Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/yDYQLpwY7I8P0A4cYZaS5dgfVIk.roa (download)

Subject key identifier:   C8:36:10:2E:9C:18:EC:8F:0F:D0:0E:1C:61:96:92:E5:D8:1F:54:89 
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
asID:                     AS211614
Prefixes:
    1: 213.252.243.0/24 maxlen: 24
    2: 84.15.125.0/24 maxlen: 24
    3: 84.15.127.0/24 maxlen: 24
    4: 84.15.126.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/yDYQLpwY7I8P0A4cYZaS5dgfVIk.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131222263 (0x7d24af7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Dec  9 16:52:45 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=c836102e9c18ec8f0fd00e1c619692e5d81f5489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:56:65:cf:8f:67:5d:7b:ae:47:94:f9:06:
                    6a:f0:54:f5:3d:49:98:06:81:b4:20:00:a8:e8:27:
                    25:69:fc:72:2d:2f:34:49:48:d6:62:49:63:6a:f3:
                    df:ae:af:80:57:24:e0:01:59:18:c5:38:b6:fe:47:
                    a6:a4:d3:3f:92:21:19:77:ce:8b:ce:a7:25:ca:1a:
                    5f:a9:61:8b:4c:1e:a5:81:a2:72:e2:40:2b:4e:01:
                    bd:24:5f:05:00:13:3f:5f:99:7b:d0:73:04:c8:b1:
                    27:72:7b:f8:df:bc:ad:47:2e:ab:72:6f:a7:84:ff:
                    1c:a7:15:b3:1d:4b:2c:7e:f6:d5:2a:06:6f:15:17:
                    2e:be:b5:0e:a0:41:9f:24:06:3e:06:87:50:30:53:
                    c9:9a:66:4c:0d:ec:96:17:91:1c:e4:10:45:d5:c0:
                    80:f2:9d:77:3b:d2:4a:78:80:17:d8:f5:88:83:e5:
                    66:49:00:7e:34:dd:93:2f:33:02:aa:81:39:0a:51:
                    97:2d:ce:5e:29:28:5b:de:92:5f:f5:7f:b1:2b:4e:
                    1b:b2:fd:3d:b0:d4:64:f4:aa:a6:9a:5b:18:f3:54:
                    d2:60:72:78:ff:b9:72:aa:60:9b:74:05:fe:00:85:
                    e0:5f:b5:db:7b:c2:5a:e0:68:90:96:7d:e6:55:eb:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C8:36:10:2E:9C:18:EC:8F:0F:D0:0E:1C:61:96:92:E5:D8:1F:54:89
            X509v3 Authority Key Identifier: 
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/yDYQLpwY7I8P0A4cYZaS5dgfVIk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.15.125.0-84.15.127.255
                  213.252.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:be:53:d0:1e:ba:66:ee:61:47:e1:20:61:39:fd:77:1f:3b:
         dd:ad:33:31:1a:d3:c1:f9:fc:3e:ff:d6:d4:da:5c:13:d8:81:
         dd:f8:c0:bb:0a:2b:a7:2e:4d:f9:8e:eb:61:d5:20:7d:f8:21:
         c5:d8:7e:31:ca:bb:2e:fb:60:53:1d:e2:58:02:f9:6e:07:f3:
         fa:e2:41:20:06:42:c3:b0:be:2a:f4:24:ef:a7:70:7e:7c:94:
         75:1e:35:fc:aa:e7:54:d1:e7:6e:27:01:cd:63:de:c9:cf:fb:
         8c:21:6c:df:cb:91:5e:2a:31:96:fd:22:48:49:3f:3a:c0:7e:
         23:6f:a2:ee:a4:37:d4:9e:3e:86:3e:86:55:f5:23:84:65:a5:
         73:cc:f3:4d:f8:7b:1f:5d:85:4e:b0:82:d7:de:86:79:3e:4c:
         53:d4:88:0a:bd:51:8b:77:6b:40:fd:8a:c7:be:36:80:57:a1:
         11:33:6d:2f:22:bb:8f:3a:55:88:bf:5d:4f:25:4d:12:1b:79:
         0c:1f:e9:cf:2a:69:84:ff:c1:99:2b:37:9e:f7:14:d8:59:f9:
         ff:d7:ab:e6:25:0f:68:f6:63:9e:ce:ae:55:61:86:5b:f3:10:
         df:e7:0d:dc:8a:c9:4a:44:f3:ca:38:74:34:e6:f4:16:ea:c0:
         f7:ea:e8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Dec 13 14:24:55 2021 by LibreSSL & rpki-client.