Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/21zY9zzE8hqlVhMPUuGeyNvpOz8.roa (download)

Subject key identifier:   DB:5C:D8:F7:3C:C4:F2:1A:A5:56:13:0F:52:E1:9E:C8:DB:E9:3B:3F 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS140107
Prefixes:
    1: 45.81.236.0/22 (max: 32)
    2: 45.12.234.0/23 (max: 32)
    3: 45.135.220.0/22 (max: 32)
    4: 45.12.162.0/24 (max: 32)
    5: 193.16.8.0/24 (max: 24)
    6: 185.117.23.0/24 (max: 24)
    7: 185.115.129.0/24 (max: 24)
    8: 84.39.185.0/24 (max: 32)
    9: 84.39.190.0/24 (max: 32)
   10: 84.39.188.0/24 (max: 24)
   11: 45.80.178.0/23 (max: 32)
   12: 45.80.176.0/24 (max: 32)
   13: 188.116.49.0/24 (max: 24)
   14: 188.116.48.0/24 (max: 24)
   15: 45.15.36.0/23 (max: 32)
   16: 188.116.48.0/23 (max: 32)
   17: 185.137.183.0/24 (max: 24)
   18: 185.253.249.0/24 (max: 24)
   19: 45.83.252.0/23 (max: 32)
   20: 185.133.74.0/24 (max: 24)
   21: 185.146.195.0/24 (max: 24)
   22: 45.82.204.0/23 (max: 32)
   23: 45.94.164.0/22 (max: 24)
   24: 45.138.108.0/24 (max: 24)
   25: 185.182.63.0/24 (max: 24)
   26: 79.143.50.0/24 (max: 24)
   27: 79.143.57.0/24 (max: 24)
   28: 79.143.63.0/24 (max: 24)
   29: 185.240.236.0/22 (max: 24)
   30: 45.128.28.0/22 (max: 24)
   31: 45.91.26.0/23 (max: 24)
   32: 45.91.25.0/24 (max: 24)
   33: 45.81.10.0/23 (max: 32)
   34: 45.81.8.0/23 (max: 32)
   35: 94.199.100.0/24 (max: 24)
   36: 45.135.100.0/22 (max: 24)
   37: 45.14.47.0/24 (max: 32)
   38: 185.172.144.0/24 (max: 24)
   39: 185.120.33.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/21zY9zzE8hqlVhMPUuGeyNvpOz8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373059463 (0x163c6f87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Oct 12 11:05:16 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=db5cd8f73cc4f21aa556130f52e19ec8dbe93b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:8b:32:d3:b7:0d:99:7d:93:9b:77:5f:6c:
                    f7:14:fb:82:22:05:cf:1c:fc:65:aa:00:6e:c3:20:
                    5f:49:1b:12:75:6d:db:f2:9a:d4:a3:b6:83:6e:08:
                    6d:fd:13:fe:20:f4:f7:a3:53:41:39:18:7e:90:c5:
                    76:0a:68:8e:46:c9:1b:8f:7b:3b:c1:2e:d7:2b:1b:
                    a4:dd:ae:f4:55:09:0d:b0:3e:2a:d3:48:90:69:00:
                    b9:60:67:3c:e6:a6:cd:9d:dd:b7:03:c5:b5:1a:7e:
                    67:28:5f:89:1a:60:0f:0a:57:dc:5c:27:4f:29:fc:
                    aa:be:22:c9:45:03:86:70:73:22:b4:4f:97:54:56:
                    e5:94:b5:9e:97:17:f0:cc:f2:43:de:17:28:c0:b2:
                    67:2d:f7:b4:d1:37:de:10:0a:02:22:13:a9:72:16:
                    ff:fb:4a:a2:2f:4c:03:8a:6f:43:ed:e6:92:71:f5:
                    24:ba:8c:d7:11:50:95:ec:fe:04:e4:90:3b:62:63:
                    f2:80:df:c2:6e:59:87:c8:9c:61:04:1b:13:87:66:
                    fd:86:9c:02:90:a0:6d:5a:af:70:25:72:a9:33:64:
                    38:63:c3:bd:7c:c3:7f:76:b1:58:4e:bd:db:ec:98:
                    02:fa:5b:27:ab:7f:29:71:8e:1a:7f:91:be:a6:0d:
                    73:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DB:5C:D8:F7:3C:C4:F2:1A:A5:56:13:0F:52:E1:9E:C8:DB:E9:3B:3F
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/21zY9zzE8hqlVhMPUuGeyNvpOz8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.162.0/24
                  45.12.234.0/23
                  45.14.47.0/24
                  45.15.36.0/23
                  45.80.176.0/24
                  45.80.178.0/23
                  45.81.8.0/22
                  45.81.236.0/22
                  45.82.204.0/23
                  45.83.252.0/23
                  45.91.25.0-45.91.27.255
                  45.94.164.0/22
                  45.128.28.0/22
                  45.135.100.0/22
                  45.135.220.0/22
                  45.138.108.0/24
                  79.143.50.0/24
                  79.143.57.0/24
                  79.143.63.0/24
                  84.39.185.0/24
                  84.39.188.0/24
                  84.39.190.0/24
                  94.199.100.0/24
                  185.115.129.0/24
                  185.117.23.0/24
                  185.120.33.0/24
                  185.133.74.0/24
                  185.137.183.0/24
                  185.146.195.0/24
                  185.172.144.0/24
                  185.182.63.0/24
                  185.240.236.0/22
                  185.253.249.0/24
                  188.116.48.0/23
                  193.16.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:cf:e4:1e:be:42:95:13:7f:98:5d:22:c8:c2:2d:7b:af:8b:
         4f:8d:14:3a:28:d5:00:18:dd:86:09:26:52:32:6c:13:73:fa:
         ca:29:75:38:c7:01:9b:cc:dc:f7:15:b0:7a:bc:d8:36:5c:d7:
         28:40:59:89:0b:51:b0:ad:3f:21:2f:31:99:1b:06:eb:8b:48:
         d8:69:77:de:29:7b:1c:bb:b7:4a:6f:2e:8d:8b:e0:ce:8c:e2:
         fe:2a:f5:20:13:68:f3:51:1f:d5:e8:75:eb:ac:7e:51:9c:68:
         6f:f0:43:cc:ad:dd:bc:3a:8f:29:f4:f9:1c:08:7c:c9:b7:98:
         1a:ff:4f:ad:fb:cf:95:2e:35:c3:49:b9:9d:dc:c4:36:f3:29:
         9f:78:c2:c1:60:ca:63:bd:38:ab:23:46:51:e8:e1:1d:e7:bd:
         a4:21:6c:4f:d3:47:fc:f4:9f:f2:94:2f:69:13:e3:10:8e:a3:
         eb:04:9d:00:d2:6a:4e:a5:63:80:06:68:0e:7d:41:27:3a:a1:
         89:b5:b3:0e:b5:83:1d:c6:7a:55:89:67:1f:77:56:b8:93:86:
         c2:64:fa:a8:8e:a4:62:45:f6:c3:11:c6:90:7d:11:6c:45:62:
         18:1d:33:eb:a1:bd:40:cf:52:8d:cf:e8:89:29:9d:2d:37:ff:
         6d:6a:5e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Oct 12 13:27:58 2021 by LibreSSL & rpki-client.