Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/AQ7_-EIM5mRiC4f36BQvJZVOvQA.roa (download)

Subject key identifier:   01:0E:FF:F8:42:0C:E6:64:62:0B:87:F7:E8:14:2F:25:95:4E:BD:00 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS212582
Prefixes:
    1: 185.208.168.0/24 (max: 32)
    2: 194.34.229.0/24 (max: 32)
    3: 185.177.82.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/AQ7_-EIM5mRiC4f36BQvJZVOvQA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306271146 (0x124153aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Apr  9 18:04:45 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=010efff8420ce664620b87f7e8142f25954ebd00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:75:7b:87:be:32:bb:d2:e9:06:50:9c:9c:a9:
                    f9:d0:86:c1:d4:c2:29:dc:7b:a2:0f:27:ad:99:59:
                    73:40:77:c7:c9:57:18:d3:4b:1e:f9:ea:c7:7c:fa:
                    2e:9d:94:d4:17:60:8e:86:39:01:2a:e4:94:f0:c8:
                    78:f5:67:e5:a0:f1:81:b4:3a:ef:be:9b:a5:2e:08:
                    e6:6f:60:7e:83:70:30:e8:b8:ff:dd:04:9a:33:1d:
                    e8:bf:f8:4e:51:1f:d1:c2:ab:9c:ee:46:71:bf:6d:
                    d5:65:38:3c:33:69:27:b6:28:4e:0f:94:1d:f4:88:
                    64:01:03:70:84:76:0b:74:d7:94:43:35:fc:ab:44:
                    98:29:d9:78:8a:62:79:cd:7d:08:92:76:6b:ff:58:
                    3f:6c:01:e9:d2:c0:64:c8:64:40:a0:35:bd:d1:a6:
                    bd:bd:c0:0e:8e:70:f7:fa:72:ae:6f:b4:2e:01:95:
                    a1:e3:e3:1e:b6:f6:c7:72:9f:39:99:48:10:5c:ca:
                    b3:e5:b0:ea:bc:16:b2:5c:b3:8e:c5:30:81:68:13:
                    16:ac:b5:81:9d:5b:33:8e:d1:34:02:aa:61:af:da:
                    be:59:51:cb:7d:46:b0:2d:16:07:be:a7:66:b2:11:
                    29:d4:cb:08:ed:88:6a:61:3d:18:48:0b:55:6a:a7:
                    81:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                01:0E:FF:F8:42:0C:E6:64:62:0B:87:F7:E8:14:2F:25:95:4E:BD:00
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/AQ7_-EIM5mRiC4f36BQvJZVOvQA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0......R..........".
    Signature Algorithm: sha256WithRSAEncryption
         b3:46:a3:d5:60:df:ec:94:f8:20:3f:03:e6:ef:4b:0a:30:b6:
         7d:7d:84:f3:fc:df:1e:f6:17:10:da:76:5c:9f:91:56:6a:cb:
         56:b6:a2:ac:03:ea:d1:2d:cb:3d:de:1f:c8:e6:33:37:c5:bf:
         9d:63:79:99:a7:36:a9:9c:fa:ca:77:46:15:a9:35:58:0d:06:
         27:d2:8b:e2:ff:83:b3:bc:66:fa:92:12:40:05:83:a2:00:97:
         98:ce:03:d0:05:ce:98:31:fd:be:21:f1:f3:83:14:c2:c1:0f:
         70:ca:f2:be:ae:d8:14:4f:b3:ab:b2:35:65:fb:cd:a8:93:61:
         30:98:c8:c7:5d:3d:0b:af:42:98:aa:15:d3:db:b0:f3:ba:60:
         58:88:95:86:d1:be:95:d3:04:b1:c0:60:f5:c7:da:ee:64:85:
         17:a1:38:32:29:68:b3:4a:ca:1f:93:03:24:d0:ef:bd:4a:17:
         97:27:20:09:64:90:f7:66:a1:9f:db:b8:3f:22:5a:e8:03:4b:
         79:b3:c2:32:d1:e3:26:e7:37:04:1e:3a:70:5a:68:eb:3f:d9:
         4c:fa:41:72:d3:7c:bb:3b:cf:21:94:a3:a7:4b:94:1b:28:66:
         08:63:41:7b:73:94:f2:fd:ae:3c:1a:d1:92:c3:cb:22:bd:8b:
         40:28:1c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat May 1 17:53:46 2021 by LibreSSL & rpki-client.