Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/NX7uamu0ExV9BtAVcIpfDBzGruM.roa (download)

Subject key identifier:   35:7E:EE:6A:6B:B4:13:15:7D:06:D0:15:70:8A:5F:0C:1C:C6:AE:E3 
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
asID:                     AS211614
Prefixes:
    1: 213.252.243.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/NX7uamu0ExV9BtAVcIpfDBzGruM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130826801 (0x7cc4231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Dec  9 07:56:03 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=357eee6a6bb413157d06d015708a5f0c1cc6aee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:ce:dc:7b:77:9f:85:8b:94:c9:09:65:69:
                    d6:39:7d:98:fe:0d:ea:8d:d9:06:0b:d3:60:8e:18:
                    bf:40:a9:99:30:a7:a4:fb:c1:28:a3:f9:ca:e6:b9:
                    c3:fc:db:9e:b1:77:72:dc:32:7d:35:fc:11:1c:0b:
                    73:44:d6:4a:81:3f:27:96:35:24:c4:f1:30:6a:cb:
                    05:9d:0a:e5:fc:db:c7:8d:50:9a:f5:ed:6c:16:87:
                    01:a2:42:fd:96:cb:d8:11:e0:4d:f9:69:11:cc:54:
                    cc:a8:e5:f3:32:2c:2f:fb:09:58:77:d2:37:ae:78:
                    1b:16:ac:aa:ae:8b:3f:c6:99:55:73:cf:0d:dd:91:
                    e2:6f:2e:30:a3:b2:8c:59:17:8f:55:ca:e8:25:6f:
                    32:1f:98:39:27:20:f1:61:69:db:26:02:83:72:dc:
                    64:8f:cc:2b:b4:6f:08:fa:b8:fc:50:1e:67:e7:34:
                    62:b7:6d:6d:2b:9b:ba:94:8c:6e:58:68:23:04:fa:
                    29:8c:2c:1e:f7:ea:fe:20:0a:ad:b5:76:b4:39:f1:
                    06:a9:2d:c8:0c:db:82:f7:51:0f:32:2b:12:fa:24:
                    87:0e:99:f6:54:1f:75:48:53:6b:ac:b0:28:b7:a1:
                    c8:e0:53:89:87:b4:ac:52:ed:36:db:a1:08:43:ef:
                    a3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                35:7E:EE:6A:6B:B4:13:15:7D:06:D0:15:70:8A:5F:0C:1C:C6:AE:E3
            X509v3 Authority Key Identifier: 
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/NX7uamu0ExV9BtAVcIpfDBzGruM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.252.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:6e:93:e1:72:da:06:a4:ae:0c:5b:bf:b1:db:3b:b4:79:3e:
         a9:71:62:d6:dd:dc:c8:4a:5f:1c:53:6f:3f:04:be:d3:bd:e0:
         5a:91:72:f7:94:28:56:5d:ed:2a:aa:45:93:04:83:57:82:ba:
         35:31:09:d5:88:2a:19:d6:96:07:59:33:0b:37:e3:53:4b:d0:
         b9:dc:7d:bf:d7:16:99:d5:0a:7a:3a:bc:98:a8:a6:d8:98:3d:
         72:90:a9:53:31:8e:1e:b0:90:01:1c:d3:03:2d:71:d7:ae:a7:
         5c:c5:aa:59:8d:67:d0:bb:00:ac:d8:37:ca:ff:e1:85:0d:73:
         79:39:fc:8f:23:04:23:bc:9e:68:ba:24:50:cc:db:fb:98:e1:
         d1:3c:e4:8c:57:08:f5:d6:4a:f9:78:e9:00:42:fd:aa:d5:40:
         94:7a:b3:c2:fc:d2:4d:92:23:00:61:f4:51:d9:dc:06:56:ad:
         18:70:c1:ed:1c:1e:90:6d:f3:6f:59:60:0d:95:8e:b0:95:fe:
         bd:63:be:4a:63:82:96:98:f5:17:d9:3c:c2:09:72:81:61:35:
         8c:a0:66:19:f6:02:e9:a6:71:27:07:2e:cf:42:d5:a2:1e:fa:
         d9:b7:fe:0a:5b:5c:b3:8c:0c:20:c4:34:ed:02:b8:e9:fd:fe:
         63:fc:96:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Dec 9 09:25:17 2021 by LibreSSL & rpki-client.