Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/XbMNNSpfor5AHhiq5Xkdtov-2OU.roa (download)

Subject key identifier:   5D:B3:0D:35:2A:5F:A2:BE:40:1E:18:AA:E5:79:1D:B6:8B:FE:D8:E5 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS20473
Prefixes:
    1: 185.188.6.0/24 (max: 32)
    2: 193.160.214.0/24 (max: 32)
    3: 193.160.215.0/24 (max: 32)
    4: 84.39.184.0/24 (max: 24)
    5: 84.39.191.0/24 (max: 32)
    6: 84.39.187.0/24 (max: 32)
    7: 84.39.190.0/24 (max: 32)
    8: 185.208.168.0/22 (max: 32)
    9: 185.255.154.0/24 (max: 32)
   10: 45.67.17.0/24 (max: 32)
   11: 45.67.16.0/24 (max: 32)
   12: 85.208.152.0/22 (max: 32)
   13: 185.146.194.0/24 (max: 24)
   14: 185.133.75.0/24 (max: 32)
   15: 185.146.193.0/24 (max: 32)
   16: 94.140.20.0/22 (max: 32)
   17: 185.214.70.0/24 (max: 32)
   18: 92.119.150.0/24 (max: 32)
   19: 185.240.218.0/24 (max: 32)
   20: 92.119.149.0/24 (max: 32)
   21: 92.119.151.0/24 (max: 32)
   22: 185.240.219.0/24 (max: 32)
   23: 193.187.152.0/24 (max: 32)
   24: 185.133.195.0/24 (max: 32)
   25: 185.133.193.0/24 (max: 32)
   26: 193.160.212.0/24 (max: 32)
   27: 185.119.255.0/24 (max: 32)
   28: 185.120.7.0/24 (max: 32)
   29: 185.120.6.0/24 (max: 32)
   30: 185.120.5.0/24 (max: 32)
   31: 185.120.15.0/24 (max: 32)
   32: 185.120.14.0/24 (max: 32)
   33: 185.120.20.0/24 (max: 32)
   34: 185.120.23.0/24 (max: 24)
   35: 185.120.21.0/24 (max: 32)
   36: 185.207.176.0/22 (max: 32)
   37: 79.174.23.0/24 (max: 32)
   38: 79.174.21.0/24 (max: 32)
   39: 79.174.22.0/24 (max: 32)
   40: 195.85.68.0/22 (max: 32)
   41: 185.193.36.0/22 (max: 32)
   42: 185.172.165.0/24 (max: 32)
   43: 185.172.166.0/24 (max: 32)
   44: 5.253.138.0/24 (max: 32)
   45: 195.85.32.0/22 (max: 32)
   46: 195.85.40.0/22 (max: 32)
   47: 195.85.48.0/23 (max: 32)
   48: 185.253.251.0/24 (max: 32)
   49: 147.78.220.0/24 (max: 32)
   50: 147.78.221.0/24 (max: 32)
   51: 37.10.112.0/24 (max: 32)
   52: 94.199.102.0/24 (max: 32)
   53: 2.57.252.0/22 (max: 32)
   54: 185.185.251.0/24 (max: 24)
   55: 185.185.250.0/24 (max: 32)
   56: 185.172.145.0/24 (max: 32)
   57: 195.85.10.0/23 (max: 32)
   58: 185.226.73.0/24 (max: 32)
   59: 185.226.74.0/24 (max: 32)
   60: 185.144.103.0/24 (max: 32)
   61: 185.144.102.0/24 (max: 32)
   62: 185.144.101.0/24 (max: 32)
   63: 193.16.8.0/22 (max: 32)
   64: 185.117.20.0/24 (max: 32)
   65: 185.171.2.0/24 (max: 32)
   66: 185.171.1.0/24 (max: 32)
   67: 185.171.0.0/24 (max: 32)
   68: 185.251.233.0/24 (max: 32)
   69: 185.251.235.0/24 (max: 32)
   70: 185.251.234.0/24 (max: 32)
   71: 46.251.239.0/24 (max: 32)
   72: 194.36.101.0/24 (max: 32)
   73: 194.36.100.0/24 (max: 32)
   74: 185.238.242.0/24 (max: 32)
   75: 185.238.241.0/24 (max: 32)
