Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/B2M8WBFfKdD6Vd_8gXqz2oOw2lQ.roa (download)

Subject key identifier:   07:63:3C:58:11:5F:29:D0:FA:55:DF:FC:81:7A:B3:DA:83:B0:DA:54 
Authority key identifier: C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
asID:                     AS0
Prefixes:
    1: 194.116.188.0/23 (max: 32)
    2: 2001:7f8:15::/48 (max: 128)
    3: 2a04:80c0::/29 (max: 128)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/B2M8WBFfKdD6Vd_8gXqz2oOw2lQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21293966 (0x144eb8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
        Validity
            Not Before: Jan  1 02:00:05 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=07633c58115f29d0fa55dffc817ab3da83b0da54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:cc:d8:37:fd:fa:9c:d6:24:bd:c1:e9:f4:
                    47:5f:1f:42:20:19:46:67:81:30:4b:fb:46:51:b8:
                    d0:e3:ba:ce:7e:2d:e4:49:10:ad:ab:71:23:47:b9:
                    0f:0d:1b:f6:bd:ba:af:fc:de:61:73:45:3f:5b:fc:
                    9d:3b:5b:64:cd:43:f9:e3:6c:df:b9:c6:ff:e6:42:
                    a5:43:64:16:1f:63:1c:d4:6b:9a:cc:06:ef:db:6d:
                    87:b2:f8:04:5b:08:56:82:38:1d:31:9c:3e:8c:99:
                    ed:da:fd:d0:20:69:46:d2:66:1b:ad:55:49:71:76:
                    a2:24:81:bc:a5:b7:c1:96:63:5d:2d:35:53:f6:1b:
                    71:db:fc:e7:8d:fa:3f:72:ac:c9:09:88:c5:cf:12:
                    c3:10:61:32:c1:14:81:7b:15:11:78:a4:83:94:f7:
                    2f:09:3e:25:88:4c:43:54:4d:08:90:ce:ba:81:5a:
                    23:28:c7:2d:bd:58:3e:2c:ab:34:ee:77:a2:cf:82:
                    a1:83:2a:7c:b9:17:46:5e:f1:83:cf:c4:2d:66:23:
                    aa:7c:f3:a3:7f:19:8a:ac:6f:22:44:76:e1:5f:e1:
                    b8:79:d8:63:7b:e7:3b:69:58:1a:c9:a5:96:7c:38:
                    e0:53:dd:d3:98:98:a7:08:68:68:24:8d:b1:44:7d:
                    a0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                07:63:3C:58:11:5F:29:D0:FA:55:DF:FC:81:7A:B3:DA:83:B0:DA:54
            X509v3 Authority Key Identifier: 
                keyid:C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/B2M8WBFfKdD6Vd_8gXqz2oOw2lQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0&0.....0.....t.0.....0.... ........*...
    Signature Algorithm: sha256WithRSAEncryption
         89:77:09:2a:77:cf:85:76:11:22:33:29:83:31:51:50:26:3d:
         64:47:c4:26:6d:69:d1:c1:17:1a:aa:8b:d3:09:ee:be:c6:6d:
         76:84:39:02:e5:4b:bf:c2:e2:c3:f6:57:9f:07:18:b0:bf:cb:
         24:39:4f:c6:b2:ff:14:92:6d:e8:03:38:d3:10:3a:ff:4a:9a:
         22:25:56:f1:e1:ca:32:e5:19:06:d4:0e:b0:e5:82:14:6e:c1:
         53:2d:c9:9b:a0:29:9d:73:d7:c9:9d:5b:37:56:eb:a6:61:db:
         21:b1:3d:d6:ec:6b:a7:2e:2d:70:89:08:d5:fb:02:02:51:1a:
         52:78:4d:da:a6:ce:80:53:43:6d:19:76:fb:8e:b9:f1:8f:fb:
         2f:74:ef:78:8e:72:fb:90:3b:b1:b0:54:c9:2f:75:1c:cb:16:
         cb:84:5c:06:d3:6a:1b:14:c1:0d:de:aa:11:42:2f:e5:e8:58:
         31:6f:58:44:af:fd:b0:10:6e:b7:86:8a:4b:f5:d3:88:96:74:
         10:43:4b:bb:47:34:e3:a4:7a:c1:86:fd:c1:bd:59:d8:b4:cc:
         57:fb:8b:e5:a2:8a:72:2e:6b:ae:b4:52:74:06:e4:e1:95:fb:
         43:81:22:9d:92:f3:86:ad:80:f6:91:ea:b5:b2:ed:a5:8a:c9:
         05:61:f6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:26:07 2021 by LibreSSL & rpki-client.