Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/a3ye4rnEd3QnDGAE1yP-40Itmew.roa (download)

Subject key identifier:   6B:7C:9E:E2:B9:C4:77:74:27:0C:60:04:D7:23:FE:E3:42:2D:99:EC 
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
asID:                     AS16125
Prefixes:
    1: 213.252.248.0/23 (max: 23)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/a3ye4rnEd3QnDGAE1yP-40Itmew.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78506632 (0x4adea88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Jan  1 02:39:48 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6b7c9ee2b9c47774270c6004d723fee3422d99ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:6e:75:7f:29:5d:5c:4f:ee:98:2b:ab:33:
                    05:36:62:c3:73:48:2e:68:5a:dc:d3:07:36:8e:ca:
                    60:16:cd:e3:69:e6:c1:ff:76:f0:21:c1:93:04:4a:
                    9e:09:0d:2a:6e:a3:63:3d:59:61:62:f6:49:34:ad:
                    45:9d:51:11:23:0e:ad:b8:47:a2:25:ed:b4:c7:ce:
                    7f:08:d0:47:e8:77:f1:34:f6:5b:7f:c6:2e:85:f7:
                    4b:b1:60:30:16:01:7e:97:6f:79:5d:a2:b5:73:7c:
                    85:36:c0:8c:2b:48:f5:0a:34:4f:dc:ad:e3:f7:59:
                    4c:9b:06:59:75:a8:a7:8e:04:65:e0:50:c3:22:9a:
                    f8:29:63:e7:34:26:c3:0c:0a:be:61:9a:16:45:e7:
                    a0:21:6a:bb:e0:68:13:8c:de:6f:bc:0a:f4:b7:f1:
                    50:0d:a0:78:85:21:a2:c5:25:95:1a:b9:46:0e:b4:
                    f3:3b:99:ce:4e:8b:a9:ca:fd:19:08:19:d1:ec:e2:
                    e4:db:a3:cd:e1:81:6d:b1:28:ae:0a:d2:68:1e:bf:
                    5c:1c:05:52:b8:ff:60:b1:ee:30:3b:52:77:65:85:
                    e6:d8:3b:09:8d:0b:ac:c9:3d:3c:ef:36:c2:bf:93:
                    94:3a:87:2f:c3:35:87:8a:0a:8b:4b:34:21:e9:4c:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6B:7C:9E:E2:B9:C4:77:74:27:0C:60:04:D7:23:FE:E3:42:2D:99:EC
            X509v3 Authority Key Identifier: 
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/a3ye4rnEd3QnDGAE1yP-40Itmew.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.252.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:62:b4:fa:b4:b7:f9:19:d8:31:a1:8d:d8:be:c7:2e:cd:33:
         c6:c7:92:99:64:00:86:e5:5e:78:3f:a8:36:74:45:93:c9:74:
         50:68:dd:1f:c8:6b:cb:12:93:c5:3c:88:8d:22:4c:27:9e:3e:
         62:b1:28:71:35:ca:c5:16:3b:0e:ec:21:2d:20:c0:49:60:95:
         ff:a2:a9:48:59:ff:44:4f:d4:ba:0d:a7:6d:f4:27:8a:70:12:
         4e:5a:ca:2e:15:79:18:ac:f3:05:ed:18:89:38:23:4d:2a:01:
         3b:d2:9e:4d:46:22:2a:40:08:15:1a:73:ca:0e:7c:ec:e6:c0:
         4d:2f:04:fd:d6:0f:af:c9:36:7b:bb:cf:28:ac:bd:13:b1:4d:
         ab:e6:88:21:19:f1:42:37:6d:f3:5d:e6:1c:4e:38:ae:da:d2:
         3a:21:06:33:46:43:b1:e6:e3:42:10:5c:a3:3e:aa:8a:45:46:
         b0:62:b1:78:60:8b:fc:03:11:39:0a:28:a8:c6:c3:3a:f9:c8:
         eb:31:09:9b:40:a8:81:11:51:60:f5:54:08:5c:b1:48:74:5c:
         87:78:3d:b5:2f:9b:19:e3:d2:8d:2b:33:7b:44:14:b6:fd:1f:
         7e:c0:0e:ca:5c:c8:6d:6f:48:ea:31:50:91:98:df:81:5d:be:
         a4:36:d1:ed
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBK3qiDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MGRkODFhODMzZDliMDQzYzdmZmQ2MzVhNTk4N2Y1MzY5NzExODBkMB4XDTIxMDEw
MTAyMzk0OFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmI3YzllZTJiOWM0
Nzc3NDI3MGM2MDA0ZDcyM2ZlZTM0MjJkOTllYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALKKbnV/KV1cT+6YK6szBTZiw3NILmha3NMHNo7KYBbN42nm
wf928CHBkwRKngkNKm6jYz1ZYWL2STStRZ1RESMOrbhHoiXttMfOfwjQR+h38TT2
W3/GLoX3S7FgMBYBfpdveV2itXN8hTbAjCtI9Qo0T9yt4/dZTJsGWXWop44EZeBQ
wyKa+Clj5zQmwwwKvmGaFkXnoCFqu+BoE4zeb7wK9LfxUA2geIUhosUllRq5Rg60
8zuZzk6Lqcr9GQgZ0ezi5NujzeGBbbEorgrSaB6/XBwFUrj/YLHuMDtSd2WF5tg7
CY0LrMk9PO82wr+TlDqHL8M1h4oKi0s0IelMI+UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRrfJ7iucR3dCcMYATXI/7jQi2Z7DAfBgNVHSMEGDAWgBTw3YGoM9mwQ8f/
1jWlmH9TaXEYDTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhOMkJxRFBac0VQSF85WTFwWmhfVTJseEdBMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmEvYThlYmU0LWQwYjMtNGU3ZC1hZjI1LTA0NjgwNDI0ODZkYy8x
L2EzeWU0cm5FZDNRbkRHQUUxeVAtNDBJdG1ldy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEv
YThlYmU0LWQwYjMtNGU3ZC1hZjI1LTA0NjgwNDI0ODZkYy8xLzhOMkJxRFBac0VQ
SF85WTFwWmhfVTJseEdBMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdX8+DANBgkqhkiG9w0BAQsFAAOC
AQEAq2K0+rS3+RnYMaGN2L7HLs0zxseSmWQAhuVeeD+oNnRFk8l0UGjdH8hryxKT
xTyIjSJMJ54+YrEocTXKxRY7DuwhLSDASWCV/6KpSFn/RE/Uug2nbfQninASTlrK
LhV5GKzzBe0YiTgjTSoBO9KeTUYiKkAIFRpzyg587ObATS8E/dYPr8k2e7vPKKy9
E7FNq+aIIRnxQjdt813mHE44rtrSOiEGM0ZDsebjQhBcoz6qikVGsGKxeGCL/AMR
OQooqMbDOvnI6zEJm0CogRFRYPVUCFyxSHRch3g9tS+bGePSjSsze0QUtv0ffsAO
ylzIbW9I6jFQkZjfgV2+pDbR7Q==
-----END CERTIFICATE-----