Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/IHqFpUM5OyBAfJPFd3IiKkgc7Mc.roa (download)

Subject key identifier:   20:7A:85:A5:43:39:3B:20:40:7C:93:C5:77:72:22:2A:48:1C:EC:C7 
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
asID:                     AS202085
Prefixes:
    1: 213.252.216.0/22 (max: 22)
    2: 213.252.212.0/22 (max: 22)
    3: 213.252.211.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/IHqFpUM5OyBAfJPFd3IiKkgc7Mc.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78823702 (0x4b2c116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Jan  1 02:39:52 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=207a85a543393b20407c93c57772222a481cecc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cc:b7:69:17:65:bb:16:7b:d1:78:e3:63:4b:
                    b9:e0:09:be:21:18:19:5d:43:68:b8:ff:d1:59:fb:
                    87:38:06:04:b3:59:1c:1e:f1:f3:e6:23:e6:03:be:
                    f0:82:43:34:d7:02:9b:e0:6e:08:f2:b5:52:07:55:
                    ac:ac:b0:a1:3e:03:6b:d6:2a:27:4a:e4:4c:08:f1:
                    5e:1b:76:01:9d:78:89:32:04:45:43:99:d4:95:7c:
                    a6:d6:14:11:dd:c8:fe:cb:81:b2:f3:e0:10:4f:9c:
                    d1:9e:d2:b5:b6:94:ea:9e:c2:14:7c:be:88:d3:4f:
                    a3:7b:c7:e0:cd:8d:f1:19:5e:7a:53:19:9b:e7:e5:
                    98:38:09:d7:ce:0b:9e:65:0b:9a:88:22:1c:88:e0:
                    05:bb:b3:40:ed:6e:8b:ba:3a:45:18:82:dc:76:36:
                    b3:fb:ae:5c:21:d8:cf:ba:9e:18:0b:73:a5:7e:a9:
                    f4:4c:ab:de:72:85:f9:2a:ae:d4:69:6d:70:0c:4a:
                    2b:51:16:da:f5:88:79:dd:6d:03:f0:ab:79:9d:77:
                    6c:b0:55:d5:87:f7:da:aa:c7:6a:c2:2b:dc:38:73:
                    65:cb:1e:cd:01:a4:fb:cd:bc:88:c6:e2:b9:96:89:
                    f9:4f:00:7f:57:bb:80:2f:ac:f4:c7:3e:c6:f3:e2:
                    94:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                20:7A:85:A5:43:39:3B:20:40:7C:93:C5:77:72:22:2A:48:1C:EC:C7
            X509v3 Authority Key Identifier: 
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/IHqFpUM5OyBAfJPFd3IiKkgc7Mc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.252.211.0-213.252.219.255

    Signature Algorithm: sha256WithRSAEncryption
         6a:64:cb:93:67:5e:41:13:e6:d6:17:32:0e:74:e2:60:90:cf:
         39:73:e5:1e:47:98:41:c2:12:0f:03:cc:d9:ae:d7:48:49:8e:
         2a:a5:41:44:88:06:87:96:40:32:d8:44:33:99:b4:a3:26:a6:
         21:98:27:6a:a4:de:b2:36:b9:1b:09:61:02:89:28:e3:ea:8b:
         33:a6:8d:85:50:16:86:fd:7c:d5:0d:c9:db:ac:cc:af:6c:66:
         45:5e:9a:b2:b0:69:21:5b:18:19:24:17:8f:b2:19:d8:ce:18:
         c7:2c:ca:80:e4:86:c8:3f:f6:56:eb:77:b7:47:dc:88:16:8d:
         d9:3b:ae:96:58:a9:9c:86:35:dc:0c:92:e3:ce:9d:34:3c:c6:
         a9:30:25:b1:04:a1:2c:61:b0:67:c9:eb:83:d6:92:a0:a3:26:
         aa:4f:ae:c9:e9:eb:93:32:87:40:00:50:0e:e5:a0:02:34:ec:
         93:2d:f2:b2:2f:7f:74:f9:cf:a6:65:c9:b9:b3:97:62:fa:65:
         27:bb:0b:d7:2a:56:55:16:90:15:f3:6b:45:40:51:0b:f0:5c:
         48:57:c5:d9:82:33:89:62:1b:73:4a:07:d6:e4:14:f8:1d:5c:
         c8:8d:2b:20:28:97:68:e6:77:ee:14:19:1e:59:c8:b4:1a:f5:
         f9:1a:b6:8f
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEBLLBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MGRkODFhODMzZDliMDQzYzdmZmQ2MzVhNTk4N2Y1MzY5NzExODBkMB4XDTIxMDEw
MTAyMzk1MloXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjA3YTg1YTU0MzM5
M2IyMDQwN2M5M2M1Nzc3MjIyMmE0ODFjZWNjNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN7Mt2kXZbsWe9F442NLueAJviEYGV1DaLj/0Vn7hzgGBLNZ
HB7x8+Yj5gO+8IJDNNcCm+BuCPK1UgdVrKywoT4Da9YqJ0rkTAjxXht2AZ14iTIE
RUOZ1JV8ptYUEd3I/suBsvPgEE+c0Z7StbaU6p7CFHy+iNNPo3vH4M2N8RleelMZ
m+flmDgJ184LnmULmogiHIjgBbuzQO1ui7o6RRiC3HY2s/uuXCHYz7qeGAtzpX6p
9Eyr3nKF+Squ1GltcAxKK1EW2vWIed1tA/CreZ13bLBV1Yf32qrHasIr3DhzZcse
zQGk+828iMbiuZaJ+U8Af1e7gC+s9Mc+xvPilIUCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBQgeoWlQzk7IEB8k8V3ciIqSBzsxzAfBgNVHSMEGDAWgBTw3YGoM9mwQ8f/
1jWlmH9TaXEYDTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhOMkJxRFBac0VQSF85WTFwWmhfVTJseEdBMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmEvYThlYmU0LWQwYjMtNGU3ZC1hZjI1LTA0NjgwNDI0ODZkYy8x
L0lIcUZwVU01T3lCQWZKUEZkM0lpS2tnYzdNYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEv
YThlYmU0LWQwYjMtNGU3ZC1hZjI1LTA0NjgwNDI0ODZkYy8xLzhOMkJxRFBac0VQ
SF85WTFwWmhfVTJseEdBMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQA1fzTAwQC1fzYMA0GCSqGSIb3
DQEBCwUAA4IBAQBqZMuTZ15BE+bWFzIOdOJgkM85c+UeR5hBwhIPA8zZrtdISY4q
pUFEiAaHlkAy2EQzmbSjJqYhmCdqpN6yNrkbCWECiSjj6oszpo2FUBaG/XzVDcnb
rMyvbGZFXpqysGkhWxgZJBePshnYzhjHLMqA5IbIP/ZW63e3R9yIFo3ZO66WWKmc
hjXcDJLjzp00PMapMCWxBKEsYbBnyeuD1pKgoyaqT67J6euTModAAFAO5aACNOyT
LfKyL390+c+mZcm5s5di+mUnuwvXKlZVFpAV82tFQFEL8FxIV8XZgjOJYhtzSgfW
5BT4HVzIjSsgKJdo5nfuFBkeWci0GvX5GraP
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:34:43 2021 by LibreSSL & rpki-client.