Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/thQgbLPqyLsRz2zJTSTG3BlIfnU.roa (download)

Subject key identifier:   B6:14:20:6C:B3:EA:C8:BB:11:CF:6C:C9:4D:24:C6:DC:19:48:7E:75 
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
asID:                     AS0
Prefixes:
    1: 37.49.232.0/23 (max: 24)
    2: 193.105.232.0/24 (max: 24)
    3: 37.49.236.0/22 (max: 24)
    4: 2001:7f8:54::/48 (max: 64)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/thQgbLPqyLsRz2zJTSTG3BlIfnU.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308868503 (0x1268f597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
        Validity
            Not Before: Jan  1 03:18:08 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b614206cb3eac8bb11cf6cc94d24c6dc19487e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:35:7c:13:c3:cb:c5:86:9d:f4:95:fe:e5:6b:
                    a9:1f:43:d8:1f:08:ea:e3:86:95:8f:7f:31:1f:97:
                    1b:ad:65:9a:29:c1:2b:ed:12:ed:e3:dd:b2:70:01:
                    f6:b4:62:7b:87:02:64:9c:2d:12:f5:40:31:c8:8d:
                    40:b5:c4:d0:7e:cf:b4:4a:4d:15:80:d5:c5:69:82:
                    3e:2e:f4:12:0e:08:73:8b:00:ef:8e:9d:07:41:92:
                    7f:9b:be:06:c1:9b:3d:8b:e6:75:0a:4d:bf:fa:c3:
                    5f:b5:02:f3:f2:43:c4:45:76:83:b3:6f:17:ed:27:
                    c3:0f:f7:3b:32:7e:97:75:f3:d2:07:e9:7e:0c:66:
                    84:44:a0:2c:77:09:8a:44:4a:72:14:52:ec:e7:4d:
                    79:a5:1b:78:01:9c:45:a9:6d:07:c3:c8:2c:ad:5c:
                    aa:a5:55:ee:ca:3d:68:bb:e8:a7:d9:05:30:f7:c4:
                    56:b7:b2:42:2e:7b:77:5a:32:9e:ff:23:c3:88:17:
                    85:19:63:a7:98:ed:27:4e:67:35:a5:81:43:91:ad:
                    38:d3:52:a4:7c:ed:3a:71:bc:9a:98:af:f5:ff:a5:
                    ec:48:6f:75:12:54:57:79:a8:dd:03:86:a1:8f:78:
                    a6:1d:68:5c:3e:2d:3a:be:3d:f2:22:31:84:46:23:
                    28:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B6:14:20:6C:B3:EA:C8:BB:11:CF:6C:C9:4D:24:C6:DC:19:48:7E:75
            X509v3 Authority Key Identifier: 
                keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/thQgbLPqyLsRz2zJTSTG3BlIfnU.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0+0.....0....%1....%1.....i.0.....0.... ....T
    Signature Algorithm: sha256WithRSAEncryption
         ae:88:66:7b:30:c0:3d:bb:a3:b6:3c:15:d5:26:e7:88:91:fc:
         29:2e:8d:b2:89:b5:0f:3b:95:84:f8:ac:a0:1c:eb:da:39:22:
         61:de:8f:08:be:21:66:ab:23:09:7e:d1:8b:cc:41:1e:98:a8:
         bf:6b:13:85:96:8c:01:ab:c2:c3:f4:42:a8:2f:02:5b:d1:f9:
         88:8f:bc:87:c7:88:8d:7f:a6:5b:a3:4c:d4:5f:13:7f:e3:01:
         79:21:07:ce:a1:1a:e0:2a:d3:37:9b:39:eb:48:7d:80:cc:55:
         ee:75:75:da:ac:ff:7f:02:d4:d5:c1:c2:9b:9c:2e:a8:d8:61:
         fa:26:3a:30:7f:0b:b7:6a:2b:45:a2:df:6d:dc:29:48:e9:a0:
         b9:92:ed:80:84:8f:0c:26:a2:75:c7:47:68:ed:9e:57:62:40:
         a1:e6:7d:29:1d:61:d0:04:22:b9:11:c7:6d:49:95:fe:ca:5e:
         5c:61:58:68:56:27:b9:a1:8f:0c:16:df:05:bf:3a:0d:e3:98:
         9a:03:46:77:60:ad:91:00:91:ee:07:24:b7:20:64:31:3e:d7:
         38:e5:b2:f0:9c:9f:de:7d:34:47:78:6b:40:87:3c:bb:0f:10:
         5c:93:99:af:30:1c:c0:f1:e0:a8:5c:55:c1:a0:42:ca:e5:5c:
         ef:9d:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:16:09 2021 by LibreSSL & rpki-client.