Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/ttAEOka1YDALP0cpKkQw1KtezCY.roa (download)

Subject key identifier:   B6:D0:04:3A:46:B5:60:30:0B:3F:47:29:2A:44:30:D4:AB:5E:CC:26 
Authority key identifier: FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
asID:                     AS60602
Prefixes:
    1: 185.138.232.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/ttAEOka1YDALP0cpKkQw1KtezCY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35065028 (0x2170cc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
        Validity
            Not Before: Jul 22 15:00:47 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b6d0043a46b560300b3f47292a4430d4ab5ecc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7c:f5:7b:ec:76:ee:65:1c:40:d1:c6:31:20:
                    f4:cb:e3:96:63:96:38:aa:50:54:57:36:a8:21:34:
                    19:42:17:e5:96:fd:43:39:a1:36:45:64:f3:9a:37:
                    9a:43:81:97:5a:89:e6:14:2f:1e:3d:3d:34:8b:87:
                    bb:94:11:03:00:a4:a5:76:36:32:5e:44:46:cf:00:
                    14:ce:28:50:29:b0:b4:c2:a1:57:71:8c:f7:7e:f9:
                    5d:88:b3:70:70:8b:32:e3:0a:8a:ec:af:37:dd:03:
                    4e:d4:58:df:7d:13:fb:72:dd:04:4b:5a:fe:c9:9f:
                    f1:e1:c5:e8:ea:d1:e7:4d:75:36:79:9d:cf:6d:34:
                    77:ca:31:e8:f4:33:9a:ed:73:d8:ba:1e:c9:31:3d:
                    a2:d4:79:12:8e:73:18:08:a0:02:cd:32:b7:b1:5f:
                    cd:59:13:fb:a4:f5:ce:7e:8d:6d:df:d8:64:be:80:
                    e1:14:d4:bf:47:16:d0:29:d5:4d:16:c9:64:75:e8:
                    e1:de:a4:d3:65:d6:bb:10:39:10:4a:cd:93:9c:fb:
                    48:70:7f:1f:92:a2:d3:d7:ca:3d:10:b3:2f:a7:ba:
                    b0:83:2e:f6:ef:d5:ed:d3:29:bb:57:ea:99:8c:b1:
                    e9:c0:e9:53:0b:81:41:5f:e6:fe:9b:8f:70:04:47:
                    c6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B6:D0:04:3A:46:B5:60:30:0B:3F:47:29:2A:44:30:D4:AB:5E:CC:26
            X509v3 Authority Key Identifier: 
                keyid:FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/ttAEOka1YDALP0cpKkQw1KtezCY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.138.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:d9:e9:c7:10:a9:32:a4:ef:af:fb:e9:7c:a3:c4:b5:ae:a4:
         20:69:1b:24:35:7e:91:a4:de:25:2a:5e:6f:7e:56:b6:05:14:
         36:26:46:7c:0b:05:46:6c:9e:78:1c:b3:f7:07:b6:36:bb:2d:
         9f:19:f9:fa:4f:b1:a6:e9:fb:0a:44:dd:6e:22:b0:b8:21:da:
         0b:2d:6d:64:3f:b2:c9:00:fd:aa:47:28:4d:45:d7:ab:0f:1b:
         e9:9d:c7:65:7e:fa:0d:e9:c0:9d:a2:b5:cb:33:70:e9:e1:82:
         3b:3c:e8:c2:ff:60:87:4b:9e:3e:22:96:56:23:f9:51:9c:c4:
         07:93:03:10:ab:8b:c2:1b:76:9a:b0:81:0c:6d:09:75:1b:b0:
         40:66:8e:c4:0a:c8:05:6b:2c:ef:06:9b:4b:26:8f:ca:0f:8e:
         4e:7e:54:18:af:76:1a:15:8d:1a:a8:08:54:02:5e:bb:c4:ba:
         22:3b:51:50:b7:2f:78:75:97:ff:51:5e:bd:de:26:a5:79:f6:
         fc:0a:4f:2f:64:3e:81:50:c2:22:cc:7e:42:fc:04:a0:05:90:
         16:51:a1:b5:37:eb:50:3a:27:59:32:ff:71:25:82:14:02:d1:
         9d:4d:ab:2b:f7:5b:60:1c:fe:e1:ae:a6:8b:3a:11:2b:f4:92:
         f3:ea:21:9a
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEAhcMxDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YjU4NTY2ZDE1NmU5OTdhMzRiMTZmYzljMDdjMjA3YjdlNzNmYjUzMB4XDTIxMDcy
MjE1MDA0N1oXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjZkMDA0M2E0NmI1
NjAzMDBiM2Y0NzI5MmE0NDMwZDRhYjVlY2MyNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANN89Xvsdu5lHEDRxjEg9MvjlmOWOKpQVFc2qCE0GUIX5Zb9
QzmhNkVk85o3mkOBl1qJ5hQvHj09NIuHu5QRAwCkpXY2Ml5ERs8AFM4oUCmwtMKh
V3GM9375XYizcHCLMuMKiuyvN90DTtRY330T+3LdBEta/smf8eHF6OrR5011Nnmd
z200d8ox6PQzmu1z2LoeyTE9otR5Eo5zGAigAs0yt7FfzVkT+6T1zn6Nbd/YZL6A
4RTUv0cW0CnVTRbJZHXo4d6k02XWuxA5EErNk5z7SHB/H5Ki09fKPRCzL6e6sIMu
9u/V7dMpu1fqmYyx6cDpUwuBQV/m/puPcARHxt8CAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBS20AQ6RrVgMAs/RykqRDDUq17MJjAfBgNVHSMEGDAWgBT7WFZtFW6ZejSx
b8nAfCB7fnP7UzAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtMWhXYlJWdW1YbzBzV19Kd0h3Z2UzNXotMU0uY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzZiL2NlNWM0YS1mNTcyLTRiNmYtYTNhNS04MGUxYmU2NmJiMGUv
MS90dEFFT2thMVlEQUxQMGNwS2tRdzFLdGV6Q1kucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZi
L2NlNWM0YS1mNTcyLTRiNmYtYTNhNS04MGUxYmU2NmJiMGUvMS8xLTFoV2JSVnVt
WG8wc1dfSndId2dlMzV6LTFNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYroMA0GCSqGSIb3DQEBCwUA
A4IBAQB22enHEKkypO+v++l8o8S1rqQgaRskNX6RpN4lKl5vfla2BRQ2JkZ8CwVG
bJ54HLP3B7Y2uy2fGfn6T7Gm6fsKRN1uIrC4IdoLLW1kP7LJAP2qRyhNRderDxvp
ncdlfvoN6cCdorXLM3Dp4YI7POjC/2CHS54+IpZWI/lRnMQHkwMQq4vCG3aasIEM
bQl1G7BAZo7ECsgFayzvBptLJo/KD45OflQYr3YaFY0aqAhUAl67xLoiO1FQty94
dZf/UV693ialefb8Ck8vZD6BUMIizH5C/ASgBZAWUaG1N+tQOidZMv9xJYIUAtGd
Tasr91tgHP7hrqaLOhEr9JLz6iGa
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:35:10 2021 by LibreSSL & rpki-client.