Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kUe9r3Bo_7OmAGu9zDl_qW_3PmY.roa (download)

Subject key identifier:   91:47:BD:AF:70:68:FF:B3:A6:00:6B:BD:CC:39:7F:A9:6F:F7:3E:66 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS20473
Prefixes:
    1: 185.188.6.0/24 (max: 32)
    2: 193.160.214.0/24 (max: 32)
    3: 193.160.215.0/24 (max: 32)
    4: 84.39.184.0/24 (max: 24)
    5: 84.39.191.0/24 (max: 32)
    6: 84.39.187.0/24 (max: 32)
    7: 84.39.190.0/24 (max: 32)
    8: 185.208.168.0/22 (max: 32)
    9: 185.255.154.0/24 (max: 32)
   10: 45.67.17.0/24 (max: 32)
   11: 45.67.16.0/24 (max: 32)
   12: 85.208.152.0/22 (max: 32)
   13: 185.146.194.0/24 (max: 24)
   14: 185.133.75.0/24 (max: 32)
   15: 185.146.193.0/24 (max: 32)
   16: 94.140.20.0/22 (max: 32)
   17: 185.214.70.0/24 (max: 32)
   18: 92.119.150.0/24 (max: 32)
   19: 185.240.218.0/24 (max: 32)
   20: 92.119.149.0/24 (max: 32)
   21: 92.119.151.0/24 (max: 32)
   22: 185.240.219.0/24 (max: 32)
   23: 193.187.152.0/24 (max: 32)
   24: 185.133.195.0/24 (max: 32)
   25: 185.133.193.0/24 (max: 32)
   26: 193.160.212.0/24 (max: 32)
   27: 185.119.255.0/24 (max: 32)
   28: 185.120.7.0/24 (max: 32)
   29: 185.120.6.0/24 (max: 32)
   30: 185.120.5.0/24 (max: 32)
   31: 185.120.15.0/24 (max: 32)
   32: 185.120.14.0/24 (max: 32)
   33: 185.120.20.0/24 (max: 32)
   34: 185.120.23.0/24 (max: 24)
   35: 185.120.21.0/24 (max: 32)
   36: 185.207.176.0/22 (max: 32)
   37: 79.174.23.0/24 (max: 32)
   38: 79.174.21.0/24 (max: 32)
   39: 79.174.22.0/24 (max: 32)
   40: 195.85.68.0/22 (max: 32)
   41: 185.193.36.0/22 (max: 32)
   42: 185.172.165.0/24 (max: 32)
   43: 185.172.166.0/24 (max: 32)
   44: 5.253.138.0/24 (max: 32)
   45: 195.85.32.0/22 (max: 32)
   46: 195.85.40.0/22 (max: 32)
   47: 195.85.48.0/23 (max: 32)
   48: 185.253.251.0/24 (max: 32)
   49: 147.78.220.0/24 (max: 32)
   50: 147.78.221.0/24 (max: 32)
   51: 37.10.112.0/24 (max: 32)
   52: 94.199.102.0/24 (max: 32)
   53: 2.57.252.0/22 (max: 32)
   54: 185.185.251.0/24 (max: 24)
   55: 185.185.250.0/24 (max: 32)
   56: 185.172.145.0/24 (max: 32)
   57: 195.85.10.0/23 (max: 32)
   58: 185.226.73.0/24 (max: 32)
   59: 185.226.74.0/24 (max: 32)
   60: 185.144.103.0/24 (max: 32)
   61: 185.144.102.0/24 (max: 32)
   62: 185.144.101.0/24 (max: 32)
   63: 193.16.8.0/22 (max: 32)
   64: 185.117.20.0/24 (max: 32)
   65: 185.171.2.0/24 (max: 32)
   66: 185.171.1.0/24 (max: 32)
   67: 185.171.0.0/24 (max: 32)
   68: 185.251.233.0/24 (max: 32)
   69: 185.251.235.0/24 (max: 32)
   70: 185.251.234.0/24 (max: 32)
