Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ikSW-zqFFlMQ2ucEONb1swqdY_Y.roa (download)

Subject key identifier:   8A:44:96:FB:3A:85:16:53:10:DA:E7:04:38:D6:F5:B3:0A:9D:63:F6 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS20473
Prefixes:
    1: 185.188.6.0/24 (max: 32)
    2: 193.160.214.0/24 (max: 32)
    3: 193.160.215.0/24 (max: 32)
    4: 84.39.184.0/24 (max: 24)
    5: 84.39.191.0/24 (max: 32)
    6: 84.39.187.0/24 (max: 32)
    7: 84.39.190.0/24 (max: 32)
    8: 185.208.168.0/22 (max: 32)
    9: 185.255.154.0/24 (max: 32)
   10: 45.67.17.0/24 (max: 32)
   11: 45.67.16.0/24 (max: 32)
   12: 85.208.152.0/22 (max: 32)
   13: 185.146.194.0/24 (max: 24)
   14: 185.133.75.0/24 (max: 32)
   15: 185.146.193.0/24 (max: 32)
   16: 94.140.12.0/23 (max: 32)
   17: 94.140.20.0/22 (max: 32)
   18: 185.214.70.0/24 (max: 32)
   19: 92.119.150.0/24 (max: 32)
   20: 185.240.218.0/24 (max: 32)
   21: 92.119.149.0/24 (max: 32)
   22: 92.119.151.0/24 (max: 32)
   23: 185.240.219.0/24 (max: 32)
   24: 193.187.152.0/24 (max: 32)
   25: 185.133.195.0/24 (max: 32)
   26: 185.133.193.0/24 (max: 32)
   27: 193.160.212.0/24 (max: 32)
   28: 185.119.255.0/24 (max: 32)
   29: 185.120.7.0/24 (max: 32)
   30: 185.120.6.0/24 (max: 32)
   31: 185.120.5.0/24 (max: 32)
   32: 185.120.15.0/24 (max: 32)
   33: 185.120.14.0/24 (max: 32)
   34: 185.120.20.0/24 (max: 32)
   35: 185.120.23.0/24 (max: 24)
   36: 185.120.21.0/24 (max: 32)
   37: 185.207.176.0/22 (max: 32)
   38: 79.174.23.0/24 (max: 32)
   39: 79.174.21.0/24 (max: 32)
   40: 79.174.22.0/24 (max: 32)
   41: 195.85.68.0/22 (max: 32)
   42: 185.193.36.0/22 (max: 32)
   43: 185.172.165.0/24 (max: 32)
   44: 185.172.166.0/24 (max: 32)
   45: 5.253.138.0/24 (max: 32)
   46: 195.85.32.0/22 (max: 32)
   47: 195.85.40.0/22 (max: 32)
   48: 195.85.48.0/23 (max: 32)
   49: 185.253.251.0/24 (max: 32)
   50: 147.78.220.0/24 (max: 32)
   51: 147.78.221.0/24 (max: 32)
   52: 37.10.112.0/24 (max: 32)
   53: 94.199.102.0/24 (max: 32)
   54: 2.57.252.0/22 (max: 32)
   55: 185.185.251.0/24 (max: 24)
   56: 185.185.250.0/24 (max: 32)
   57: 185.172.145.0/24 (max: 32)
   58: 195.85.10.0/23 (max: 32)
   59: 185.226.73.0/24 (max: 32)
   60: 185.226.74.0/24 (max: 32)
   61: 185.144.103.0/24 (max: 32)
   62: 185.144.102.0/24 (max: 32)
   63: 185.144.101.0/24 (max: 32)
   64: 193.16.8.0/22 (max: 32)
   65: 185.117.20.0/24 (max: 32)
   66: 185.171.2.0/24 (max: 32)
   67: 185.171.1.0/24 (max: 32)
   68: 185.171.0.0/24 (max: 32)
   69: 185.251.233.0/24 (max: 32)
   70: 185.251.235.0/24 (max: 32)
   71: 185.251.234.0/24 (max: 32)
   72: 46.251.239.0/24 (max: 32)
