Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/qF3IIHYdVwIVf1z1b_j-jFCNfmk.roa (download)

Subject key identifier:   A8:5D:C8:20:76:1D:57:02:15:7F:5C:F5:6F:F8:FE:8C:50:8D:7E:69 
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
asID:                     AS15830
Prefixes:
    1: 217.69.16.0/20 (max: 20)
    2: 185.3.24.0/22 (max: 22)
    3: 2a03:6c80::/32 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/qF3IIHYdVwIVf1z1b_j-jFCNfmk.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867414205 (0x33b3b0bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: Jan  1 02:52:35 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=a85dc820761d5702157f5cf56ff8fe8c508d7e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:c4:76:33:b4:ac:71:66:0c:5d:58:65:7c:
                    da:6e:5b:9e:df:35:cd:da:60:65:e2:f5:20:b3:94:
                    7e:a3:cc:86:d8:4f:51:1b:be:62:6f:8c:62:12:27:
                    05:89:f7:ea:c5:e4:44:4c:f8:f6:b1:7c:ee:e4:f9:
                    b7:59:57:5f:1b:10:f4:f7:e8:14:39:f5:b9:ad:db:
                    90:5d:30:c5:77:28:a5:55:cd:e6:95:99:28:e8:9b:
                    18:8e:f0:a5:58:34:fb:f0:41:0f:e6:24:14:17:47:
                    09:a4:33:55:fc:81:10:05:77:9b:e8:24:4a:fb:da:
                    fe:68:97:c3:97:46:de:57:53:02:e6:b6:1e:d5:1c:
                    ed:5c:d4:e1:26:a5:19:b8:56:a5:21:96:36:40:5d:
                    fa:3c:78:24:5f:48:f8:0c:ee:e4:bc:46:af:b4:3f:
                    1f:1f:44:8b:59:3e:f6:3a:66:c5:bf:fb:f7:ff:11:
                    d8:b8:4d:3d:73:28:06:2c:93:c5:81:fb:0e:22:1c:
                    04:d8:f7:31:bf:a0:00:1a:cb:8c:a6:88:d5:ef:ca:
                    27:11:75:8c:68:30:06:c5:de:83:0e:9d:48:a8:e8:
                    58:47:01:c7:6d:8e:05:ec:40:39:84:62:3d:88:c7:
                    53:5c:53:fc:a5:ee:15:f4:98:7a:6e:c7:0d:14:9b:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A8:5D:C8:20:76:1D:57:02:15:7F:5C:F5:6F:F8:FE:8C:50:8D:7E:69
            X509v3 Authority Key Identifier: 
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/qF3IIHYdVwIVf1z1b_j-jFCNfmk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0#0.....0...........E.0
....0....*.l.
    Signature Algorithm: sha256WithRSAEncryption
         2b:50:df:46:71:84:7d:a0:26:bc:50:d0:a4:cb:6f:9d:7e:5c:
         20:06:a7:76:b3:a7:6b:7a:30:1c:fa:9c:45:0a:02:22:31:73:
         6f:00:c1:2e:3d:3f:2b:b7:a9:df:10:4c:cb:c8:b0:09:ef:51:
         8a:01:7d:e3:e9:b6:5f:8b:e6:72:78:13:a5:2a:aa:90:a1:7a:
         a5:ac:f9:6f:fb:6c:87:fe:92:fd:13:8a:f3:f6:2c:04:9e:0f:
         fd:cb:90:d3:91:a4:35:7a:e5:d8:c0:00:f7:d1:70:38:6d:88:
         fe:4e:b6:f7:04:a1:f2:52:ff:c0:b3:47:7d:96:c1:cc:7d:9e:
         01:6c:33:67:36:31:b8:4a:4d:f9:09:ed:69:c3:f9:87:d5:f2:
         fc:16:08:e7:fb:63:eb:8f:d6:bb:51:6f:ab:8e:b5:61:94:f5:
         84:34:7e:93:43:72:d8:5a:2f:1a:b7:fa:3f:67:ce:be:97:30:
         e5:00:66:bc:fd:e1:f1:35:00:23:a3:62:a8:0b:52:a0:f8:f0:
         a2:1a:c3:30:d4:1c:14:f4:dc:1d:32:87:af:f8:87:24:f7:90:
         2f:af:21:9b:93:99:da:d9:80:71:84:ef:47:40:eb:30:ba:b4:
         ec:b2:0b:66:5b:bf:bf:dd:eb:00:06:c9:65:ee:4a:5e:9e:84:
         90:a9:eb:5b
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEM7OwvTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YzM1MGJhODJmM2ZlYjVhZWUyODkzOGZiZjFiMDljMWUyZmQxOWI0MB4XDTIxMDEw
MTAyNTIzNVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTg1ZGM4MjA3NjFk
NTcwMjE1N2Y1Y2Y1NmZmOGZlOGM1MDhkN2U2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK/nxHYztKxxZgxdWGV82m5bnt81zdpgZeL1ILOUfqPMhthP
URu+Ym+MYhInBYn36sXkREz49rF87uT5t1lXXxsQ9PfoFDn1ua3bkF0wxXcopVXN
5pWZKOibGI7wpVg0+/BBD+YkFBdHCaQzVfyBEAV3m+gkSvva/miXw5dG3ldTAua2
HtUc7VzU4SalGbhWpSGWNkBd+jx4JF9I+Azu5LxGr7Q/Hx9Ei1k+9jpmxb/79/8R
2LhNPXMoBiyTxYH7DiIcBNj3Mb+gABrLjKaI1e/KJxF1jGgwBsXegw6dSKjoWEcB
x22OBexAOYRiPYjHU1xT/KXuFfSYem7HDRSb4VUCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSoXcggdh1XAhV/XPVv+P6MUI1+aTAfBgNVHSMEGDAWgBQ8NQuoLz/rWu4o
k4+/GwnB4v0ZtDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BEVUxxQzhfNjFydUtKT1B2eHNKd2VMOUdiUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTkvNjRkN2E5LWNhYzMtNDU0OS1hN2FhLTYxYjc5MDJlZTIwNC8x
L3FGM0lJSFlkVndJVmYxejFiX2otakZDTmZtay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkv
NjRkN2E5LWNhYzMtNDU0OS1hN2FhLTYxYjc5MDJlZTIwNC8xL1BEVUxxQzhfNjFy
dUtKT1B2eHNKd2VMOUdiUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArkDGAMEBNlFEDANBAIAAjAHAwUA
KgNsgDANBgkqhkiG9w0BAQsFAAOCAQEAK1DfRnGEfaAmvFDQpMtvnX5cIAandrOn
a3owHPqcRQoCIjFzbwDBLj0/K7ep3xBMy8iwCe9RigF94+m2X4vmcngTpSqqkKF6
paz5b/tsh/6S/ROK8/YsBJ4P/cuQ05GkNXrl2MAA99FwOG2I/k629wSh8lL/wLNH
fZbBzH2eAWwzZzYxuEpN+QntacP5h9Xy/BYI5/tj64/Wu1Fvq461YZT1hDR+k0Ny
2FovGrf6P2fOvpcw5QBmvP3h8TUAI6NiqAtSoPjwohrDMNQcFPTcHTKHr/iHJPeQ
L68hm5OZ2tmAcYTvR0DrMLq07LILZlu/v93rAAbJZe5KXp6EkKnrWw==
-----END CERTIFICATE-----

Generated at Sat Jul 31 09:17:02 2021 by LibreSSL & rpki-client.