Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/nlZ6h6lh-gNfvO2nY0RouG1sVxE.roa (download)

Subject key identifier:   9E:56:7A:87:A9:61:FA:03:5F:BC:ED:A7:63:44:68:B8:6D:6C:57:11 
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
asID:                     AS398826
Prefixes:
    1: 104.160.21.0/24 maxlen: 24
    2: 104.160.19.0/24 maxlen: 24
    3: 104.160.20.0/24 maxlen: 24
    4: 104.160.18.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/nlZ6h6lh-gNfvO2nY0RouG1sVxE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360567450 (0x157dd29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
        Validity
            Not Before: Jan  1 14:03:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9e567a87a961fa035fbceda7634468b86d6c5711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e9:a7:29:f9:58:5e:e2:43:b3:e6:b9:61:9a:
                    61:fe:42:06:79:36:2e:64:d8:7a:2c:2c:64:5d:10:
                    f4:24:fb:d3:c9:d3:a5:99:92:59:13:dc:0e:01:75:
                    60:53:b4:89:c2:a8:86:a4:87:ff:e2:20:8d:ce:ea:
                    76:7e:1b:37:0f:f5:03:0a:ca:f9:df:b2:73:72:41:
                    1f:6d:a9:05:8c:c2:92:ef:4c:e7:f7:18:50:f3:6b:
                    fc:24:54:73:3f:78:6c:92:9c:79:c8:42:2d:cf:c9:
                    fe:f4:3d:87:80:88:fa:a0:98:8d:b7:e3:24:1f:39:
                    c2:a2:3b:d3:a1:e4:25:32:00:59:64:63:0b:98:a2:
                    2b:a3:ec:51:7d:9f:98:0c:cd:a0:a6:ce:72:f2:7e:
                    98:2e:c8:c6:ef:dd:aa:9a:43:42:bb:01:0b:03:00:
                    0d:9d:4f:99:6e:c6:e0:2d:fb:7b:3a:77:a8:d8:54:
                    28:f3:bf:fb:40:07:9c:ab:3f:8e:32:38:9b:7c:69:
                    05:bb:1a:c4:2a:0b:49:67:fa:6c:6e:52:c5:cf:c4:
                    72:34:0b:75:28:b3:c2:10:cc:8c:e0:dd:25:55:70:
                    84:70:51:c2:28:23:a4:2b:0d:70:7b:39:68:85:55:
                    f9:8d:f6:ee:88:0b:5e:74:d4:f3:c5:a2:a4:36:92:
                    48:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9E:56:7A:87:A9:61:FA:03:5F:BC:ED:A7:63:44:68:B8:6D:6C:57:11
            X509v3 Authority Key Identifier: 
                keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/nlZ6h6lh-gNfvO2nY0RouG1sVxE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.160.18.0-104.160.21.255

    Signature Algorithm: sha256WithRSAEncryption
         4a:07:43:f4:6e:e2:1a:d3:7f:f4:77:cc:36:a2:16:b2:92:14:
         ac:d2:99:d5:a0:e0:6e:0b:40:ac:05:ca:af:98:5b:1f:1b:56:
         49:d7:e9:97:b2:f9:ce:87:50:d0:72:2e:1d:20:4f:6d:d1:3d:
         66:8c:b1:eb:c2:01:93:4e:c6:99:df:43:05:28:1c:73:ce:7a:
         5f:34:07:f2:28:8a:4d:60:ca:4e:a2:7b:a5:1f:f4:f5:50:44:
         6b:c6:b7:88:c3:5b:d5:d3:f4:0a:49:37:bf:7d:f6:89:76:e9:
         30:90:c3:ca:3a:e7:32:ca:50:3d:42:9f:e3:ed:02:a9:f4:66:
         78:04:64:ac:03:49:b3:3e:cd:fb:0c:7d:91:eb:ec:cf:66:0b:
         04:19:b3:18:41:a7:9e:0d:9e:c9:2a:c4:82:75:d1:aa:83:fa:
         60:67:ff:ad:5c:32:24:76:46:5d:57:07:f8:2d:33:d4:c7:3a:
         09:13:5e:eb:bc:11:97:44:0b:c0:b3:33:db:d9:a4:02:38:02:
         09:89:c5:60:6c:3e:2b:90:0d:2b:99:92:06:96:05:b0:0a:e0:
         c5:65:f6:63:f3:8b:9e:73:da:4f:29:ab:44:44:ca:54:04:00:
         ed:1a:4e:93:19:08:1e:1f:93:a6:2a:77:03:0a:d6:38:db:28:
         6f:f8:4a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 16:59:27 2022 by LibreSSL & rpki-client.