Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hqM7M5K9vVyRiTdbsePjDe7Blf4.roa (download)

Subject key identifier:   86:A3:3B:33:92:BD:BD:5C:91:89:37:5B:B1:E3:E3:0D:EE:C1:95:FE 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS41546
Prefixes:
    1: 185.119.253.0/24 (max: 24)
    2: 2a06:82c7::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hqM7M5K9vVyRiTdbsePjDe7Blf4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266593210 (0xfe3e3ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  2 13:16:05 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=86a33b3392bdbd5c9189375bb1e3e30deec195fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5b:52:8a:c6:d6:3e:ea:b9:74:40:a5:b4:ff:
                    b8:03:87:e8:53:e4:56:c8:15:45:a3:f1:fd:da:53:
                    06:6d:52:4e:38:fc:0e:05:79:69:34:81:35:54:6f:
                    4d:98:16:02:c4:f4:09:95:ec:a1:a0:8e:47:cd:43:
                    4c:5d:d3:e5:29:0f:8e:f7:c5:2e:9a:da:08:81:81:
                    b6:e3:2d:33:50:d1:85:8f:31:28:d3:4c:49:f6:8d:
                    38:e3:d2:3f:ba:7e:43:e6:df:0c:08:ec:26:f6:a7:
                    b3:e2:dc:ed:02:32:f7:a1:4e:04:2c:d4:b5:45:61:
                    6d:58:6d:77:37:d6:4b:35:73:5e:11:fa:f7:5e:b8:
                    80:8e:47:67:f9:83:82:f7:1e:e9:86:81:67:7a:69:
                    aa:d2:c3:56:2a:5d:b4:77:ff:24:e3:f9:36:a6:0b:
                    6d:1f:c7:1c:57:5a:51:13:d1:49:0a:11:fc:b0:d8:
                    00:e0:31:f3:f6:10:7f:bb:88:62:67:c1:5d:4d:77:
                    a9:6a:15:5e:c5:6a:b3:ee:31:33:ba:4d:f7:06:cc:
                    fa:b8:5a:4f:7f:9b:8c:4e:d5:cc:90:37:ea:01:4f:
                    d0:6e:0a:21:89:27:ae:0f:23:09:44:86:6c:b5:45:
                    68:53:b6:ab:f5:3d:a0:b7:60:f1:47:4a:25:da:b4:
                    f5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                86:A3:3B:33:92:BD:BD:5C:91:89:37:5B:B1:E3:E3:0D:EE:C1:95:FE
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hqM7M5K9vVyRiTdbsePjDe7Blf4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.119.253.0/24
                IPv6:
                  2a06:82c7::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:5c:0c:ef:05:47:04:27:5c:ff:c5:40:d1:d0:8d:d1:01:9f:
         29:4e:c6:1e:28:70:2e:af:76:40:84:5a:9f:6c:db:6f:ae:ce:
         3c:56:8e:a0:d7:cb:bc:8c:6c:a4:99:bb:c8:79:d0:64:d4:77:
         e8:3b:75:0a:41:13:65:24:43:68:c4:ab:a8:1d:83:e7:25:20:
         2b:61:3b:06:3d:34:26:ed:1a:39:cb:d4:9e:3e:45:6a:ff:dd:
         f8:41:49:b4:5d:73:d9:c0:4c:e5:93:2c:cc:09:6d:7b:64:bf:
         2f:ba:8d:2a:35:d8:31:da:9a:90:15:fc:23:65:4b:42:5d:4a:
         8c:e7:33:fc:8e:ce:7b:ee:fe:70:26:85:b3:fa:1b:68:63:fa:
         56:15:67:55:f4:2c:3d:64:8a:81:86:28:7a:27:b9:30:a5:54:
         06:4f:21:d6:21:73:b5:f1:74:aa:93:5d:44:11:f3:e8:b1:ec:
         df:69:5d:ba:f6:7c:0d:dc:56:2b:65:f9:ec:10:2a:61:4c:3c:
         5a:47:2f:5d:fd:59:81:3a:2b:2b:5b:2f:3a:02:c2:25:48:be:
         bc:02:df:6d:bb:a4:c2:53:a4:1c:db:b7:25:6f:e7:5d:4e:5e:
         6e:c2:62:33:7e:5b:8e:91:9f:2d:19:94:9d:99:a9:fb:24:26:
         b4:8d:24:f5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIED+PjujANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIxMDEw
MjEzMTYwNVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODZhMzNiMzM5MmJk
YmQ1YzkxODkzNzViYjFlM2UzMGRlZWMxOTVmZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOVbUorG1j7quXRApbT/uAOH6FPkVsgVRaPx/dpTBm1STjj8
DgV5aTSBNVRvTZgWAsT0CZXsoaCOR81DTF3T5SkPjvfFLpraCIGBtuMtM1DRhY8x
KNNMSfaNOOPSP7p+Q+bfDAjsJvans+Lc7QIy96FOBCzUtUVhbVhtdzfWSzVzXhH6
9164gI5HZ/mDgvce6YaBZ3ppqtLDVipdtHf/JOP5NqYLbR/HHFdaURPRSQoR/LDY
AOAx8/YQf7uIYmfBXU13qWoVXsVqs+4xM7pN9wbM+rhaT3+bjE7VzJA36gFP0G4K
IYknrg8jCUSGbLVFaFO2q/U9oLdg8UdKJdq09bECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSGozszkr29XJGJN1ux4+MN7sGV/jAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L2hxTTdNNUs5dlZ5UmlUZGJzZVBqRGU3QmxmNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEALl3/TAPBAIAAjAJAwcAKgaCxwAA
MA0GCSqGSIb3DQEBCwUAA4IBAQDGXAzvBUcEJ1z/xUDR0I3RAZ8pTsYeKHAur3ZA
hFqfbNtvrs48Vo6g18u8jGykmbvIedBk1HfoO3UKQRNlJENoxKuoHYPnJSArYTsG
PTQm7Ro5y9SePkVq/934QUm0XXPZwEzlkyzMCW17ZL8vuo0qNdgx2pqQFfwjZUtC
XUqM5zP8js577v5wJoWz+htoY/pWFWdV9Cw9ZIqBhih6J7kwpVQGTyHWIXO18XSq
k11EEfPosezfaV269nwN3FYrZfnsECphTDxaRy9d/VmBOisrWy86AsIlSL68At9t
u6TCU6Qc27clb+ddTl5uwmIzfluOkZ8tGZSdman7JCa0jST1
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:04:59 2021 by LibreSSL & rpki-client.