   76: 45.10.3.0/24 (max: 32)
   77: 45.10.2.0/24 (max: 32)
   78: 213.232.104.0/22 (max: 32)
   79: 194.124.64.0/23 (max: 32)
   80: 185.137.180.0/22 (max: 32)
   81: 185.238.240.0/24 (max: 32)
   82: 5.183.206.0/24 (max: 32)
   83: 5.183.207.0/24 (max: 32)
   84: 185.177.20.0/22 (max: 32)
   85: 79.143.51.0/24 (max: 32)
   86: 79.143.49.0/24 (max: 32)
   87: 79.143.52.0/24 (max: 32)
   88: 79.143.55.0/24 (max: 32)
   89: 79.143.53.0/24 (max: 32)
   90: 79.143.62.0/24 (max: 32)
   91: 79.143.61.0/24 (max: 32)
   92: 185.211.50.0/24 (max: 24)
   93: 185.211.49.0/24 (max: 32)
   94: 185.211.48.0/24 (max: 24)
   95: 194.56.76.0/22 (max: 32)
   96: 193.22.159.0/24 (max: 32)
   97: 185.177.80.0/22 (max: 32)
   98: 91.189.184.0/22 (max: 32)
   99: 185.142.143.0/24 (max: 32)
  100: 85.209.253.0/24 (max: 32)
  101: 194.34.230.0/24 (max: 32)
  102: 194.34.231.0/24 (max: 32)
  103: 77.243.92.0/22 (max: 32)
  104: 185.122.56.0/22 (max: 32)
  105: 185.115.131.0/24 (max: 32)
  106: 188.116.19.0/24 (max: 32)
  107: 45.15.36.0/22 (max: 32)
  108: 188.116.49.0/24 (max: 32)
  109: 185.115.243.0/24 (max: 32)
  110: 193.149.160.0/22 (max: 32)
  111: 185.115.242.0/24 (max: 32)
  112: 213.190.20.0/22 (max: 32)
  113: 185.215.212.0/22 (max: 32)
  114: 195.7.1.0/24 (max: 32)
  115: 195.7.3.0/24 (max: 32)
  116: 185.182.48.0/24 (max: 32)
  117: 185.182.49.0/24 (max: 32)
  118: 185.141.205.0/24 (max: 32)
  119: 185.182.62.0/24 (max: 32)
  120: 185.114.225.0/24 (max: 32)
  121: 185.141.207.0/24 (max: 32)
  122: 185.114.227.0/24 (max: 32)
  123: 193.222.100.0/24 (max: 32)
  124: 193.222.103.0/24 (max: 32)
  125: 91.188.200.0/22 (max: 32)
  126: 45.81.8.0/22 (max: 32)
  127: 45.14.44.0/22 (max: 32)
  128: 62.122.24.0/22 (max: 32)
  129: 128.0.116.0/22 (max: 32)
  130: 45.13.244.0/22 (max: 32)
  131: 185.236.80.0/24 (max: 32)
  132: 185.236.83.0/24 (max: 32)
  133: 185.249.216.0/24 (max: 32)
  134: 185.249.218.0/24 (max: 32)
  135: 185.188.4.0/22 (max: 32)
  136: 45.12.160.0/22 (max: 32)
  137: 84.39.184.0/21 (max: 32)
  138: 45.80.176.0/22 (max: 32)
  139: 85.208.155.0/24 (max: 32)
  140: 85.208.153.0/24 (max: 32)
  141: 185.133.72.0/22 (max: 32)
  142: 185.214.68.0/22 (max: 32)
  143: 92.119.148.0/22 (max: 32)
  144: 185.133.192.0/22 (max: 32)
  145: 2.59.174.0/24 (max: 32)
  146: 2.59.175.0/24 (max: 32)
  147: 185.120.4.0/22 (max: 32)
  148: 185.120.12.0/22 (max: 32)
  149: 185.120.20.0/22 (max: 32)
  150: 185.207.178.0/24 (max: 32)
  151: 185.207.177.0/24 (max: 32)
  152: 185.227.240.0/22 (max: 32)
  153: 79.174.20.0/22 (max: 32)
  154: 185.193.36.0/24 (max: 32)
  155: 185.193.39.0/24 (max: 32)
  156: 185.172.164.0/22 (max: 32)
  157: 185.253.248.0/22 (max: 32)
