:ad:
                    29:4a:9b:ca:66:e4:bb:90:a8:20:62:e8:cb:b5:42:
                    6a:4f:12:36:2c:c8:0e:2d:b7:2a:de:af:cd:e6:01:
                    b8:a8:48:c9:c0:84:ce:15:23:32:f4:85:cb:93:7a:
                    66:7c:f9:a4:e0:c2:ac:0c:f1:2f:70:a8:3a:8d:12:
                    75:8c:5b:5d:f5:f1:bd:71:7b:5d:01:ca:40:a5:43:
                    cc:34:c9:8c:d7:ea:43:4b:a1:8d:b4:c0:1e:6a:5c:
                    6d:88:b9:51:87:b2:e1:e1:95:12:f4:c8:b7:af:87:
                    b8:32:a4:ed:10:bc:c8:af:0f:6a:ec:01:ef:7d:53:
                    40:5a:88:f7:50:d4:0c:c0:6d:db:30:38:4b:54:e5:
                    b5:ef:86:7a:24:0d:6e:03:3a:fe:b6:82:b3:b5:e2:
                    d7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                71:29:83:FA:A2:03:98:B0:8F:DE:D3:FB:60:56:D8:A9:58:FB:FC:97
            X509v3 Authority Key Identifier: 
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cSmD-qIDmLCP3tP7YFbYqVj7_Jc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....W.......
    Signature Algorithm: sha256WithRSAEncryption
         7e:3d:d0:9d:b4:ed:a4:de:f2:ab:21:5b:1b:2b:78:c1:c8:2d:
         11:50:5e:66:38:6d:bc:00:e1:cf:3a:c7:12:13:2e:cb:33:f1:
         6f:cd:b4:f9:0b:70:c9:97:e8:64:d4:ff:ea:7e:e2:04:b7:a9:
         34:13:f5:2e:34:7b:aa:7d:4c:25:9e:bf:e2:c6:37:89:77:96:
         11:4e:e4:85:f6:92:9c:74:39:79:4e:27:0b:b1:01:52:37:6e:
         0c:af:80:58:11:77:ba:4a:df:f9:5d:e6:a2:16:ba:d3:11:cc:
         d7:2c:61:d8:5f:18:3d:d4:23:ee:eb:a1:09:75:73:75:56:37:
         8d:c1:43:a9:82:ff:c4:9a:aa:44:46:36:f1:31:ff:fc:66:b8:
         aa:05:88:56:fd:fd:52:44:3c:6f:6b:c5:35:e6:2e:06:67:da:
         b6:4e:42:f0:44:5e:0b:f6:a3:16:90:6f:73:1d:de:9c:bf:e5:
         e9:b1:a2:d5:69:00:23:a9:d8:ee:8d:c1:2a:c0:0a:24:f0:75:
         d2:43:e9:f1:5e:17:5f:a7:b4:0b:af:c8:21:d7:62:2b:a8:10:
         a3:02:04:57:33:94:89:b7:d7:1d:d9:67:46:02:1c:d9:f0:5e:
         96:38:21:bb:24:50:c7:88:1e:99:e3:ce:f8:85:08:5a:fd:b1:
         11:92:94:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Aug 1 21:39:46 2021 by LibreSSL & rpki-client.