   73: 194.36.101.0/24 (max: 32)
   74: 194.36.100.0/24 (max: 32)
   75: 185.238.242.0/24 (max: 32)
   76: 185.238.241.0/24 (max: 32)
   77: 45.10.3.0/24 (max: 32)
   78: 45.10.2.0/24 (max: 32)
   79: 213.232.104.0/22 (max: 32)
   80: 194.124.64.0/23 (max: 32)
   81: 185.137.180.0/22 (max: 32)
   82: 185.238.240.0/24 (max: 32)
   83: 5.183.206.0/24 (max: 32)
   84: 5.183.207.0/24 (max: 32)
   85: 185.177.20.0/22 (max: 32)
   86: 79.143.51.0/24 (max: 32)
   87: 79.143.49.0/24 (max: 32)
   88: 79.143.52.0/24 (max: 32)
   89: 79.143.55.0/24 (max: 32)
   90: 79.143.53.0/24 (max: 32)
   91: 79.143.62.0/24 (max: 32)
   92: 79.143.61.0/24 (max: 32)
   93: 185.211.50.0/24 (max: 24)
   94: 185.211.49.0/24 (max: 32)
   95: 185.211.48.0/24 (max: 24)
   96: 194.56.76.0/22 (max: 32)
   97: 193.22.159.0/24 (max: 32)
   98: 185.177.80.0/22 (max: 32)
   99: 91.189.184.0/22 (max: 32)
  100: 185.142.143.0/24 (max: 32)
  101: 85.209.253.0/24 (max: 32)
  102: 194.34.230.0/24 (max: 32)
  103: 194.34.231.0/24 (max: 32)
  104: 77.243.92.0/22 (max: 32)
  105: 185.122.56.0/22 (max: 32)
  106: 185.115.131.0/24 (max: 32)
  107: 188.116.19.0/24 (max: 32)
  108: 45.15.36.0/22 (max: 32)
  109: 188.116.49.0/24 (max: 32)
  110: 185.115.243.0/24 (max: 32)
  111: 193.149.160.0/22 (max: 32)
  112: 185.115.242.0/24 (max: 32)
  113: 213.190.20.0/22 (max: 32)
  114: 185.215.212.0/22 (max: 32)
  115: 195.7.1.0/24 (max: 32)
  116: 195.7.3.0/24 (max: 32)
  117: 185.182.48.0/24 (max: 32)
  118: 185.182.49.0/24 (max: 32)
  119: 185.141.205.0/24 (max: 32)
  120: 185.182.62.0/24 (max: 32)
  121: 185.114.225.0/24 (max: 32)
  122: 185.141.207.0/24 (max: 32)
  123: 185.114.227.0/24 (max: 32)
  124: 193.222.100.0/24 (max: 32)
  125: 193.222.103.0/24 (max: 32)
  126: 91.188.200.0/22 (max: 32)
  127: 45.81.8.0/22 (max: 32)
  128: 45.14.44.0/22 (max: 32)
  129: 62.122.24.0/22 (max: 32)
  130: 128.0.116.0/22 (max: 32)
  131: 45.13.244.0/22 (max: 32)
  132: 185.236.80.0/24 (max: 32)
  133: 185.236.83.0/24 (max: 32)
  134: 185.249.216.0/24 (max: 32)
  135: 185.249.218.0/24 (max: 32)
  136: 185.188.4.0/22 (max: 32)
  137: 45.12.160.0/22 (max: 32)
  138: 84.39.184.0/21 (max: 32)
  139: 45.80.176.0/22 (max: 32)
  140: 85.208.155.0/24 (max: 32)
  141: 85.208.153.0/24 (max: 32)
  142: 185.133.72.0/22 (max: 32)
  143: 185.214.68.0/22 (max: 32)
  144: 92.119.148.0/22 (max: 32)
  145: 185.133.192.0/22 (max: 32)
  146: 2.59.174.0/24 (max: 32)
  147: 2.59.175.0/24 (max: 32)
  148: 185.120.4.0/22 (max: 32)
  149: 185.120.12.0/22 (max: 32)
  150: 185.120.20.0/22 (max: 32)
  151: 185.207.178.0/24 (max: 32)
