Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/JG4u9NVaHOi_Ti5APA9oG2CQiDc.roa (download)

Subject key identifier:   24:6E:2E:F4:D5:5A:1C:E8:BF:4E:2E:40:3C:0F:68:1B:60:90:88:37 
Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
asID:                     AS25098
Prefixes:
    1: 193.201.70.0/23 (max: 23)
    2: 213.230.192.0/18 (max: 32)
    3: 2a01:70::/32 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/JG4u9NVaHOi_Ti5APA9oG2CQiDc.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348634859 (0x14c7beeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c
        Validity
            Not Before: Jan  1 05:23:36 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=246e2ef4d55a1ce8bf4e2e403c0f681b60908837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:26:53:5f:92:0d:32:32:0f:b8:24:5b:68:1a:
                    8a:c1:99:08:4e:72:eb:2d:c2:19:40:c3:25:1b:53:
                    0d:ff:e9:15:40:ad:23:de:32:3f:8d:07:45:0d:46:
                    b0:f3:ee:de:4a:51:03:58:d9:fb:08:f6:0e:57:58:
                    83:40:09:55:82:5e:9a:2d:1d:fb:16:3e:65:58:7a:
                    5a:ac:fa:fc:35:1b:77:68:73:94:21:8f:c2:c4:1e:
                    5a:bb:93:7d:97:41:83:0c:97:17:0c:21:dd:50:d2:
                    32:87:72:c2:7a:ca:1f:7a:c6:76:af:36:09:88:9d:
                    00:fb:a7:14:25:71:fd:c0:98:f5:7a:1b:c1:b2:d0:
                    fe:b6:bb:38:b9:84:35:44:89:ca:3d:5d:11:36:79:
                    28:b2:2c:d6:35:42:21:43:1d:22:87:59:34:de:51:
                    4b:f8:dd:e4:84:04:82:ed:82:c0:6e:4f:eb:fa:65:
                    49:98:a5:71:cd:09:2e:ab:bc:44:56:d6:3d:01:ff:
                    5a:93:67:0b:c7:2c:73:57:a2:47:7c:91:ed:3c:15:
                    06:18:7c:85:b2:b1:99:9a:39:de:3f:84:e1:70:5c:
                    b7:07:52:e3:10:b9:30:d8:11:da:2f:97:02:a5:36:
                    6d:4a:45:70:b4:53:13:3d:67:40:89:5f:4f:42:fa:
                    0c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                24:6E:2E:F4:D5:5A:1C:E8:BF:4E:2E:40:3C:0F:68:1B:60:90:88:37
            X509v3 Authority Key Identifier: 
                keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/JG4u9NVaHOi_Ti5APA9oG2CQiDc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0#0.....0......F......0
....0....*..p
    Signature Algorithm: sha256WithRSAEncryption
         a2:ac:19:92:e6:d5:1d:9f:02:3e:e6:ae:94:86:66:78:60:c8:
         94:ce:11:77:77:44:ad:d4:b8:0c:4f:09:37:31:70:e6:62:59:
         a9:c9:7d:4d:da:5c:e3:83:96:79:6f:3c:75:2d:a0:d6:52:02:
         9f:6c:65:80:23:03:50:24:42:95:44:bf:8f:d1:11:94:6d:68:
         bc:99:5e:47:8b:f7:29:50:80:bf:5c:53:9e:ca:ce:a1:37:f2:
         50:aa:ac:32:31:dc:72:9f:f6:40:3a:26:cc:25:92:53:2f:08:
         54:a3:a5:80:d8:19:04:55:1d:ba:39:44:26:ae:95:b5:01:ff:
         15:2d:51:83:39:7d:29:2b:88:92:67:69:81:3e:99:f8:08:14:
         80:9d:aa:7a:fa:20:5f:d2:31:3d:58:26:c5:93:3e:0b:58:a5:
         2f:33:cb:33:b4:fc:d6:83:e0:21:4e:7d:7c:2e:ef:25:21:86:
         b5:3e:3f:c7:86:70:a2:81:df:7e:84:7d:ef:b1:5e:7a:cf:4f:
         54:70:34:ed:90:4c:8f:d4:07:73:fd:a4:78:b2:91:d1:65:eb:
         bb:44:d5:05:05:56:0d:2b:d3:92:cd:04:e4:6d:89:65:5c:b6:
         17:8f:b4:24:37:ee:6d:9a:05:8e:19:c8:d9:23:ba:18:ad:9f:
         ae:76:58:a5
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEFMe+6zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MzczYzFmZjU1NDAzZDQ3OTIzNDY0OTNmNzY5ZjhkMDMzYmVmMDJjMB4XDTIxMDEw
MTA1MjMzNloXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjQ2ZTJlZjRkNTVh
MWNlOGJmNGUyZTQwM2MwZjY4MWI2MDkwODgzNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMUmU1+SDTIyD7gkW2gaisGZCE5y6y3CGUDDJRtTDf/pFUCt
I94yP40HRQ1GsPPu3kpRA1jZ+wj2DldYg0AJVYJemi0d+xY+ZVh6Wqz6/DUbd2hz
lCGPwsQeWruTfZdBgwyXFwwh3VDSModywnrKH3rGdq82CYidAPunFCVx/cCY9Xob
wbLQ/ra7OLmENUSJyj1dETZ5KLIs1jVCIUMdIodZNN5RS/jd5IQEgu2CwG5P6/pl
SZilcc0JLqu8RFbWPQH/WpNnC8csc1eiR3yR7TwVBhh8hbKxmZo53j+E4XBctwdS
4xC5MNgR2i+XAqU2bUpFcLRTEz1nQIlfT0L6DIMCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBQkbi701Voc6L9OLkA8D2gbYJCINzAfBgNVHSMEGDAWgBRzc8H/VUA9R5I0
ZJP3afjQM77wLDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2MzUEJfMVZBUFVlU05HU1Q5Mm40MERPLThDdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDgvMWFmZjEwLWRkMjktNDM5Zi04ZDIzLWJjOWE1ZjY2MDVmYy8x
L0pHNHU5TlZhSE9pX1RpNUFQQTlvRzJDUWlEYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgv
MWFmZjEwLWRkMjktNDM5Zi04ZDIzLWJjOWE1ZjY2MDVmYy8xL2MzUEJfMVZBUFVl
U05HU1Q5Mm40MERPLThDdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAcHJRgMEBtXmwDANBAIAAjAHAwUA
KgEAcDANBgkqhkiG9w0BAQsFAAOCAQEAoqwZkubVHZ8CPuaulIZmeGDIlM4Rd3dE
rdS4DE8JNzFw5mJZqcl9Tdpc44OWeW88dS2g1lICn2xlgCMDUCRClUS/j9ERlG1o
vJleR4v3KVCAv1xTnsrOoTfyUKqsMjHccp/2QDomzCWSUy8IVKOlgNgZBFUdujlE
Jq6VtQH/FS1Rgzl9KSuIkmdpgT6Z+AgUgJ2qevogX9IxPVgmxZM+C1ilLzPLM7T8
1oPgIU59fC7vJSGGtT4/x4ZwooHffoR977Fees9PVHA07ZBMj9QHc/2keLKR0WXr
u0TVBQVWDSvTks0E5G2JZVy2F4+0JDfubZoFjhnI2SO6GK2frnZYpQ==
-----END CERTIFICATE-----

Generated at Sun Aug 1 19:11:07 2021 by LibreSSL & rpki-client.