   71: 46.251.239.0/24 (max: 32)
   72: 194.36.101.0/24 (max: 32)
   73: 194.36.100.0/24 (max: 32)
   74: 185.238.242.0/24 (max: 32)
   75: 185.238.241.0/24 (max: 32)
   76: 45.10.3.0/24 (max: 32)
   77: 45.10.2.0/24 (max: 32)
   78: 213.232.104.0/22 (max: 32)
   79: 194.124.64.0/23 (max: 32)
   80: 185.137.180.0/22 (max: 32)
   81: 185.238.240.0/24 (max: 32)
   82: 5.183.206.0/24 (max: 32)
   83: 5.183.207.0/24 (max: 32)
   84: 185.177.20.0/22 (max: 32)
   85: 79.143.51.0/24 (max: 32)
   86: 79.143.49.0/24 (max: 32)
   87: 79.143.52.0/24 (max: 32)
   88: 79.143.55.0/24 (max: 32)
   89: 79.143.53.0/24 (max: 32)
   90: 79.143.62.0/24 (max: 32)
   91: 79.143.61.0/24 (max: 32)
   92: 185.211.50.0/24 (max: 24)
   93: 185.211.49.0/24 (max: 32)
   94: 185.211.48.0/24 (max: 24)
   95: 194.56.76.0/22 (max: 32)
   96: 193.22.159.0/24 (max: 32)
   97: 185.177.80.0/22 (max: 32)
   98: 91.189.184.0/22 (max: 32)
   99: 185.142.143.0/24 (max: 32)
  100: 85.209.253.0/24 (max: 32)
  101: 194.34.230.0/24 (max: 32)
  102: 194.34.231.0/24 (max: 32)
  103: 77.243.92.0/22 (max: 32)
  104: 185.122.56.0/22 (max: 32)
  105: 185.115.131.0/24 (max: 32)
  106: 188.116.19.0/24 (max: 32)
  107: 188.116.49.0/24 (max: 32)
  108: 185.115.243.0/24 (max: 32)
  109: 193.149.160.0/22 (max: 32)
  110: 185.115.242.0/24 (max: 32)
  111: 213.190.20.0/22 (max: 32)
  112: 185.215.212.0/22 (max: 32)
  113: 195.7.1.0/24 (max: 32)
  114: 195.7.3.0/24 (max: 32)
  115: 185.182.48.0/24 (max: 32)
  116: 185.182.49.0/24 (max: 32)
  117: 185.141.205.0/24 (max: 32)
  118: 185.182.62.0/24 (max: 32)
  119: 185.114.225.0/24 (max: 32)
  120: 185.141.207.0/24 (max: 32)
  121: 185.114.227.0/24 (max: 32)
  122: 193.222.100.0/24 (max: 32)
  123: 193.222.103.0/24 (max: 32)
  124: 91.188.200.0/22 (max: 32)
  125: 45.14.44.0/22 (max: 32)
  126: 62.122.24.0/22 (max: 32)
  127: 128.0.116.0/22 (max: 32)
  128: 45.13.244.0/22 (max: 32)
  129: 185.236.80.0/24 (max: 32)
  130: 185.236.83.0/24 (max: 32)
  131: 185.249.216.0/24 (max: 32)
  132: 185.249.218.0/24 (max: 32)
  133: 185.188.4.0/22 (max: 32)
  134: 84.39.184.0/21 (max: 32)
  135: 85.208.155.0/24 (max: 32)
  136: 85.208.153.0/24 (max: 32)
  137: 185.133.72.0/22 (max: 32)
  138: 185.214.68.0/22 (max: 32)
  139: 92.119.148.0/22 (max: 32)
  140: 185.133.192.0/22 (max: 32)
  141: 2.59.174.0/24 (max: 32)
  142: 2.59.175.0/24 (max: 32)
  143: 185.120.4.0/22 (max: 32)
  144: 185.120.12.0/22 (max: 32)
  145: 185.120.20.0/22 (max: 32)
  146: 185.207.178.0/24 (max: 32)
  147: 185.207.177.0/24 (max: 32)
  148: 185.227.240.0/22 (max: 32)