  152: 185.207.177.0/24 (max: 32)
  153: 185.227.240.0/22 (max: 32)
  154: 79.174.20.0/22 (max: 32)
  155: 185.193.36.0/24 (max: 32)
  156: 185.193.39.0/24 (max: 32)
  157: 185.172.164.0/22 (max: 32)
  158: 185.253.248.0/22 (max: 32)
  159: 213.232.107.0/24 (max: 32)
  160: 87.239.48.0/22 (max: 32)
  161: 94.199.100.0/22 (max: 32)
  162: 2.57.255.0/24 (max: 32)
  163: 77.83.156.0/24 (max: 32)
  164: 77.83.158.0/24 (max: 32)
  165: 77.83.159.0/24 (max: 32)
  166: 77.83.157.0/24 (max: 32)
  167: 185.144.100.0/22 (max: 32)
  168: 193.16.9.0/24 (max: 32)
  169: 193.16.10.0/24 (max: 32)
  170: 185.117.20.0/22 (max: 32)
  171: 185.171.0.0/22 (max: 32)
  172: 194.36.100.0/22 (max: 32)
  173: 45.10.0.0/22 (max: 32)
  174: 185.137.181.0/24 (max: 32)
  175: 194.124.64.0/24 (max: 32)
  176: 194.124.67.0/24 (max: 32)
  177: 194.124.65.0/24 (max: 32)
  178: 194.124.66.0/24 (max: 32)
  179: 81.16.138.0/24 (max: 32)
  180: 81.16.137.0/24 (max: 32)
  181: 81.16.136.0/24 (max: 32)
  182: 185.238.240.0/22 (max: 32)
  183: 5.183.204.0/22 (max: 32)
  184: 79.143.48.0/20 (max: 32)
  185: 185.211.48.0/22 (max: 32)
  186: 194.56.76.0/24 (max: 32)
  187: 194.56.77.0/24 (max: 32)
  188: 194.56.79.0/24 (max: 24)
  189: 185.224.144.0/22 (max: 32)
  190: 91.189.184.0/24 (max: 32)
  191: 91.189.185.0/24 (max: 32)
  192: 91.189.187.0/24 (max: 32)
  193: 194.34.228.0/22 (max: 32)
  194: 77.243.95.0/24 (max: 32)
  195: 77.243.93.0/24 (max: 32)
  196: 185.122.39.0/24 (max: 32)
  197: 185.115.124.0/22 (max: 32)
  198: 188.116.18.0/23 (max: 32)
  199: 188.116.48.0/23 (max: 32)
  200: 185.115.240.0/22 (max: 32)
  201: 213.190.21.0/24 (max: 32)
  202: 213.190.23.0/24 (max: 32)
  203: 213.190.20.0/24 (max: 32)
  204: 185.215.214.0/24 (max: 32)
  205: 195.7.0.0/22 (max: 32)
  206: 185.141.204.0/22 (max: 32)
  207: 193.222.100.0/22 (max: 32)
  208: 45.14.44.0/24 (max: 32)
  209: 45.14.45.0/24 (max: 32)
  210: 45.13.245.0/24 (max: 32)
  211: 185.236.80.0/22 (max: 32)
  212: 185.249.216.0/22 (max: 32)
  213: 2a06:7a02::/48 (max: 48)
  214: 2a0b:1900::/29 (max: 128)
  215: 2a06:7a05::/48 (max: 48)
  216: 2a0c:da01::/48 (max: 48)
  217: 2a0e:c500::/29 (max: 128)
  218: 2a06:8dc0::/42 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ikSW-zqFFlMQ2ucEONb1swqdY_Y.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323456265 (0x13478d09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: May 25 07:32:28 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=8a4496fb3a85165310dae70438d6f5b30a9d63f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:57:72:aa:9d:f1:00:6c:75:4f:f5:8a:29:30:
