Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/QNyIGbqzDVao_gI9-jljcK4__5A.roa (download)

Subject key identifier:   40:DC:88:19:BA:B3:0D:56:A8:FE:02:3D:FA:39:63:70:AE:3F:FF:90 
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
asID:                     AS398826
Prefixes:
    1: 104.160.21.0/24 (max: 24)
    2: 104.160.19.0/24 (max: 24)
    3: 104.160.20.0/24 (max: 24)
    4: 104.160.18.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/QNyIGbqzDVao_gI9-jljcK4__5A.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304304695 (0x12235237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
        Validity
            Not Before: Jan  1 06:54:02 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=40dc8819bab30d56a8fe023dfa396370ae3fff90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dd:60:ff:b5:97:d3:8f:22:9a:e7:93:a7:d4:
                    f7:f8:4d:4a:86:48:db:d9:72:b3:ec:dc:dc:3e:ed:
                    39:83:bd:01:ac:d9:9d:93:21:71:b9:0c:1b:78:fa:
                    b8:7c:8b:ab:17:e1:b4:37:69:72:dc:ac:65:cb:57:
                    18:b0:4c:48:98:e5:f9:49:4d:f3:58:53:f3:7b:79:
                    a4:e6:c9:78:80:93:b0:7d:03:2b:fb:8f:9b:41:8e:
                    dc:e6:d1:01:ac:bc:89:a2:ea:c7:c6:21:f3:ce:03:
                    68:50:a9:52:36:2f:5e:1c:cf:cb:9f:48:70:d0:5b:
                    aa:1f:56:d1:95:5d:96:ab:7a:d7:6a:0e:ea:41:63:
                    86:41:14:fd:0f:5f:21:b9:7f:fe:9a:72:51:55:f5:
                    72:4b:29:58:d4:a0:2f:bf:51:1b:75:34:3a:29:32:
                    45:64:cc:66:ec:f2:68:1d:6f:dd:cf:77:47:cb:27:
                    49:06:f3:8c:02:56:f0:49:7b:f3:a3:76:2c:67:e7:
                    7e:49:6f:43:08:02:21:fd:70:01:06:bd:08:a7:5a:
                    65:e9:0f:6a:26:d1:3c:03:b1:7d:ba:89:4d:81:37:
                    5d:5f:63:6f:24:b3:94:d6:23:c1:9d:c0:e3:b3:bd:
                    d4:12:0b:1f:6f:c0:80:ba:55:3b:ac:02:19:ec:73:
                    04:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                40:DC:88:19:BA:B3:0D:56:A8:FE:02:3D:FA:39:63:70:AE:3F:FF:90
            X509v3 Authority Key Identifier: 
                keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/QNyIGbqzDVao_gI9-jljcK4__5A.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.160.18.0-104.160.21.255

    Signature Algorithm: sha256WithRSAEncryption
         5b:6c:ce:ea:8c:7e:68:1b:24:60:3b:92:b9:67:a2:15:a0:b3:
         eb:42:a8:fc:8b:da:d4:f8:86:be:4a:d5:98:05:a5:b0:5d:57:
         84:4e:f0:71:9c:1e:2f:74:56:81:81:8d:b5:f1:72:7c:07:dd:
         14:98:bb:3a:b3:39:63:95:63:27:b9:48:92:4b:45:99:7f:93:
         1c:db:e1:03:ef:38:44:ed:06:7a:7a:a4:63:d5:21:c6:c2:01:
         96:be:51:5b:f3:a0:e3:f9:82:0f:fa:da:39:4f:f1:90:0c:9b:
         7b:1d:ca:2e:56:7c:3c:c6:8c:c1:fa:75:38:76:47:e2:60:e2:
         d6:5d:b9:84:24:36:8f:ac:8d:68:f2:6e:6b:9d:0a:65:44:86:
         27:4f:c3:c7:7a:fa:9f:35:ea:35:96:59:07:8f:c9:bd:16:ac:
         49:83:88:ef:59:0f:62:a4:88:c7:e8:2c:f1:f0:c9:fc:7b:0b:
         5d:5e:03:68:8f:71:52:c7:91:b8:28:9e:ce:f7:e4:bf:18:e6:
         42:cf:5e:0e:b4:c3:97:f6:2e:2b:96:86:e1:f0:a5:b0:f0:e4:
         c5:2d:06:69:f5:89:78:40:56:21:9c:c8:75:01:c0:4c:a7:a0:
         1e:44:fa:7a:16:b4:75:08:9d:58:68:b9:c4:46:98:19:e1:1d:
         14:fc:f1:76
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEEiNSNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MGYzNzZkZjVmOWVmNDg3YzgyYjMxYTg3NWM2YTQ5NmQ3OWNhMGQ3MB4XDTIxMDEw
MTA2NTQwMloXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDBkYzg4MTliYWIz
MGQ1NmE4ZmUwMjNkZmEzOTYzNzBhZTNmZmY5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANvdYP+1l9OPIprnk6fU9/hNSoZI29lys+zc3D7tOYO9AazZ
nZMhcbkMG3j6uHyLqxfhtDdpctysZctXGLBMSJjl+UlN81hT83t5pObJeICTsH0D
K/uPm0GO3ObRAay8iaLqx8Yh884DaFCpUjYvXhzPy59IcNBbqh9W0ZVdlqt612oO
6kFjhkEU/Q9fIbl//ppyUVX1ckspWNSgL79RG3U0OikyRWTMZuzyaB1v3c93R8sn
SQbzjAJW8El786N2LGfnfklvQwgCIf1wAQa9CKdaZekPaibRPAOxfbqJTYE3XV9j
bySzlNYjwZ3A47O91BILH2/AgLpVO6wCGexzBGMCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBRA3IgZurMNVqj+Aj36OWNwrj//kDAfBgNVHSMEGDAWgBSA83bfX570h8gr
Mah1xqSW15yg1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dQTjIzMS1lOUlmSUt6R29kY2FrbHRlY29OYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDIvNzk1ZGVkLWZjZGYtNDdjZi1hZjgzLWE0YmMyODE2NjQzYS8x
L1FOeUlHYnF6RFZhb19nSTktamxqY0s0X181QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIv
Nzk1ZGVkLWZjZGYtNDdjZi1hZjgzLWE0YmMyODE2NjQzYS8xL2dQTjIzMS1lOUlm
SUt6R29kY2FrbHRlY29OYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQBaKASAwQBaKAUMA0GCSqGSIb3
DQEBCwUAA4IBAQBbbM7qjH5oGyRgO5K5Z6IVoLPrQqj8i9rU+Ia+StWYBaWwXVeE
TvBxnB4vdFaBgY218XJ8B90UmLs6szljlWMnuUiSS0WZf5Mc2+ED7zhE7QZ6eqRj
1SHGwgGWvlFb86Dj+YIP+to5T/GQDJt7HcouVnw8xozB+nU4dkfiYOLWXbmEJDaP
rI1o8m5rnQplRIYnT8PHevqfNeo1llkHj8m9FqxJg4jvWQ9ipIjH6Czx8Mn8ewtd
XgNoj3FSx5G4KJ7O9+S/GOZCz14OtMOX9i4rlobh8KWw8OTFLQZp9Yl4QFYhnMh1
AcBMp6AeRPp6FrR1CJ1YaLnERpgZ4R0U/PF2
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:03:07 2021 by LibreSSL & rpki-client.