  149: 79.174.20.0/22 (max: 32)
  150: 185.193.36.0/24 (max: 32)
  151: 185.193.39.0/24 (max: 32)
  152: 185.172.164.0/22 (max: 32)
  153: 185.253.248.0/22 (max: 32)
  154: 213.232.107.0/24 (max: 32)
  155: 87.239.48.0/22 (max: 32)
  156: 94.199.100.0/22 (max: 32)
  157: 2.57.255.0/24 (max: 32)
  158: 77.83.156.0/24 (max: 32)
  159: 77.83.158.0/24 (max: 32)
  160: 77.83.159.0/24 (max: 32)
  161: 77.83.157.0/24 (max: 32)
  162: 185.144.100.0/22 (max: 32)
  163: 193.16.9.0/24 (max: 32)
  164: 193.16.10.0/24 (max: 32)
  165: 185.117.20.0/22 (max: 32)
  166: 185.171.0.0/22 (max: 32)
  167: 194.36.100.0/22 (max: 32)
  168: 45.10.0.0/22 (max: 32)
  169: 185.137.181.0/24 (max: 32)
  170: 194.124.64.0/24 (max: 32)
  171: 194.124.67.0/24 (max: 32)
  172: 194.124.65.0/24 (max: 32)
  173: 194.124.66.0/24 (max: 32)
  174: 81.16.138.0/24 (max: 32)
  175: 81.16.137.0/24 (max: 32)
  176: 81.16.136.0/24 (max: 32)
  177: 185.238.240.0/22 (max: 32)
  178: 5.183.204.0/22 (max: 32)
  179: 79.143.48.0/20 (max: 32)
  180: 185.211.48.0/22 (max: 32)
  181: 194.56.76.0/24 (max: 32)
  182: 194.56.77.0/24 (max: 32)
  183: 194.56.79.0/24 (max: 24)
  184: 185.224.144.0/22 (max: 32)
  185: 91.189.184.0/24 (max: 32)
  186: 91.189.185.0/24 (max: 32)
  187: 91.189.187.0/24 (max: 32)
  188: 194.34.228.0/22 (max: 32)
  189: 77.243.95.0/24 (max: 32)
  190: 77.243.93.0/24 (max: 32)
  191: 185.122.39.0/24 (max: 32)
  192: 185.115.124.0/22 (max: 32)
  193: 188.116.18.0/23 (max: 32)
  194: 188.116.48.0/23 (max: 32)
  195: 185.115.240.0/22 (max: 32)
  196: 213.190.21.0/24 (max: 32)
  197: 213.190.23.0/24 (max: 32)
  198: 213.190.20.0/24 (max: 32)
  199: 185.215.214.0/24 (max: 32)
  200: 195.7.0.0/22 (max: 32)
  201: 185.141.204.0/22 (max: 32)
  202: 193.222.100.0/22 (max: 32)
  203: 45.14.44.0/24 (max: 32)
  204: 45.14.45.0/24 (max: 32)
  205: 45.13.245.0/24 (max: 32)
  206: 185.236.80.0/22 (max: 32)
  207: 185.249.216.0/22 (max: 32)
  208: 2a06:7a02::/48 (max: 48)
  209: 2a0b:1900::/29 (max: 128)
  210: 2a06:7a05::/48 (max: 48)
  211: 2a0c:da01::/48 (max: 48)
  212: 2a0e:c500::/29 (max: 128)
  213: 2a06:8dc0::/42 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kUe9r3Bo_7OmAGu9zDl_qW_3PmY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319459722 (0x130a918a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: May 10 16:37:39 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9147bdaf7068ffb3a6006bbdcc397fa96ff73e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:22:31:b6:9d:77:ac:65:c8:76:6a:4d:1c:
                    31:87:58:95:cd:a5:56:36:2e:4d:2f:ff:4c:6a:50:
                    16:e0:02:9f:93:51:09:d4:5d:2d:6b:29:81:99:f1:
                    aa:90:38:95:09:15:87:eb:2f:24:46:27:c3:d7:5a:
                    85:bf:e3:a2:fd:e9:5b:31:e5:12:65:1c:7b:6f:0d:
                    35:c1:ff:aa:63:26:a9:bb:20:c2:b7:4e:50:2f:84:
                    b2:55:ab:a0:4f:05:a9:54:9a:fa:b1:c0:4e:86:02:
                    ed:6a:f6:48:bb:e0:05:da:86:f1:b3:fb:7e:92:d4:
                    ea:4b:7c:ea:7e:13:83:64:62:d7:e0:d0:6d:70:8d:
                    06:f6:45:c5:93:44:86:f4:89:cc:e1:47:8b:d8:b1:
                    f8:40:f3:5e:e6:9b:2d:07:89:85:db:15:cb:b2:c5:
                    8b:9d:aa:c3:fe:e5:0a:42:ea:91:4f:42:f5:05:88:
                    6c:76:58:4f:1b:5a:93:b9:b2:ef:61:1b:c7:60:ab:
                    d3:ca:db:de:39:cf:06:5b:08:a4:9c:4f:cd:f3:72:
                    72:24:57:3a:49:b8:ff:55:1c:84:f9:86:86:1a:49:
                    40:0e:37:e4:a2:30:68:ce:b4:c8:32:ce:92:52:b9:
                    5b:d6:af:07:d4:2d:28:7d:36:33:86:5a:e6:d8:2a:
                    4a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                91:47:BD:AF:70:68:FF:B3:A6:00:6B:BD:CC:39:7F:A9:6F:F7:3E:66
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kUe9r3Bo_7OmAGu9zDl_qW_3PmY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0...0..P....0..H....9.....;................%
p...-
....-
....-.,...-C..........>z....MS....M.\...O.0...O..0....Q.....Q.....T'....U.....U.....W.0...[.....[.....\w....^.....^.d.....t....N.....r.....r.....s|....s.....s.....u.....w.....x.....x.....x.....z'....z8.....H.............................d0..........................................P.....0.....>.................$.................0.....D............0......I.....J...........P..................0.............................t.....t0.........................................d....".....$d....8L....|@..........U
....U ....U(....U0....UD...........h08....02...*.z......*.z......*........*......*........*...
    Signature Algorithm: sha256WithRSAEncryption
         10:3e:da:43:a8:da:19:44:38:5c:b1:7e:d5:f4:c0:bc:93:a8:
         4b:7d:02:1e:89:56:9c:d3:d3:96:ef:ae:38:c7:38:12:54:79:
         30:4e:99:73:4b:35:68:c6:d1:0d:a9:f2:1b:01:a0:1c:fc:65:
         a5:76:a8:ef:83:1c:0c:43:20:98:8e:1a:c2:c7:6d:d4:bf:99:
         c7:62:d3:16:d2:e2:36:65:fc:68:62:b9:66:53:3c:69:1c:ee:
         1e:3e:f9:17:20:50:23:ef:07:7e:e5:70:98:be:d5:d9:1a:74:
         65:e2:fa:fa:0c:99:0b:cc:44:78:7a:b4:ac:7c:e1:e7:64:0e:
         99:11:c8:88:0e:e5:df:d7:8d:5d:b8:fd:a6:26:26:21:eb:2c:
         b3:75:16:02:df:30:55:d5:56:c3:0c:54:b1:3b:7a:71:e8:f5:
         8b:ff:95:99:59:55:cc:aa:cd:1d:85:bb:1e:50:01:87:bd:92:
         b9:26:51:55:3b:7b:d9:18:e4:ad:18:fd:bb:58:65:4e:d3:4a:
         68:ad:4b:e8:bb:98:62:55:2b:cf:e1:ab:a8:57:54:27:ff:c5:
         e3:62:e4:55:f3:c1:2e:d4:63:43:05:a1:63:55:04:1d:be:a0:
         14:b6:8f:f3:8c:c9:5d:a4:fb:01:46:6a:1f:03:e6:88:6a:52:
         bd:a7:95:1e
-----BEGIN CERTIFICATE-----
MIIHdTCCBl2gAwIBAgIEEwqRijANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIxMDUx
MDE2MzczOVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTE0N2JkYWY3MDY4
ZmZiM2E2MDA2YmJkY2MzOTdmYTk2ZmY3M2U2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMaXIjG2nXesZch2ak0cMYdYlc2lVjYuTS//TGpQFuACn5NR
CdRdLWspgZnxqpA4lQkVh+svJEYnw9dahb/jov3pWzHlEmUce28NNcH/qmMmqbsg
wrdOUC+EslWroE8FqVSa+rHAToYC7Wr2SLvgBdqG8bP7fpLU6kt86n4Tg2Ri1+DQ
bXCNBvZFxZNEhvSJzOFHi9ix+EDzXuabLQeJhdsVy7LFi52qw/7lCkLqkU9C9QWI
bHZYTxtak7my72Ebx2Cr08rb3jnPBlsIpJxPzfNyciRXOkm4/1UchPmGhhpJQA43
5KIwaM60yDLOklK5W9avB9QtKH02M4Za5tgqSnsCAwEAAaOCBI8wggSLMB0GA1Ud
DgQWBBSRR72vcGj/s6YAa73MOX+pb/c+ZjAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L2tVZTlyM0JvXzdPbUFHdTl6RGxfcVdfM1BtWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AqMGCCsGAQUFBwEHAQH/BIICkjCCAo4wggJQBAIAATCCAkgDBAICOfwDBAECO64D
BAIFt8wDBAAF/YoDBAAlCnADBAItCgADBAItDfQDBAItDiwDBAEtQxADBAAu++8D
BAI+ehgDBAJNU5wDBAJN81wDBARPjzADBAJPrhQwDAMEA1EQiAMEAFEQigMEA1Qn
uAMEAlXQmAMEAFXR/QMEAlfvMAMEAlu8yAMEAlu9uAMEAlx3lAMEAl6MFAMEAl7H
ZAMEAoAAdAMEAZNO3AMEALly4QMEALly4wMEArlzfAMEALlzgwMEArlz8AMEArl1
FAMEALl3/wMEArl4BAMEArl4DAMEArl4FAMEALl6JwMEArl6OAMEArmFSAMEArmF
wAMEArmJtAMEArmNzAMEALmOjwMEArmQZDAMAwQAuZLBAwQAuZLCAwQCuasAAwQA
uayRAwQCuaykAwQCubEUAwQCubFQAwQBubYwAwQAubY+AwQBubn6AwQCubwEAwQC
ucEkAwQCuc+wAwQCudCoAwQCudMwAwQCudZEAwQCudfUAwQCueCQMAwDBAC54kkD
BAC54koDBAK54/ADBAK57FADBAK57vADBAG58NoDBAK5+dgwDAMEALn76QMEArn7
6AMEArn9+AMEALn/mgMEAbx0EgMEAbx0MAMEAsEQCAMEAMEWnwMEAsGVoAMEAMGg
1AMEAcGg1gMEAMG7mAMEAsHeZAMEAsIi5AMEAsIkZAMEAsI4TAMEAsJ8QAMEAsMH
AAMEAcNVCgMEAsNVIAMEAsNVKAMEAcNVMAMEAsNVRAMEAtW+FAMEAtXoaDA4BAIA
AjAyAwcAKgZ6AgAAAwcAKgZ6BQAAAwcGKgaNwAAAAwUDKgsZAAMHACoM2gEAAAMF
AyoOxQAwDQYJKoZIhvcNAQELBQADggEBABA+2kOo2hlEOFyxftX0wLyTqEt9Ah6J
VpzT05bvrjjHOBJUeTBOmXNLNWjG0Q2p8hsBoBz8ZaV2qO+DHAxDIJiOGsLHbdS/
mcdi0xbS4jZl/GhiuWZTPGkc7h4++RcgUCPvB37lcJi+1dkadGXi+voMmQvMRHh6
tKx84edkDpkRyIgO5d/XjV24/aYmJiHrLLN1FgLfMFXVVsMMVLE7enHo9Yv/lZlZ
VcyqzR2Fux5QAYe9krkmUVU7e9kY5K0Y/btYZU7TSmitS+i7mGJVK8/hq6hXVCf/
xeNi5FXzwS7UY0MFoWNVBB2+oBS2j/OMyV2k+wFGah8D5ohqUr2nlR4=
-----END CERTIFICATE-----

Generated at Tue May 11 07:53:47 2021 by LibreSSL & rpki-client.