Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Ogdst9-EqBckE30c63zh-k4YuNg.roa (download)

Subject key identifier:   3A:07:6C:B7:DF:84:A8:17:24:13:7D:1C:EB:7C:E1:FA:4E:18:B8:D8 
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
asID:                     AS210906
Prefixes:
    1: 89.117.34.0/24 (max: 24)
    2: 89.117.189.0/24 (max: 24)
    3: 89.117.191.0/24 (max: 24)
    4: 89.117.131.0/24 (max: 24)
    5: 89.116.110.0/23 (max: 23)
    6: 89.116.109.0/24 (max: 24)
    7: 89.116.114.0/24 (max: 24)
    8: 89.116.122.0/24 (max: 24)
    9: 89.116.120.0/23 (max: 23)
   10: 89.116.138.0/23 (max: 23)
   11: 89.116.133.0/24 (max: 24)
   12: 89.116.136.0/24 (max: 24)
   13: 89.116.134.0/24 (max: 24)
   14: 89.116.142.0/24 (max: 24)
   15: 89.116.145.0/24 (max: 24)
   16: 89.116.152.0/24 (max: 24)
   17: 89.116.159.0/24 (max: 24)
   18: 89.116.157.0/24 (max: 24)
   19: 89.117.230.0/23 (max: 23)
   20: 89.117.244.0/24 (max: 24)
   21: 89.116.104.0/23 (max: 23)
   22: 89.116.101.0/24 (max: 24)
   23: 89.116.216.0/23 (max: 23)
   24: 89.116.219.0/24 (max: 24)
   25: 89.116.222.0/24 (max: 24)
   26: 89.116.238.0/24 (max: 24)
   27: 89.116.240.0/24 (max: 24)
   28: 89.116.245.0/24 (max: 24)
   29: 89.116.251.0/24 (max: 24)
   30: 89.116.249.0/24 (max: 24)
   31: 89.116.254.0/24 (max: 24)
   32: 89.117.4.0/24 (max: 24)
   33: 89.116.167.0/24 (max: 24)
   34: 89.116.170.0/24 (max: 24)
   35: 89.116.188.0/24 (max: 24)
   36: 89.116.187.0/24 (max: 24)
   37: 89.116.192.0/24 (max: 24)
   38: 89.116.191.0/24 (max: 24)
   39: 89.116.196.0/23 (max: 23)
   40: 89.116.194.0/24 (max: 24)
   41: 89.116.199.0/24 (max: 24)
   42: 89.116.201.0/24 (max: 24)
   43: 89.116.206.0/23 (max: 23)
   44: 89.116.204.0/23 (max: 23)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Ogdst9-EqBckE30c63zh-k4YuNg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119625699 (0x72157e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Sep 29 10:29:39 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3a076cb7df84a81724137d1ceb7ce1fa4e18b8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:0d:74:ed:48:98:42:bb:b9:e4:5c:7f:af:
                    03:b0:75:25:fc:21:8d:ac:16:3f:27:2d:80:f9:c6:
                    85:bc:88:a9:4e:b7:5c:5e:2f:de:7b:fa:63:65:95:
                    3f:25:97:3b:fb:7b:f9:39:de:e6:a4:4e:71:7a:1f:
                    42:41:00:24:71:f6:27:69:7a:0c:bc:3e:ec:17:ca:
                    ba:9d:62:5d:38:27:97:5e:ff:3e:da:4a:7a:cc:7e:
                    ee:b0:6d:b0:53:47:9e:7b:c8:90:f7:5d:23:c4:51:
                    18:f4:58:ad:c6:24:1b:5b:ce:9b:34:0a:a5:eb:ae:
                    e7:04:dd:14:b4:54:a9:12:76:3a:bd:db:7b:5a:4f:
                    41:d7:fd:99:05:3e:a2:1c:f6:24:07:cf:8b:e8:f3:
                    34:fa:71:7b:27:7b:3d:1c:6a:29:cf:4d:04:a8:8e:
                    b6:53:1f:2c:09:0f:13:f7:ce:b1:26:94:8d:09:18:
                    2f:9c:16:d2:58:84:7e:84:f6:71:41:82:f0:a0:db:
