Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/96nOojZ8cFg9WSSWAUtm7m-0nI0.roa (download)

Subject key identifier:   F7:A9:CE:A2:36:7C:70:58:3D:59:24:96:01:4B:66:EE:6F:B4:9C:8D 
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
asID:                     AS202085
Prefixes:
    1: 213.252.216.0/22 maxlen: 22
    2: 213.252.221.0/24 maxlen: 24
    3: 213.252.211.0/24 maxlen: 24
    4: 213.252.212.0/22 maxlen: 22

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/96nOojZ8cFg9WSSWAUtm7m-0nI0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130729674 (0x7cac6ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Dec  9 07:56:02 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f7a9cea2367c70583d592496014b66ee6fb49c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:12:59:70:bb:32:f3:6e:5d:b2:1d:e1:55:50:
                    eb:93:bb:48:12:6e:91:e3:3f:25:df:f2:a7:8f:9d:
                    17:3c:48:67:fa:78:65:6f:40:d6:cc:28:fe:35:32:
                    16:f6:73:b7:83:ba:ae:df:cf:15:3a:f0:a5:68:0b:
                    76:d3:42:d1:80:0a:a8:63:c2:78:d3:8a:2d:6a:bc:
                    21:db:29:13:7a:10:6f:46:96:b9:a3:e4:cd:2f:1f:
                    19:fc:93:dd:f7:e9:68:64:87:0b:64:b5:26:e7:fc:
                    2a:13:a2:e3:35:ce:15:ef:15:1d:98:a2:68:d1:0c:
                    af:3c:ca:6f:c0:eb:d7:5c:17:bb:82:40:13:97:3d:
                    32:3b:60:79:54:c5:47:8f:6b:07:d5:90:74:e4:fb:
                    77:e0:1e:15:e0:f3:44:16:f4:f6:ed:f6:06:1f:8b:
                    93:ea:c5:71:3f:23:a2:22:7e:a5:40:d1:78:37:ad:
                    19:2a:cb:26:cf:bf:a0:18:53:c2:23:20:16:25:e9:
                    fe:bd:15:84:c7:9b:83:b4:ef:bd:54:76:61:e2:88:
                    53:e6:68:ab:78:d1:d2:f8:5f:d4:50:05:e4:33:e4:
                    72:3e:29:57:03:38:d4:b7:03:5e:ca:6f:d5:dd:a5:
                    a2:7d:cb:7a:fb:c7:a9:1d:cc:b9:31:97:74:61:bb:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F7:A9:CE:A2:36:7C:70:58:3D:59:24:96:01:4B:66:EE:6F:B4:9C:8D
            X509v3 Authority Key Identifier: 
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/96nOojZ8cFg9WSSWAUtm7m-0nI0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.252.211.0-213.252.219.255
                  213.252.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ab:a8:5f:4f:fd:19:bc:4e:7c:77:d0:a6:c3:8a:a8:0e:b2:
         cd:ff:ff:26:09:f3:4c:77:11:bb:77:13:b7:b7:20:a9:eb:d6:
         27:0e:19:8c:8a:0f:f7:b3:51:17:c7:03:7e:80:a4:7c:28:5d:
         82:84:8a:59:0e:62:3d:d4:93:2b:f3:1a:1f:21:bd:9d:f6:71:
         a6:28:b4:db:83:05:63:5c:27:d1:59:b4:06:43:b1:e6:79:a4:
         f9:0a:99:ee:5d:be:b4:76:f3:ed:9b:2d:3b:33:6f:ba:34:d3:
         2c:a5:37:7b:7f:bc:d7:04:e1:71:80:5d:db:ea:bd:97:a5:1a:
         62:70:64:03:63:3f:fa:f2:47:63:01:ae:d2:69:99:8e:a8:56:
         22:c3:13:27:7d:23:2c:04:fa:61:5a:1e:14:39:07:f1:48:d5:
         d5:ff:93:ab:81:53:c1:c8:cd:29:e4:93:36:2e:80:13:fa:96:
         39:5a:f1:ba:b3:00:9b:3e:b6:71:88:0e:76:58:9e:9e:ae:82:
         59:06:b4:f0:c3:44:09:98:8b:8b:dd:db:f7:59:e6:35:bb:bb:
         72:00:7d:e4:c4:03:1f:47:8c:d2:32:e6:4f:89:3a:d6:68:c1:
         96:29:10:72:b1:dd:f0:ef:83:1e:a1:ac:ac:d0:17:93:4c:a3:
         a1:34:c1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Dec 9 09:25:17 2021 by LibreSSL & rpki-client.