Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/eYx6lT7D0Tj__qRNJh3QPP4q8Y0.roa (download)

Subject key identifier:   79:8C:7A:95:3E:C3:D1:38:FF:FE:A4:4D:26:1D:D0:3C:FE:2A:F1:8D 
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
asID:                     AS13194
Prefixes:
    1: 213.252.224.0/20 (max: 20)
    2: 213.252.223.0/24 (max: 24)
    3: 84.15.0.0/16 (max: 16)
    4: 213.252.252.0/24 (max: 24)
    5: 213.252.254.0/24 (max: 24)
    6: 213.226.128.0/18 (max: 18)
    7: 213.252.192.0/20 (max: 20)
    8: 185.189.154.0/24 (max: 24)
    9: 2a00:f500::/29 (max: 29)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/eYx6lT7D0Tj__qRNJh3QPP4q8Y0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119237585 (0x71b6bd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Sep 28 10:43:11 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=798c7a953ec3d138fffea44d261dd03cfe2af18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:75:53:69:83:9f:d8:cf:77:24:9f:2c:cc:
                    02:c8:1b:4f:e2:37:ef:3f:b5:7b:29:c2:04:19:3c:
                    28:41:91:91:3e:39:2d:c8:35:9f:59:92:45:4c:df:
                    a9:56:cf:31:53:dc:1b:1f:65:30:81:b6:82:24:7f:
                    0d:8f:54:69:b2:9a:01:3c:8f:30:79:39:52:b7:28:
                    7d:89:7d:c7:08:27:87:5f:d2:cc:97:bc:51:f2:58:
                    0c:2f:41:25:0a:ac:ff:3d:0a:91:e5:b7:b0:2f:8e:
                    51:be:25:81:76:2e:04:22:5c:8d:44:47:cd:47:d8:
                    68:b6:89:b4:10:f3:98:ee:29:d9:26:be:2f:4e:2c:
                    94:82:04:20:41:dc:97:0a:d0:9a:c5:d6:f0:f1:5a:
                    72:9f:d4:b6:96:c9:67:a4:e0:c0:fc:88:cf:63:39:
                    8e:40:72:20:38:ca:f5:6b:b2:d7:e0:c0:b4:4f:3b:
                    d4:9f:c7:6b:9b:72:08:7b:5a:e8:25:e0:0c:76:2f:
                    b8:90:bd:66:a6:2d:9b:dc:dc:cb:45:ff:c7:30:35:
                    1e:79:d2:af:bc:62:57:65:1e:be:f3:ad:bf:6e:04:
                    83:a0:da:5a:38:c4:b5:21:de:fb:4e:3c:ea:db:9a:
                    b4:f6:93:ac:e7:56:a1:12:71:0c:38:d7:9d:cc:e5:
                    eb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                79:8C:7A:95:3E:C3:D1:38:FF:FE:A4:4D:26:1D:D0:3C:FE:2A:F1:8D
            X509v3 Authority Key Identifier: 
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/eYx6lT7D0Tj__qRNJh3QPP4q8Y0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.15.0.0/16
                  185.189.154.0/24
                  213.226.128.0/18
                  213.252.192.0/20
                  213.252.223.0-213.252.239.255
                  213.252.252.0/24
                  213.252.254.0/24
                IPv6:
                  2a00:f500::/29

    Signature Algorithm: sha256WithRSAEncryption
         3e:48:77:e8:86:e3:39:27:ff:5f:ba:22:f2:56:d2:63:a7:e4:
         63:84:19:73:a6:c5:7b:05:b6:19:0d:6e:dd:fe:b9:65:67:67:
         7a:97:0f:5d:df:01:bb:90:34:21:1a:67:e9:9d:23:77:c5:6a:
         1b:d2:c4:e9:f3:df:01:0c:fb:db:da:6d:36:3e:53:cd:75:f0:
         b0:20:20:59:b5:06:2b:0c:94:f4:bf:9e:ec:06:4f:cf:9f:9a:
         5d:fa:8d:84:65:be:31:27:4b:d5:e9:13:9d:34:67:64:54:d6:
         78:6d:b1:63:00:89:c8:b0:98:31:6f:bb:a6:03:75:e4:8a:78:
         d2:37:05:80:98:6f:29:b9:1d:1b:2c:0e:b4:f9:c4:76:8b:f4:
         f5:38:17:c2:8f:1c:47:07:53:20:31:9e:39:2e:46:46:3e:e2:
         b8:da:27:b1:bf:6c:08:7b:68:2f:b1:10:cf:53:02:52:f7:09:
         71:8f:bf:73:b4:8d:fc:91:7f:7f:74:18:40:0e:bf:04:3f:ef:
         db:e8:2c:c4:e7:02:c1:06:39:c8:ba:a8:b3:d4:9b:fc:d9:6b:
         8b:54:3a:92:83:d6:ed:5c:0f:76:a8:c0:05:37:1d:7d:57:cd:
         ab:b2:f2:b8:ad:4f:78:91:97:d2:98:32:4a:9e:7f:4f:59:30:
         db:bc:ab:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Sep 29 21:54:28 2021 by LibreSSL & rpki-client.