Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/jLMg4hw0HiF25qKAmopOlJ1nStg.roa (download)

Subject key identifier:   8C:B3:20:E2:1C:34:1E:21:76:E6:A2:80:9A:8A:4E:94:9D:67:4A:D8 
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
asID:                     AS210906
Prefixes:
    1: 89.117.34.0/24 maxlen: 24
    2: 89.117.189.0/24 maxlen: 24
    3: 89.117.191.0/24 maxlen: 24
    4: 89.117.131.0/24 maxlen: 24
    5: 89.116.110.0/23 maxlen: 23
    6: 89.116.109.0/24 maxlen: 24
    7: 89.116.114.0/24 maxlen: 24
    8: 89.116.122.0/24 maxlen: 24
    9: 89.116.120.0/23 maxlen: 23
   10: 89.116.133.0/24 maxlen: 24
   11: 89.116.136.0/24 maxlen: 24
   12: 89.116.134.0/24 maxlen: 24
   13: 89.116.138.0/23 maxlen: 23
   14: 89.116.145.0/24 maxlen: 24
   15: 89.116.142.0/24 maxlen: 24
   16: 89.116.152.0/24 maxlen: 24
   17: 89.116.159.0/24 maxlen: 24
   18: 89.116.157.0/24 maxlen: 24
   19: 89.117.230.0/23 maxlen: 23
   20: 89.117.244.0/24 maxlen: 24
   21: 89.116.104.0/23 maxlen: 23
   22: 89.116.101.0/24 maxlen: 24
   23: 89.116.216.0/23 maxlen: 23
   24: 89.116.219.0/24 maxlen: 24
   25: 89.116.222.0/24 maxlen: 24
   26: 89.116.238.0/24 maxlen: 24
   27: 89.116.240.0/24 maxlen: 24
   28: 89.116.245.0/24 maxlen: 24
   29: 89.116.251.0/24 maxlen: 24
   30: 89.116.249.0/24 maxlen: 24
   31: 89.117.4.0/24 maxlen: 24
   32: 89.116.254.0/24 maxlen: 24
   33: 89.116.167.0/24 maxlen: 24
   34: 89.116.170.0/24 maxlen: 24
   35: 89.116.188.0/24 maxlen: 24
   36: 89.116.187.0/24 maxlen: 24
   37: 89.116.192.0/24 maxlen: 24
   38: 89.116.191.0/24 maxlen: 24
   39: 89.116.196.0/23 maxlen: 23
   40: 89.116.194.0/24 maxlen: 24
   41: 89.116.199.0/24 maxlen: 24
   42: 89.116.206.0/23 maxlen: 23
   43: 89.116.204.0/23 maxlen: 23
   44: 89.116.201.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/jLMg4hw0HiF25qKAmopOlJ1nStg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134879170 (0x80a17c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Jan  1 11:54:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8cb320e21c341e2176e6a2809a8a4e949d674ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:ba:2f:a4:7e:52:f3:f4:5b:7b:eb:32:16:
                    ee:62:d1:3c:fa:97:37:18:68:dd:57:6b:03:e2:30:
                    78:24:17:06:4a:eb:a6:74:0a:d6:07:ec:de:ef:d6:
                    d8:d8:1e:2b:18:c2:7b:60:a0:69:33:d7:e1:5d:b7:
                    be:d9:72:ac:e7:b0:a4:7d:69:bd:5e:8d:82:e2:c1:
                    5b:49:27:52:08:25:4c:9a:01:26:28:fc:f6:5a:fa:
                    c0:d5:a9:25:f9:2a:47:8c:18:06:05:e4:c2:81:85:
                    75:35:c8:75:f7:2f:ab:ce:aa:70:75:c0:79:17:41:
                    e5:c8:73:73:8a:3d:5a:30:57:b1:6b:0d:cf:68:5b:
                    d0:a3:f1:1f:61:cb:2c:e3:ca:a4:c4:4d:e6:b8:5d:
                    92:cd:06:9d:46:27:1c:dc:1c:cc:b1:fe:20:a1:82:
                    8a:28:50:92:51:81:be:70:b4:52:25:56:bd:4c:bf:
                    58:cf:61:ef:15:c8:7e:e3:0d:ca:bf:fc:db:88:8d:
                    ef:7b:fa:42:c1:95:48:5c:61:ad:66:16:ac:e6:ab:
                    a6:f4:c6:5d:a3:52:5b:19:fc:0d:09:95:8e:16:40:
                    66:f0:53:98:74:34:7d:1c:f3:c6:3a:72:a1:3f:8c:
                    6b:2d:6b:d9:26:08:59:b6:84:30:8c:21:b4:78:2c:
                    12:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8C:B3:20:E2:1C:34:1E:21:76:E6:A2:80:9A:8A:4E:94:9D:67:4A:D8
            X509v3 Authority Key Identifier: 
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/jLMg4hw0HiF25qKAmopOlJ1nStg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.101.0/24
                  89.116.104.0/23
                  89.116.109.0-89.116.111.255
                  89.116.114.0/24
                  89.116.120.0-89.116.122.255
                  89.116.133.0-89.116.134.255
                  89.116.136.0/24
                  89.116.138.0/23
                  89.116.142.0/24
                  89.116.145.0/24
                  89.116.152.0/24
                  89.116.157.0/24
                  89.116.159.0/24
                  89.116.167.0/24
                  89.116.170.0/24
                  89.116.187.0-89.116.188.255
                  89.116.191.0-89.116.192.255
                  89.116.194.0/24
                  89.116.196.0/23
                  89.116.199.0/24
                  89.116.201.0/24
                  89.116.204.0/22
                  89.116.216.0/23
                  89.116.219.0/24
                  89.116.222.0/24
                  89.116.238.0/24
                  89.116.240.0/24
                  89.116.245.0/24
                  89.116.249.0/24
                  89.116.251.0/24
                  89.116.254.0/24
                  89.117.4.0/24
                  89.117.34.0/24
                  89.117.131.0/24
                  89.117.189.0/24
                  89.117.191.0/24
                  89.117.230.0/23
                  89.117.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:eb:27:91:7b:11:18:72:42:c8:01:09:cb:2f:88:b2:be:1e:
         d1:8d:a5:6c:4a:9c:e5:60:95:68:e0:48:bf:26:58:d1:1e:ba:
         9d:85:19:a0:51:cf:66:fd:d9:64:83:07:08:72:c8:89:17:91:
         2c:f2:65:99:6f:e2:d1:db:21:b6:b8:d0:c0:28:2b:18:ec:cc:
         9b:4d:a4:d7:75:8b:95:5c:9f:8b:54:52:e3:f4:15:d7:f6:d5:
         16:2b:29:7f:11:f4:25:fb:2a:32:61:dd:b8:cd:33:40:77:58:
         03:2a:bc:21:9d:ae:50:d7:76:41:d7:9f:f6:eb:4c:17:18:e0:
         a2:1e:9f:ab:55:44:6f:da:b4:bb:d1:08:f0:09:c9:56:27:99:
         37:82:1d:a0:39:27:5f:2c:99:d9:ca:33:a7:b2:24:2b:39:b8:
         e5:97:11:49:b3:4a:40:29:08:af:51:bc:d6:40:02:39:f0:39:
         95:ae:9f:89:a1:01:d3:66:2c:b1:ff:50:62:ad:ce:89:25:c9:
         ae:b5:00:72:0e:93:e9:80:42:3d:0f:ee:78:74:4d:bb:5d:a5:
         59:1e:f2:d6:af:75:f6:7c:43:21:db:65:71:cf:2a:e6:9c:76:
         c9:cd:dd:29:ce:c1:f6:25:52:5e:a6:a1:f3:05:cb:01:7e:9b:
         ba:3d:b3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 13:43:53 2022 by LibreSSL & rpki-client.