  158: 213.232.107.0/24 (max: 32)
  159: 87.239.48.0/22 (max: 32)
  160: 94.199.100.0/22 (max: 32)
  161: 2.57.255.0/24 (max: 32)
  162: 77.83.156.0/24 (max: 32)
  163: 77.83.158.0/24 (max: 32)
  164: 77.83.159.0/24 (max: 32)
  165: 77.83.157.0/24 (max: 32)
  166: 185.144.100.0/22 (max: 32)
  167: 193.16.9.0/24 (max: 32)
  168: 193.16.10.0/24 (max: 32)
  169: 185.117.20.0/22 (max: 32)
  170: 185.171.0.0/22 (max: 32)
  171: 194.36.100.0/22 (max: 32)
  172: 45.10.0.0/22 (max: 32)
  173: 185.137.181.0/24 (max: 32)
  174: 194.124.64.0/24 (max: 32)
  175: 194.124.67.0/24 (max: 32)
  176: 194.124.65.0/24 (max: 32)
  177: 194.124.66.0/24 (max: 32)
  178: 81.16.138.0/24 (max: 32)
  179: 81.16.137.0/24 (max: 32)
  180: 81.16.136.0/24 (max: 32)
  181: 185.238.240.0/22 (max: 32)
  182: 5.183.204.0/22 (max: 32)
  183: 79.143.48.0/20 (max: 32)
  184: 185.211.48.0/22 (max: 32)
  185: 194.56.76.0/24 (max: 32)
  186: 194.56.77.0/24 (max: 32)
  187: 194.56.79.0/24 (max: 24)
  188: 185.224.144.0/22 (max: 32)
  189: 91.189.184.0/24 (max: 32)
  190: 91.189.185.0/24 (max: 32)
  191: 91.189.187.0/24 (max: 32)
  192: 194.34.228.0/22 (max: 32)
  193: 77.243.95.0/24 (max: 32)
  194: 77.243.93.0/24 (max: 32)
  195: 185.122.39.0/24 (max: 32)
  196: 185.115.124.0/22 (max: 32)
  197: 188.116.18.0/23 (max: 32)
  198: 188.116.48.0/23 (max: 32)
  199: 185.115.240.0/22 (max: 32)
  200: 213.190.21.0/24 (max: 32)
  201: 213.190.23.0/24 (max: 32)
  202: 213.190.20.0/24 (max: 32)
  203: 185.215.214.0/24 (max: 32)
  204: 195.7.0.0/22 (max: 32)
  205: 185.141.204.0/22 (max: 32)
  206: 193.222.100.0/22 (max: 32)
  207: 45.14.44.0/24 (max: 32)
  208: 45.14.45.0/24 (max: 32)
  209: 45.13.245.0/24 (max: 32)
  210: 185.236.80.0/22 (max: 32)
  211: 185.249.216.0/22 (max: 32)
  212: 2a06:7a02::/48 (max: 48)
  213: 2a0b:1900::/29 (max: 128)
  214: 2a06:7a05::/48 (max: 48)
  215: 2a0c:da01::/48 (max: 48)
  216: 2a0e:c500::/29 (max: 128)
  217: 2a06:8dc0::/42 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/XbMNNSpfor5AHhiq5Xkdtov-2OU.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321506974 (0x1329ce9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: May 17 17:08:10 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5db30d352a5fa2be401e18aae5791db68bfed8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:93:92:60:83:71:2e:e1:61:c2:c6:3d:45:ac:
                    85:0c:4a:0a:7a:d7:1e:e2:cf:15:4f:a4:46:68:e9:
                    c3:08:9c:b2:76:5a:06:6d:48:20:cd:06:35:ee:23:
                    71:64:09:8d:1b:f9:ea:84:99:a1:a9:a2:7d:f4:8a:
                    c1:2f:60:53:e1:69:31:ed:58:42:ef:01:a7:f5:a5:
                    2e:49:95:07:7f:44:db:8e:98:11:fb:f1:c0:9f:85:
                    7b:c3:f9:55:9b:3b:f6:fa:a2:0e:2d:0c:b6:6b:e3:
