Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/7rSR_7We5Ka-HV-kk3Lq5ck-wz0.roa (download)

Subject key identifier:   EE:B4:91:FF:B5:9E:E4:A6:BE:1D:5F:A4:93:72:EA:E5:C9:3E:C3:3D 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS140107
Prefixes:
    1: 45.81.236.0/22 (max: 32)
    2: 45.12.234.0/23 (max: 32)
    3: 45.135.220.0/22 (max: 32)
    4: 45.12.162.0/24 (max: 32)
    5: 193.16.8.0/24 (max: 24)
    6: 185.117.23.0/24 (max: 24)
    7: 185.115.129.0/24 (max: 24)
    8: 84.39.185.0/24 (max: 32)
    9: 84.39.190.0/24 (max: 32)
   10: 84.39.188.0/24 (max: 24)
   11: 45.80.178.0/23 (max: 32)
   12: 45.80.176.0/24 (max: 32)
   13: 188.116.49.0/24 (max: 24)
   14: 188.116.48.0/24 (max: 24)
   15: 45.15.36.0/23 (max: 32)
   16: 188.116.48.0/23 (max: 32)
   17: 185.137.183.0/24 (max: 24)
   18: 185.253.249.0/24 (max: 24)
   19: 45.83.252.0/23 (max: 32)
   20: 185.133.74.0/24 (max: 24)
   21: 185.146.195.0/24 (max: 24)
   22: 45.82.204.0/23 (max: 32)
   23: 45.94.164.0/22 (max: 24)
   24: 45.138.108.0/24 (max: 24)
   25: 185.182.63.0/24 (max: 24)
   26: 79.143.50.0/24 (max: 24)
   27: 79.143.57.0/24 (max: 24)
   28: 79.143.63.0/24 (max: 24)
   29: 185.240.236.0/22 (max: 24)
   30: 45.128.28.0/22 (max: 24)
   31: 45.91.26.0/23 (max: 24)
   32: 45.91.25.0/24 (max: 24)
   33: 45.81.10.0/23 (max: 32)
   34: 45.81.8.0/23 (max: 32)
   35: 94.199.100.0/24 (max: 24)
   36: 45.135.100.0/22 (max: 24)
   37: 45.14.47.0/24 (max: 32)
   38: 185.172.144.0/24 (max: 24)
   39: 185.120.33.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/7rSR_7We5Ka-HV-kk3Lq5ck-wz0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370068381 (0x160ecb9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Sep 30 16:37:47 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=eeb491ffb59ee4a6be1d5fa49372eae5c93ec33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:70:05:f6:a9:c6:0d:6c:f3:df:64:46:e7:9b:
                    f4:4a:41:4f:f9:3f:d9:30:75:99:02:47:60:7e:a8:
                    0e:5e:e2:2f:ea:c2:de:bd:4f:72:6f:b4:2c:4f:e7:
                    c0:95:99:a7:37:70:fd:2b:8c:3d:7f:9c:cd:61:73:
                    5c:14:f6:4b:15:2e:36:7c:41:65:c2:c8:49:73:02:
                    1d:c1:4b:8d:28:58:8e:22:ef:e4:b4:76:88:ef:4b:
                    87:59:95:be:1b:88:5d:a4:21:78:df:f5:04:9b:b9:
                    e2:53:e3:97:a2:a7:c1:ae:fa:bf:b4:77:60:64:1c:
                    3a:9b:b2:61:3e:a5:90:2b:26:8b:c0:ae:e9:94:9b:
                    75:d8:c7:dd:c2:cf:d8:b9:a6:95:e5:14:51:ad:b3:
                    30:de:04:5c:71:a2:cf:fe:d1:43:04:e4:1d:a7:01:
                    3e:11:69:31:87:fc:49:22:23:95:9b:d1:69:28:c2:
                    57:08:a3:10:73:42:b4:25:8a:eb:66:a5:e9:f8:da:
                    e2:52:a1:9a:73:26:b1:62:ae:64:7d:76:51:8d:58:
                    f6:0d:49:d5:dc:98:83:ea:54:57:2c:5d:73:12:83:
                    34:02:bc:99:1e:13:51:9d:10:36:a0:4c:3c:03:7f:
                    2e:bb:7c:7d:ad:fb:99:f3:40:ae:d0:33:95:19:6c:
                    43:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EE:B4:91:FF:B5:9E:E4:A6:BE:1D:5F:A4:93:72:EA:E5:C9:3E:C3:3D
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/7rSR_7We5Ka-HV-kk3Lq5ck-wz0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.162.0/24
                  45.12.234.0/23
                  45.14.47.0/24
                  45.15.36.0/23
                  45.80.176.0/24
                  45.80.178.0/23
                  45.81.8.0/22
                  45.81.236.0/22
                  45.82.204.0/23
                  45.83.252.0/23
                  45.91.25.0-45.91.27.255
                  45.94.164.0/22
                  45.128.28.0/22
                  45.135.100.0/22
                  45.135.220.0/22
                  45.138.108.0/24
                  79.143.50.0/24
                  79.143.57.0/24
                  79.143.63.0/24
                  84.39.185.0/24
                  84.39.188.0/24
                  84.39.190.0/24
                  94.199.100.0/24
                  185.115.129.0/24
                  185.117.23.0/24
                  185.120.33.0/24
                  185.133.74.0/24
                  185.137.183.0/24
                  185.146.195.0/24
                  185.172.144.0/24
                  185.182.63.0/24
                  185.240.236.0/22
                  185.253.249.0/24
                  188.116.48.0/23
                  193.16.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:f1:22:1d:f1:49:28:de:7f:4d:a6:09:1c:01:5c:ab:5d:ec:
         9f:8c:ce:70:af:fa:7d:75:ff:0e:27:51:d3:6c:b3:1d:51:f2:
         95:b4:d9:c5:85:1f:fa:27:29:47:f0:f2:07:04:a7:d3:33:7f:
         c8:c1:d4:48:7f:9d:70:ea:49:db:fb:bc:15:2b:60:65:e6:be:
         5b:0b:a6:c6:04:22:bb:a7:5c:ea:01:57:5d:a4:c5:a8:88:13:
         4f:ba:84:15:3a:b7:55:0c:a0:63:c3:80:4d:44:2b:42:ff:61:
         42:c9:53:9b:9b:32:d2:2f:b8:e8:99:18:18:c1:b0:3b:77:9f:
         87:b0:9a:db:9d:00:d4:d9:f4:91:93:62:3d:ef:1c:2f:ed:9a:
         9c:1e:55:b7:1c:45:04:28:75:64:1e:ae:48:c6:d2:6a:e2:82:
         47:21:b6:2a:dc:4d:ce:33:04:fb:c2:dc:00:bb:20:d4:17:87:
         23:ee:d1:55:27:70:fc:63:b6:ba:64:68:63:32:73:01:ff:7f:
         34:c4:a5:ac:07:b1:0a:a9:20:4c:f4:48:6c:0c:b7:5c:21:dd:
         ac:48:e2:a1:5f:3d:8f:d6:51:50:4c:d9:6e:1f:72:a6:a2:a6:
         e3:32:c5:04:6c:26:6c:b6:bc:38:32:4d:cd:a5:37:d0:72:9e:
         99:c0:cf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Sep 30 19:49:02 2021 by LibreSSL & rpki-client.