Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Ie-1K6_zyX52ZeHfP9GgPpbeJEg.roa (download)

Subject key identifier:   21:EF:B5:2B:AF:F3:C9:7E:76:65:E1:DF:3F:D1:A0:3E:96:DE:24:48 
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
asID:                     AS199527
Prefixes:
    1: 213.252.242.0/24 maxlen: 24
    2: 213.252.251.0/24 maxlen: 24
    3: 213.252.253.0/24 maxlen: 24
    4: 213.252.250.0/24 maxlen: 24
    5: 213.252.210.0/24 maxlen: 24
    6: 213.252.209.0/24 maxlen: 24
    7: 213.252.208.0/24 maxlen: 24
    8: 2a00:f501:a001::/48 maxlen: 48

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Ie-1K6_zyX52ZeHfP9GgPpbeJEg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129020983 (0x7b0b437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Nov 29 13:22:26 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=21efb52baff3c97e7665e1df3fd1a03e96de2448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b8:01:19:0c:01:f8:87:e1:8d:19:1f:88:dc:
                    93:0e:c7:a3:6d:93:a0:c4:3c:05:8e:65:25:7e:d0:
                    05:61:6f:a8:78:dc:89:64:53:2b:25:94:2b:83:a6:
                    13:55:e2:3d:f6:ce:df:47:49:dd:8a:5e:17:e1:8d:
                    8f:0f:be:65:1e:c5:dc:82:0f:9c:6c:49:3f:6a:fa:
                    63:8a:20:3a:7d:a4:81:79:c0:12:5d:fb:18:48:0c:
                    64:d7:14:d3:dc:0b:7d:cb:88:e2:2f:3c:1f:82:7b:
                    b3:65:6a:8a:fe:c0:9c:5d:93:1d:a3:f1:a3:c1:0e:
                    c6:56:ff:f4:f7:c3:d7:2d:32:b1:3c:0e:ca:cd:ed:
                    91:d9:cc:19:97:8e:a1:52:d5:43:ec:38:0b:7d:2d:
                    fb:19:2f:d1:dd:d1:96:de:f4:93:f6:ef:8a:2b:de:
                    ab:c0:d8:39:33:fd:12:ac:98:d9:3f:0b:08:e5:78:
                    d5:ad:06:28:f3:bc:2a:da:7b:b7:5b:16:e6:0a:0a:
                    7b:21:ad:82:bc:5b:47:31:27:7d:9c:59:4c:88:d9:
                    2d:4b:b8:e2:da:0f:ab:b1:bd:35:ba:98:6b:00:71:
                    8c:fa:c3:33:8d:78:55:d8:35:95:bc:38:51:e8:53:
                    1c:7b:46:60:a3:b3:d2:0f:65:53:88:2b:18:4b:39:
                    70:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                21:EF:B5:2B:AF:F3:C9:7E:76:65:E1:DF:3F:D1:A0:3E:96:DE:24:48
            X509v3 Authority Key Identifier: 
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Ie-1K6_zyX52ZeHfP9GgPpbeJEg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.252.208.0-213.252.210.255
                  213.252.242.0/24
                  213.252.250.0/23
                  213.252.253.0/24
                IPv6:
                  2a00:f501:a001::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:d7:2f:04:90:a8:8f:37:5f:76:06:fc:0f:2c:04:95:21:a2:
         14:9a:52:a0:9f:01:e5:4c:71:27:0f:b3:fe:f2:b3:42:20:91:
         ec:f3:0e:6a:0f:bb:b7:ee:83:84:61:bc:98:98:7c:4f:38:a0:
         12:59:5c:eb:84:e1:de:e7:17:2a:17:83:e2:c1:4b:d3:29:50:
         95:ec:78:60:57:2b:c0:e3:47:54:d5:c8:55:55:3e:83:d8:1a:
         da:44:f1:db:8a:1d:ef:db:ac:cf:56:e8:8a:c8:3f:52:83:7c:
         73:4e:fe:a0:d0:91:46:86:21:00:36:e0:45:b8:08:bd:36:87:
         71:16:92:4d:43:b7:32:a2:94:d9:2f:49:68:ad:32:9e:43:58:
         b8:07:ab:bf:b3:4d:28:c3:71:9a:35:2d:18:8d:2b:62:1a:83:
         03:ae:d5:6d:09:46:a1:15:3a:e5:24:6a:3c:4c:e0:5c:94:14:
         7a:e5:e0:d8:68:df:68:57:f6:94:6d:42:74:30:0d:a8:bd:67:
         b1:f4:e4:c4:f6:05:fd:b9:68:35:d1:1a:7f:74:6d:84:04:f5:
         fe:ea:70:e2:80:cf:59:13:04:cc:00:4f:0d:96:44:e2:a3:07:
         72:c3:e0:b8:a0:46:b8:c7:af:cc:c5:5c:70:61:30:86:5b:d5:
         5e:89:f7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Nov 29 14:48:59 2021 by LibreSSL & rpki-client.