                    e7:5b:eb:e9:00:44:a4:7e:bd:ec:e8:35:ec:81:ce:
                    9d:77:7f:20:90:df:95:78:df:4d:4a:f2:fc:2f:43:
                    5a:64:98:87:dd:4a:71:6d:1e:d0:cf:78:64:9c:13:
                    3d:80:4e:b4:4f:d1:e6:ba:3d:c4:90:b4:92:52:54:
                    8f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3A:07:6C:B7:DF:84:A8:17:24:13:7D:1C:EB:7C:E1:FA:4E:18:B8:D8
            X509v3 Authority Key Identifier: 
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Ogdst9-EqBckE30c63zh-k4YuNg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.101.0/24
                  89.116.104.0/23
                  89.116.109.0-89.116.111.255
                  89.116.114.0/24
                  89.116.120.0-89.116.122.255
                  89.116.133.0-89.116.134.255
                  89.116.136.0/24
                  89.116.138.0/23
                  89.116.142.0/24
                  89.116.145.0/24
                  89.116.152.0/24
                  89.116.157.0/24
                  89.116.159.0/24
                  89.116.167.0/24
                  89.116.170.0/24
                  89.116.187.0-89.116.188.255
                  89.116.191.0-89.116.192.255
                  89.116.194.0/24
                  89.116.196.0/23
                  89.116.199.0/24
                  89.116.201.0/24
                  89.116.204.0/22
                  89.116.216.0/23
                  89.116.219.0/24
                  89.116.222.0/24
                  89.116.238.0/24
                  89.116.240.0/24
                  89.116.245.0/24
                  89.116.249.0/24
                  89.116.251.0/24
                  89.116.254.0/24
                  89.117.4.0/24
                  89.117.34.0/24
                  89.117.131.0/24
                  89.117.189.0/24
                  89.117.191.0/24
                  89.117.230.0/23
                  89.117.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:59:31:2e:30:02:53:7e:2d:b7:3d:f3:e9:0e:e9:5c:59:5b:
         d1:14:6e:ae:c6:be:2e:7d:05:7b:0c:3b:35:e2:15:90:83:5b:
         1b:26:12:f4:58:24:98:d7:cc:d3:8d:9e:16:5f:a8:20:b1:14:
         e4:4e:07:15:dc:0b:99:de:2f:94:2a:07:48:8d:46:82:4a:32:
         2c:ad:a6:f6:11:d7:4b:a6:86:ed:3c:62:a4:c9:0a:85:17:44:
         22:7a:75:a4:73:87:9e:8f:e4:3c:9f:72:a9:d7:6d:f1:66:c8:
         7b:d6:4f:f5:56:37:02:07:7b:c2:e3:8d:ca:27:a4:b9:20:07:
         d4:df:23:de:68:26:59:c4:0e:25:6c:9a:f5:2f:55:55:00:e7:
         96:c2:30:4e:09:b3:c1:e4:00:5e:03:1b:d5:ad:33:44:48:2c:
         02:55:21:0b:57:47:a1:c4:dc:b7:55:c0:57:02:0a:c2:0f:50:
         37:01:8a:fa:c6:90:7a:b7:b2:0a:b5:b1:e0:54:2a:b7:15:8c:
         90:95:39:f1:a4:99:f9:cd:02:d6:4a:26:22:1f:03:d0:c2:48:
         66:be:7c:48:df:85:3a:2f:42:dd:aa:3e:b1:3e:5a:66:33:8a:
         48:34:24:97:3c:cf:6f:ff:71:dc:40:3e:66:ed:18:24:f2:7f:
         b4:3d:d6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Sep 29 12:35:14 2021 by LibreSSL & rpki-client.