                    06:53:90:4e:79:69:99:9b:18:ce:5e:fd:5d:8f:02:
                    b8:ed:d6:74:47:9a:92:c0:4c:9b:be:3e:51:c1:24:
                    5f:f7:a2:9d:7a:9f:be:c6:fd:47:3b:31:e6:57:c4:
                    56:97:8d:4d:28:6f:4c:5f:ad:0e:08:99:2d:ef:2d:
                    2e:d1:bf:2c:6f:da:89:1f:47:e6:91:57:b1:e5:21:
                    44:bc:8c:1f:58:b8:30:9f:a1:42:bf:e7:6c:d8:60:
                    61:17:cc:ca:b4:0e:7a:5d:c3:6f:49:36:22:cd:d9:
                    4b:44:d7:4b:3d:2d:16:94:57:21:ad:53:ee:46:bd:
                    e1:1c:ff:fc:6a:e1:4e:b1:8c:46:bc:96:13:92:5f:
                    4b:bd:92:5b:37:1b:9c:a7:b8:7b:4b:9d:92:e7:c3:
                    78:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5D:B3:0D:35:2A:5F:A2:BE:40:1E:18:AA:E5:79:1D:B6:8B:FE:D8:E5
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/XbMNNSpfor5AHhiq5Xkdtov-2OU.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0...0..h....0..`....9.....;................%
p...-
....-.....-
....-.,...-.$...-C....-P....-Q..........>z....MS....M.\...O.0...O..0....Q.....Q.....T'....U.....U.....W.0...[.....[.....\w....^.....^.d.....t....N.....r.....r.....s|....s.....s.....u.....w.....x.....x.....x.....z'....z8.....H.............................d0..........................................P.....0.....>.................$.................0.....D............0......I.....J...........P..................0.............................t.....t0.........................................d....".....$d....8L....|@..........U
....U ....U(....U0....UD...........h08....02...*.z......*.z......*........*......*........*...
    Signature Algorithm: sha256WithRSAEncryption
         3b:d7:57:c2:10:03:da:3d:be:89:2d:47:fd:a3:0d:cb:dd:db:
         2b:86:f8:85:29:98:86:be:5d:57:9a:a1:fa:bb:5b:2c:d5:38:
         93:1b:34:ad:bf:f7:c0:05:fb:18:e6:ac:db:69:4d:13:7e:34:
         1c:8d:11:14:68:ff:ba:83:42:ec:2a:e4:bf:47:0e:37:dd:a8:
         2b:43:6f:f6:bd:be:43:8a:f4:62:78:c6:49:47:8a:70:10:ae:
         7f:ea:0b:b3:a2:ae:94:e9:80:6c:bc:d9:aa:d7:ab:7e:b7:56:
         81:ae:9b:ea:7e:0e:23:06:2c:1d:eb:76:0e:86:81:b4:a8:97:
         ba:87:df:4d:98:77:9b:90:07:90:03:8e:0a:ae:60:81:4e:63:
         16:97:d3:ea:1b:26:96:c9:74:b1:ee:de:47:d9:07:33:34:57:
         67:3d:46:81:a6:a7:40:3e:f6:49:e9:c8:06:0f:2e:fd:e8:86:
         c4:0d:49:bd:bc:3e:da:f0:bd:f7:46:19:84:9d:e3:a6:76:68:
         6f:91:fe:93:63:38:5f:7c:e1:95:a2:eb:dd:57:aa:a7:00:76:
         5b:4f:c7:97:de:82:e7:99:5a:2f:c6:c4:0a:99:a3:69:74:8d:
         d1:3b:d8:d8:29:c2:9b:8b:72:bc:9d:23:e4:c7:a5:14:e8:e0:
         e1:b5:4b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue May 25 07:53:28 2021 by LibreSSL & rpki-client.