Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/AaDyqFHOHPknrYDPq1sNrS4dlw4.roa (download)

Subject key identifier:   01:A0:F2:A8:51:CE:1C:F9:27:AD:80:CF:AB:5B:0D:AD:2E:1D:97:0E 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS140107
Prefixes:
    1: 45.12.234.0/23 (max: 32)
    2: 45.12.162.0/24 (max: 32)
    3: 193.16.8.0/24 (max: 24)
    4: 185.117.23.0/24 (max: 24)
    5: 84.39.185.0/24 (max: 32)
    6: 84.39.190.0/24 (max: 32)
    7: 84.39.188.0/24 (max: 24)
    8: 84.39.191.0/24 (max: 32)
    9: 45.80.176.0/22 (max: 32)
   10: 185.137.183.0/24 (max: 24)
   11: 45.83.252.0/23 (max: 32)
   12: 185.133.74.0/24 (max: 24)
   13: 185.146.195.0/24 (max: 24)
   14: 185.177.22.0/24 (max: 24)
   15: 45.82.204.0/23 (max: 32)
   16: 94.140.26.0/23 (max: 24)
   17: 79.143.50.0/24 (max: 24)
   18: 79.143.57.0/24 (max: 24)
   19: 79.143.54.0/24 (max: 24)
   20: 79.143.63.0/24 (max: 24)
   21: 185.240.236.0/22 (max: 24)
   22: 185.120.33.0/24 (max: 24)
   23: 45.81.236.0/22 (max: 32)
   24: 45.81.244.0/24 (max: 32)
   25: 45.81.244.0/22 (max: 32)
   26: 45.81.246.0/24 (max: 32)
   27: 45.81.246.0/23 (max: 32)
   28: 45.81.247.0/24 (max: 32)
   29: 45.135.220.0/22 (max: 32)
   30: 185.115.129.0/24 (max: 24)
   31: 45.85.192.0/23 (max: 24)
   32: 45.85.192.0/24 (max: 32)
   33: 45.85.193.0/24 (max: 24)
   34: 188.116.49.0/24 (max: 24)
   35: 188.116.48.0/24 (max: 24)
   36: 45.15.36.0/23 (max: 32)
   37: 188.116.48.0/23 (max: 32)
   38: 185.253.249.0/24 (max: 24)
   39: 45.94.164.0/22 (max: 24)
   40: 185.182.63.0/24 (max: 24)
   41: 45.128.28.0/22 (max: 24)
   42: 45.91.26.0/23 (max: 24)
   43: 45.91.25.0/24 (max: 24)
   44: 45.81.10.0/23 (max: 32)
   45: 45.81.8.0/23 (max: 32)
   46: 94.199.100.0/24 (max: 24)
   47: 45.135.100.0/22 (max: 24)
   48: 45.14.47.0/24 (max: 32)
   49: 185.172.144.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/AaDyqFHOHPknrYDPq1sNrS4dlw4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352066225 (0x14fc1ab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Aug  5 11:42:05 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=01a0f2a851ce1cf927ad80cfab5b0dad2e1d970e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:82:cf:63:54:85:c4:dc:16:28:fc:cf:a3:f0:
                    d9:07:66:cd:61:8c:b9:5f:cf:25:45:ba:1d:0f:65:
                    31:b6:21:c3:41:96:6b:b8:0f:f0:83:96:ef:10:c6:
                    dc:66:86:70:35:ea:e9:f1:68:64:e8:f5:f4:7a:10:
                    9c:c1:67:e5:87:ff:fd:88:99:d1:71:1c:66:2a:2d:
                    1a:2a:10:7e:df:0c:ce:a0:76:1b:9c:81:a3:6f:b4:
                    72:7d:f9:4f:a8:2e:0b:4c:04:cb:76:3a:de:a1:79:
                    44:38:44:17:b7:92:5c:64:88:bb:f1:24:e3:1d:7d:
                    9e:0b:72:70:bc:a2:1a:0b:40:d2:73:68:0c:59:28:
                    c1:19:c5:c9:a8:32:6f:41:03:8c:2f:9b:e9:3e:6a:
                    53:b4:4a:70:aa:b0:13:a5:ee:dd:ca:ff:77:94:eb:
                    3d:72:40:28:3a:d9:0d:ec:c5:cd:92:47:c8:50:64:
                    98:4c:66:66:95:f5:94:ea:6d:5d:72:46:60:e8:c0:
                    f5:df:29:5d:26:87:90:f3:e9:f7:0c:35:c3:bf:33:
                    15:3f:12:04:15:45:af:7d:f0:76:5e:d7:b1:6f:f1:
                    78:d9:1b:6f:45:bf:70:21:ac:d7:f2:14:59:1d:24:
                    0c:a3:ac:f4:f4:57:d4:da:df:2b:29:2d:98:b0:30:
                    11:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                01:A0:F2:A8:51:CE:1C:F9:27:AD:80:CF:AB:5B:0D:AD:2E:1D:97:0E
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/AaDyqFHOHPknrYDPq1sNrS4dlw4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0..0......0.....-.....-.....-./...-.$...-P....-Q....-Q....-Q....-R....-S....-U.0....-[....-[....-^....-.....-.d...-.....O.2...O.6...O.9...O.?...T'....T'....T'....^.....^.d....s.....u.....x!.....J.............................?................t0......
    Signature Algorithm: sha256WithRSAEncryption
         4b:6c:7d:d9:79:e5:8b:6e:69:bd:bd:ab:ae:c3:37:11:ae:5b:
         33:d6:64:50:f7:b6:30:45:59:9a:62:ca:25:83:c5:01:3f:d1:
         0f:e7:0f:27:59:9a:6e:1d:f8:5a:f1:f1:1a:33:15:6e:da:45:
         5e:cb:eb:cc:09:71:bb:9b:47:c3:e0:07:99:0b:d0:93:21:f9:
         d0:ec:ed:7b:46:64:1d:32:f2:83:4e:1f:b1:82:b4:7e:4c:5f:
         7b:cb:d5:68:91:a9:97:c0:d9:98:f7:48:93:df:ad:89:33:89:
         36:1c:4c:9b:1b:f7:9b:d5:70:87:27:58:0c:cc:99:c8:46:1c:
         75:19:f5:76:8e:35:71:53:ce:a5:cc:f0:b4:77:46:a9:9a:40:
         20:9a:a4:94:21:95:ce:15:f8:e9:70:05:39:02:90:91:53:67:
         c9:5a:d9:2d:85:9d:c3:21:c4:87:4d:ba:f8:8b:40:b8:c0:a3:
         28:44:fa:11:19:0f:50:7d:f3:e0:e6:c4:6c:71:28:52:31:a3:
         06:35:83:4a:d1:f4:ad:9f:ef:1a:52:a5:7d:84:a4:57:a2:3b:
         dd:94:1c:b8:29:02:3e:1b:b4:88:a1:7c:b0:44:62:f3:63:f3:
         0c:c7:3a:ce:01:1f:99:56:0b:c5:a6:a2:2c:a5:42:a0:57:d2:
         ee:fe:ab:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Aug 5 13:46:03 2021 by LibreSSL & rpki-client.