Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/xkItS2Keb3H1TlAFrZdqGRo2WdI.roa (download)

Subject key identifier:   C6:42:2D:4B:62:9E:6F:71:F5:4E:50:05:AD:97:6A:19:1A:36:59:D2 
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
asID:                     AS15830
Prefixes:
    1: 185.69.250.0/24 (max: 24)
    2: 185.69.249.0/24 (max: 24)
    3: 185.69.248.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/xkItS2Keb3H1TlAFrZdqGRo2WdI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27136643 (0x19e1283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
        Validity
            Not Before: Jan  1 00:48:14 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=c6422d4b629e6f71f54e5005ad976a191a3659d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:62:bd:31:d4:0b:bb:3a:2c:1f:2d:c3:a9:25:
                    b9:ed:10:8e:ff:98:87:a4:dd:06:ba:8b:0d:a6:bd:
                    d3:69:6f:c9:ae:2f:3a:e2:32:95:62:b3:88:d7:dd:
                    73:4d:62:9b:91:ad:80:46:59:4b:16:d8:0e:b5:29:
                    dd:ea:d8:4e:3f:53:0d:b5:bb:ec:5e:3e:2d:2f:87:
                    8a:fd:3b:fc:b9:92:b4:81:c4:27:a7:74:2f:19:c0:
                    4f:21:d6:4f:c5:30:3b:0c:87:29:70:4b:cb:7b:3f:
                    6a:49:c8:4b:bf:1d:79:ac:fd:05:5f:24:b0:28:1d:
                    e0:72:a8:43:2e:1b:ae:07:1e:dd:f3:7b:d8:73:9d:
                    85:ca:c6:3a:77:8c:27:c0:4a:85:9e:66:ce:52:2e:
                    85:1f:73:8e:d4:dd:4c:7b:2c:7d:43:94:d5:e6:52:
                    b9:98:90:3f:9f:17:26:f1:cc:4c:3f:de:33:47:c6:
                    a0:c3:4f:43:ba:28:96:c2:5f:5b:73:f9:2a:d6:27:
                    9c:1a:68:b5:f4:13:d6:2d:e5:ec:65:a3:ea:53:b4:
                    83:0e:c2:de:30:ae:1c:e4:f9:0e:eb:49:54:77:e3:
                    f5:ea:36:ba:6e:04:38:1d:cc:dc:73:85:a9:cb:6f:
                    6a:fe:90:3a:1b:fe:1a:ed:25:05:b7:22:30:df:c2:
                    20:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C6:42:2D:4B:62:9E:6F:71:F5:4E:50:05:AD:97:6A:19:1A:36:59:D2
            X509v3 Authority Key Identifier: 
                keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/xkItS2Keb3H1TlAFrZdqGRo2WdI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.0.....E.....E.
    Signature Algorithm: sha256WithRSAEncryption
         8d:76:ef:5a:6a:64:7b:cb:50:ac:c4:f2:82:80:f9:97:03:63:
         87:89:a7:f3:79:53:e5:e5:3a:28:fc:7c:71:24:13:97:70:fe:
         d5:1f:48:b3:8b:c7:f4:e8:e0:67:c3:2b:d4:d1:dd:7f:27:86:
         36:cd:53:0f:3e:de:45:a4:d4:05:26:91:74:a7:c1:1f:b5:6e:
         e9:f4:a0:7d:4a:e6:3d:75:da:8e:ff:cb:be:ca:22:a6:bf:98:
         b9:03:93:84:45:e9:65:b6:d3:e1:27:a4:55:9e:50:68:41:e4:
         d3:0e:9c:a6:50:b7:88:f2:d7:13:7b:c7:f3:57:a7:77:52:54:
         11:67:7f:ad:da:28:dc:27:e9:47:db:29:21:82:8e:e1:e9:6d:
         6e:0a:68:8c:4e:92:84:f5:27:27:f1:fd:21:83:78:fe:cc:2a:
         da:ec:1d:07:ef:cb:5a:4e:30:81:59:b1:76:05:e4:7e:99:e8:
         01:e2:05:d6:9e:48:ee:a4:92:67:17:95:36:5f:3a:89:33:2a:
         42:36:d1:4f:2e:d6:ad:b3:a2:27:fb:44:ac:54:4e:53:e3:e6:
         f3:02:4c:be:7c:d7:09:31:14:26:f9:f7:e5:87:54:04:df:41:
         f9:c1:be:84:13:0f:dc:a3:b0:49:8e:8a:5f:42:28:2e:22:2e:
         5a:bc:82:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jul 31 11:34:47 2021 by LibreSSL & rpki-client.