                    27:93:6d:2d:4c:3d:c3:c5:ee:6e:3c:82:00:01:c0:
                    cf:d9:4f:e6:a9:74:1e:d0:01:06:0b:52:a5:8b:45:
                    bc:4f:2b:5b:32:20:61:c7:c8:40:e6:e0:38:eb:45:
                    b0:33:0a:54:d1:5e:66:22:b6:be:d6:a2:ab:ec:7e:
                    e9:08:72:e2:f8:63:f8:97:28:bd:1e:4a:48:44:bf:
                    f4:62:3e:86:c6:71:3d:24:bf:9d:7a:88:ca:0e:69:
                    e4:f8:ed:a5:86:80:59:b7:ab:d0:4e:2b:5f:14:d9:
                    19:eb:a8:5c:57:3b:f8:0a:f9:b7:70:99:00:34:fe:
                    a8:0a:40:f2:ba:48:24:07:58:e6:2c:ff:37:f8:fe:
                    28:a5:8f:d8:10:94:e6:09:4a:11:7a:d7:6e:36:2e:
                    fc:99:1d:82:76:95:c8:7c:10:f7:e7:8d:f2:a9:13:
                    a4:63:47:74:f1:d5:c1:22:2a:6b:34:fc:57:7a:7a:
                    a3:2e:a9:94:95:0f:b6:1c:62:ff:96:5c:be:96:44:
                    08:99:2a:4f:3f:ee:f5:ed:b5:78:d2:54:d7:0a:85:
                    0e:4d:81:0a:ff:16:09:22:f7:58:9e:df:ce:ce:e7:
                    61:ba:9c:c6:17:7b:b0:ca:c0:e0:ba:df:45:fe:ed:
                    82:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8A:44:96:FB:3A:85:16:53:10:DA:E7:04:38:D6:F5:B3:0A:9D:63:F6
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ikSW-zqFFlMQ2ucEONb1swqdY_Y.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0...0..n....0..f....9.....;................%
p...-
....-.....-
....-.,...-.$...-C....-P....-Q..........>z....MS....M.\...O.0...O..0....Q.....Q.....T'....U.....U.....W.0...[.....[.....\w....^.....^.....^.d.....t....N.....r.....r.....s|....s.....s.....u.....w.....x.....x.....x.....z'....z8.....H.............................d0..........................................P.....0.....>.................$.................0.....D............0......I.....J...........P..................0.............................t.....t0.........................................d....".....$d....8L....|@..........U
....U ....U(....U0....UD...........h08....02...*.z......*.z......*........*......*........*...
    Signature Algorithm: sha256WithRSAEncryption
         61:57:c7:72:ec:b9:e0:43:59:ea:e4:e7:44:95:6a:32:d2:70:
         b0:08:9d:5a:be:2c:29:39:1c:45:f1:c4:30:8f:65:bc:2f:45:
         dd:6f:fd:18:89:b6:e0:ad:7f:b9:ca:7a:af:91:20:ca:e3:a8:
         e3:22:0f:da:9d:81:f9:75:eb:61:49:51:21:1f:d3:04:25:8d:
         75:af:41:b1:a3:3d:32:a2:e8:c7:7c:7e:7f:07:22:f1:15:36:
         a6:af:4d:bd:d7:8f:1f:9b:45:9f:6e:f0:aa:d8:b1:b1:e0:96:
         08:b4:c5:04:4c:73:65:7d:99:b2:e9:be:23:9e:c6:96:bf:6a:
         07:5c:f8:78:c4:59:65:6a:71:35:54:35:9c:da:d4:f4:f4:75:
         6e:c8:22:b4:94:7c:b9:4e:1a:30:07:83:52:da:9d:8f:39:76:
         e3:f2:20:0a:e6:95:00:bc:39:8d:11:9c:bf:ee:3c:eb:a5:a6:
         6f:89:14:7e:fc:d8:47:d2:5b:f2:98:aa:ff:b9:b1:2d:30:a8:
         70:2c:c5:95:ae:33:9e:66:0f:06:32:02:f7:88:91:15:c5:a5:
         4a:d8:d0:45:a4:ab:4b:98:60:dd:22:5b:dc:dd:b1:fe:28:e4:
         61:1c:6a:17:99:74:ca:24:05:76:9c:d6:1a:fc:62:38:70:c3:
         72:e0:5c:03
-----BEGIN CERTIFICATE-----
MIIHkzCCBnugAwIBAgIEE0eNCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIxMDUy
NTA3MzIyOFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGE0NDk2ZmIzYTg1
MTY1MzEwZGFlNzA0MzhkNmY1YjMwYTlkNjNmNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM9Xcqqd8QBsdU/1iikwJ5NtLUw9w8XubjyCAAHAz9lP5ql0
HtABBgtSpYtFvE8rWzIgYcfIQObgOOtFsDMKVNFeZiK2vtaiq+x+6Qhy4vhj+Jco
vR5KSES/9GI+hsZxPSS/nXqIyg5p5PjtpYaAWber0E4rXxTZGeuoXFc7+Ar5t3CZ
ADT+qApA8rpIJAdY5iz/N/j+KKWP2BCU5glKEXrXbjYu/JkdgnaVyHwQ9+eN8qkT
pGNHdPHVwSIqazT8V3p6oy6plJUPthxi/5ZcvpZECJkqTz/u9e21eNJU1wqFDk2B
Cv8WCSL3WJ7fzs7nYbqcxhd7sMrA4LrfRf7tgmECAwEAAaOCBK0wggSpMB0GA1Ud
DgQWBBSKRJb7OoUWUxDa5wQ41vWzCp1j9jAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L2lrU1ctenFGRmxNUTJ1Y0VPTmIxc3dxZFlfWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AsEGCCsGAQUFBwEHAQH/BIICsDCCAqwwggJuBAIAATCCAmYDBAICOfwDBAECO64D
BAIFt8wDBAAF/YoDBAAlCnADBAItCgADBAItDKADBAItDfQDBAItDiwDBAItDyQD
BAEtQxADBAItULADBAItUQgDBAAu++8DBAI+ehgDBAJNU5wDBAJN81wDBARPjzAD
BAJPrhQwDAMEA1EQiAMEAFEQigMEA1QnuAMEAlXQmAMEAFXR/QMEAlfvMAMEAlu8
yAMEAlu9uAMEAlx3lAMEAV6MDAMEAl6MFAMEAl7HZAMEAoAAdAMEAZNO3AMEALly
4QMEALly4wMEArlzfAMEALlzgwMEArlz8AMEArl1FAMEALl3/wMEArl4BAMEArl4
DAMEArl4FAMEALl6JwMEArl6OAMEArmFSAMEArmFwAMEArmJtAMEArmNzAMEALmO
jwMEArmQZDAMAwQAuZLBAwQAuZLCAwQCuasAAwQAuayRAwQCuaykAwQCubEUAwQC
ubFQAwQBubYwAwQAubY+AwQBubn6AwQCubwEAwQCucEkAwQCuc+wAwQCudCoAwQC
udMwAwQCudZEAwQCudfUAwQCueCQMAwDBAC54kkDBAC54koDBAK54/ADBAK57FAD
BAK57vADBAG58NoDBAK5+dgwDAMEALn76QMEArn76AMEArn9+AMEALn/mgMEAbx0
EgMEAbx0MAMEAsEQCAMEAMEWnwMEAsGVoAMEAMGg1AMEAcGg1gMEAMG7mAMEAsHe
ZAMEAsIi5AMEAsIkZAMEAsI4TAMEAsJ8QAMEAsMHAAMEAcNVCgMEAsNVIAMEAsNV
KAMEAcNVMAMEAsNVRAMEAtW+FAMEAtXoaDA4BAIAAjAyAwcAKgZ6AgAAAwcAKgZ6
BQAAAwcGKgaNwAAAAwUDKgsZAAMHACoM2gEAAAMFAyoOxQAwDQYJKoZIhvcNAQEL
BQADggEBAGFXx3LsueBDWerk50SVajLScLAInVq+LCk5HEXxxDCPZbwvRd1v/RiJ
tuCtf7nKeq+RIMrjqOMiD9qdgfl162FJUSEf0wQljXWvQbGjPTKi6Md8fn8HIvEV
NqavTb3Xjx+bRZ9u8KrYsbHglgi0xQRMc2V9mbLpviOexpa/agdc+HjEWWVqcTVU
NZza1PT0dW7IIrSUfLlOGjAHg1LanY85duPyIArmlQC8OY0RnL/uPOulpm+JFH78
2EfSW/KYqv+5sS0wqHAsxZWuM55mDwYyAveIkRXFpUrY0EWkq0uYYN0iW9zdsf4o
5GEcaheZdMokBXac1hr8Yjhww3LgXAM=
-----END CERTIFICATE-----

Generated at Tue May 25 10:12:06 2021 by LibreSSL & rpki-client.