Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/f3_s60U3iDGgPighpi6XKgIjODQ.roa (download)

Subject key identifier:   7F:7F:EC:EB:45:37:88:31:A0:3E:28:21:A6:2E:97:2A:02:23:38:34 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS137523
Prefixes:
    1: 193.187.152.0/24 (max: 32)
    2: 185.215.214.0/24 (max: 32)
    3: 87.239.49.0/24 (max: 32)
    4: 185.253.251.0/24 (max: 32)
    5: 195.85.48.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/f3_s60U3iDGgPighpi6XKgIjODQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311367237 (0x128f1645)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Apr 23 03:14:45 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=7f7feceb45378831a03e2821a62e972a02233834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:f3:7b:a6:6a:43:53:f5:dd:df:2f:08:0f:
                    f2:3a:d7:ff:bf:ce:0c:d9:5d:ac:34:60:39:ff:95:
                    6e:13:8e:e4:7f:d9:d9:36:d5:a9:8f:b7:30:b7:17:
                    ec:bd:c5:65:39:18:36:2b:11:d5:2b:a4:5c:ca:c3:
                    80:09:af:ad:5b:ae:c3:87:9c:2f:e6:fb:4b:39:ca:
                    b7:cd:8c:38:d0:7c:a4:82:e2:16:5f:e6:1f:6e:a9:
                    f2:ec:aa:c4:00:a4:2f:3f:c5:95:f1:b1:7f:f8:f7:
                    f2:87:1e:e0:d3:db:a1:31:8a:4f:f6:ca:80:64:d1:
                    cd:eb:7a:67:39:ac:31:0c:eb:a3:7c:fd:de:ab:9f:
                    92:0c:06:b9:2e:37:f9:0c:3a:d6:cb:74:d3:a5:90:
                    ee:0c:23:56:18:83:25:7c:81:95:c6:60:41:4e:5d:
                    75:b4:8a:a1:79:64:24:5c:a2:a4:e2:fa:c3:4d:19:
                    d5:cf:31:44:10:b6:43:ce:a9:64:14:aa:1e:c8:7e:
                    49:b5:3d:b7:4b:89:e5:77:71:ce:fc:c5:c0:de:dc:
                    c6:44:db:a8:47:15:34:a4:36:16:4e:cc:b6:ab:c2:
                    7b:76:6a:43:27:e8:3e:68:07:59:63:4f:05:f5:89:
                    c4:aa:07:a4:1b:b9:cb:7a:b4:f5:cd:f5:cc:12:46:
                    2d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7F:7F:EC:EB:45:37:88:31:A0:3E:28:21:A6:2E:97:2A:02:23:38:34
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/f3_s60U3iDGgPighpi6XKgIjODQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0&0$....0....W.1......................U0
    Signature Algorithm: sha256WithRSAEncryption
         7c:4e:e7:15:a6:19:25:58:fb:41:34:e2:19:c4:60:38:7e:7a:
         ee:79:3f:c8:2e:67:d8:f4:ca:4f:f7:69:09:f4:85:c9:b7:25:
         ca:61:f9:7f:8c:22:9b:41:6f:f4:78:2a:ce:1d:f9:f9:e1:ee:
         e7:85:dd:47:13:6e:60:11:8b:b6:61:0b:df:46:bb:2d:0b:f1:
         66:03:1f:92:dd:34:c9:86:9c:37:3e:b1:ee:20:89:bb:27:73:
         32:1f:9e:12:14:cd:f2:93:6e:0a:f9:a1:a6:46:f9:e4:98:49:
         73:79:9d:ff:df:9d:6b:2f:47:b3:a6:5c:17:31:81:4d:ec:41:
         8d:fa:39:d9:80:b3:fc:da:ae:b0:7e:d9:fd:86:74:79:90:da:
         f7:27:47:9e:ce:64:a0:c7:a3:33:27:e1:3a:89:b2:37:9d:67:
         92:1a:0d:09:74:47:6d:d9:9d:41:ee:97:38:dc:b6:0f:02:8a:
         3a:bc:e3:4e:5e:7a:bb:dc:e3:de:20:88:07:27:eb:f4:2c:5e:
         80:72:91:fb:41:cc:06:d4:c5:1f:b0:42:db:d2:7d:c8:cb:7d:
         ce:9f:b6:0a:f2:31:99:ce:bc:12:4d:17:ed:0d:1f:56:1c:72:
         1b:36:a5:a8:b2:eb:9a:0f:f4:9e:a8:21:86:ea:18:ae:01:23:
         74:83:ae:f6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEEo8WRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIxMDQy
MzAzMTQ0NVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2Y3ZmVjZWI0NTM3
ODgzMWEwM2UyODIxYTYyZTk3MmEwMjIzMzgzNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALPG83umakNT9d3fLwgP8jrX/7/ODNldrDRgOf+VbhOO5H/Z
2TbVqY+3MLcX7L3FZTkYNisR1SukXMrDgAmvrVuuw4ecL+b7SznKt82MONB8pILi
Fl/mH26p8uyqxACkLz/FlfGxf/j38oce4NPboTGKT/bKgGTRzet6ZzmsMQzro3z9
3qufkgwGuS43+Qw61st006WQ7gwjVhiDJXyBlcZgQU5ddbSKoXlkJFyipOL6w00Z
1c8xRBC2Q86pZBSqHsh+SbU9t0uJ5XdxzvzFwN7cxkTbqEcVNKQ2Fk7MtqvCe3Zq
QyfoPmgHWWNPBfWJxKoHpBu5y3q09c31zBJGLWcCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBR/f+zrRTeIMaA+KCGmLpcqAiM4NDAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L2YzX3M2MFUzaURHZ1BpZ2hwaTZYS2dJak9EUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAFfvMQMEALnX1gMEALn9+wMEAMG7
mAMEAMNVMDANBgkqhkiG9w0BAQsFAAOCAQEAfE7nFaYZJVj7QTTiGcRgOH567nk/
yC5n2PTKT/dpCfSFybclymH5f4wim0Fv9Hgqzh35+eHu54XdRxNuYBGLtmEL30a7
LQvxZgMfkt00yYacNz6x7iCJuydzMh+eEhTN8pNuCvmhpkb55JhJc3md/9+day9H
s6ZcFzGBTexBjfo52YCz/NqusH7Z/YZ0eZDa9ydHns5koMejMyfhOomyN51nkhoN
CXRHbdmdQe6XONy2DwKKOrzjTl56u9zj3iCIByfr9CxegHKR+0HMBtTFH7BC29J9
yMt9zp+2CvIxmc68Ek0X7Q0fVhxyGzalqLLrmg/0nqghhuoYrgEjdIOu9g==
-----END CERTIFICATE-----

Generated at Fri Apr 23 07:36:16 2021 by LibreSSL & rpki-client.