Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/j9vw6L0IKvS0bXBTVkOIJ7kwHeI.roa (download)

Subject key identifier:   8F:DB:F0:E8:BD:08:2A:F4:B4:6D:70:53:56:43:88:27:B9:30:1D:E2 
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
asID:                     AS207429
Prefixes:
    1: 185.14.238.0/23 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/j9vw6L0IKvS0bXBTVkOIJ7kwHeI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653266862 (0x26f00fae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
        Validity
            Not Before: May  1 07:03:00 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=8fdbf0e8bd082af4b46d705356438827b9301de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:81:06:43:b7:55:68:a2:d5:7a:27:c1:2d:5e:
                    4e:50:b8:ab:0a:97:68:38:6a:59:5f:d5:f5:f7:60:
                    ce:38:f4:aa:ad:0a:f2:1e:35:50:88:13:81:d5:4b:
                    3f:0d:98:96:fe:6d:ee:70:3d:79:6e:f3:ee:cc:7a:
                    5b:67:1d:a9:a2:4d:bc:53:fc:11:0b:9c:3e:a9:1c:
                    43:af:bc:d4:63:9d:5f:15:50:62:7c:1a:90:bd:5d:
                    d1:06:6b:f7:84:85:f5:28:f2:67:65:44:eb:14:90:
                    d7:66:f1:57:09:fd:c2:fa:23:b5:c2:db:7c:f9:49:
                    b2:7d:db:68:ad:79:5e:dc:ff:65:87:27:a7:92:15:
                    20:0c:3d:25:c2:59:dd:e5:33:c4:d7:b0:68:a8:6f:
                    28:0a:43:e3:d5:63:01:7e:cf:9a:6e:fe:8d:b3:50:
                    0b:05:7d:b5:0b:98:8e:e0:97:2b:1e:ab:dd:cb:09:
                    28:91:80:bd:08:93:25:df:f0:3e:df:d5:e1:00:50:
                    f6:4a:af:c1:82:1c:35:e6:9d:64:34:44:55:f2:7d:
                    e4:6d:6f:dd:bb:5e:b0:15:3c:89:b8:c2:1e:d9:ab:
                    23:84:af:d5:19:89:9f:04:6f:d8:de:df:7d:4b:49:
                    70:a2:08:f7:ef:ac:ab:6e:9e:ca:59:59:94:e9:ac:
                    b1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8F:DB:F0:E8:BD:08:2A:F4:B4:6D:70:53:56:43:88:27:B9:30:1D:E2
            X509v3 Authority Key Identifier: 
                keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/j9vw6L0IKvS0bXBTVkOIJ7kwHeI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.......
    Signature Algorithm: sha256WithRSAEncryption
         08:2d:80:d1:67:8e:b5:a2:5a:55:bf:77:f3:d3:0d:72:ca:87:
         28:2a:af:4f:4c:1f:af:27:0b:76:3f:e1:5a:8c:8e:c4:57:9f:
         7f:0c:1d:09:bd:7f:f2:da:8a:85:34:48:25:11:c9:fb:35:34:
         53:13:f1:6d:32:0b:81:72:78:9e:bf:86:03:c2:25:c2:54:7f:
         e6:56:c5:a0:d2:c9:8e:6b:8d:6a:77:b5:1e:c9:d3:08:fe:44:
         a0:92:64:d1:60:b5:d0:b1:0d:a5:11:b7:3d:75:a0:dc:1c:3a:
         d2:e0:46:e3:f2:c7:e2:17:0b:3a:f9:a1:d6:ee:12:6b:47:77:
         4a:8a:88:a2:1e:b0:25:38:56:ac:94:b7:14:52:f8:ea:90:a9:
         60:74:28:aa:ca:15:b0:2d:58:6a:06:1c:c3:0b:e5:15:f1:5b:
         cf:b7:d8:fe:93:de:68:99:be:6d:03:42:e0:0f:66:02:ae:c0:
         99:c0:f7:50:46:c3:d9:86:2f:53:c9:6f:be:64:9c:f1:ed:37:
         67:12:a5:4c:72:57:e7:d2:4e:74:52:a7:38:08:a7:bf:50:c3:
         56:5c:fd:89:c6:fe:9b:66:96:42:ec:ab:fc:b1:50:99:36:dc:
         f1:22:1e:81:4e:78:65:4c:6e:32:23:64:fb:0c:c0:4f:9c:de:
         f6:91:e2:28
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEJvAPrjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZGM4MWQyNGM0NWRkYWEzNDVmOTA2NGRlMjlmYmNhN2IxMjlhNTJjMB4XDTIxMDUw
MTA3MDMwMFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGZkYmYwZThiZDA4
MmFmNGI0NmQ3MDUzNTY0Mzg4MjdiOTMwMWRlMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ6BBkO3VWii1XonwS1eTlC4qwqXaDhqWV/V9fdgzjj0qq0K
8h41UIgTgdVLPw2Ylv5t7nA9eW7z7sx6W2cdqaJNvFP8EQucPqkcQ6+81GOdXxVQ
YnwakL1d0QZr94SF9SjyZ2VE6xSQ12bxVwn9wvojtcLbfPlJsn3baK15Xtz/ZYcn
p5IVIAw9JcJZ3eUzxNewaKhvKApD49VjAX7Pmm7+jbNQCwV9tQuYjuCXKx6r3csJ
KJGAvQiTJd/wPt/V4QBQ9kqvwYIcNeadZDREVfJ95G1v3btesBU8ibjCHtmrI4Sv
1RmJnwRv2N7ffUtJcKII9++sq26eyllZlOmssUsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSP2/DovQgq9LRtcFNWQ4gnuTAd4jAfBgNVHSMEGDAWgBQtyB0kxF3ao0X5
Bk3in7ynsSmlLDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xjZ2RKTVJkMnFORi1RWk40cC04cDdFcHBTdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODkvYmYzZGI1LWEzM2YtNDMxMS1hY2Q5LTJmY2MwYjc0OWIzMi8x
L2o5dnc2TDBJS3ZTMGJYQlRWa09JSjdrd0hlSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkv
YmYzZGI1LWEzM2YtNDMxMS1hY2Q5LTJmY2MwYjc0OWIzMi8xL0xjZ2RKTVJkMnFO
Ri1RWk40cC04cDdFcHBTdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbkO7jANBgkqhkiG9w0BAQsFAAOC
AQEACC2A0WeOtaJaVb9389MNcsqHKCqvT0wfrycLdj/hWoyOxFeffwwdCb1/8tqK
hTRIJRHJ+zU0UxPxbTILgXJ4nr+GA8IlwlR/5lbFoNLJjmuNane1HsnTCP5EoJJk
0WC10LENpRG3PXWg3Bw60uBG4/LH4hcLOvmh1u4Sa0d3SoqIoh6wJThWrJS3FFL4
6pCpYHQoqsoVsC1YagYcwwvlFfFbz7fY/pPeaJm+bQNC4A9mAq7AmcD3UEbD2YYv
U8lvvmSc8e03ZxKlTHJX59JOdFKnOAinv1DDVlz9icb+m2aWQuyr/LFQmTbc8SIe
gU54ZUxuMiNk+wzAT5ze9pHiKA==
-----END CERTIFICATE-----

Generated at Sat Jul 31 09:13:52 2021 by LibreSSL & rpki-client.