Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ndb2RqGiiQOdSZqyWS70m9gcp88.roa (download)

Subject key identifier:   9D:D6:F6:46:A1:A2:89:03:9D:49:9A:B2:59:2E:F4:9B:D8:1C:A7:CF 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS21859
Prefixes:
    1: 91.189.186.0/24 (max: 32)
    2: 185.122.37.0/24 (max: 24)
    3: 5.253.137.0/24 (max: 32)
    4: 185.171.3.0/24 (max: 32)
    5: 195.85.33.0/24 (max: 32)
    6: 195.85.43.0/24 (max: 32)
    7: 46.251.239.0/24 (max: 32)
    8: 185.115.128.0/24 (max: 24)
    9: 185.115.126.0/24 (max: 24)
   10: 185.115.130.0/24 (max: 24)
   11: 45.83.255.0/24 (max: 32)
   12: 147.78.220.0/24 (max: 32)
   13: 185.115.240.0/24 (max: 24)
   14: 193.149.160.0/24 (max: 32)
   15: 193.149.163.0/24 (max: 32)
   16: 185.146.194.0/24 (max: 24)
   17: 37.10.112.0/24 (max: 32)
   18: 185.240.219.0/24 (max: 32)
   19: 185.240.218.0/24 (max: 32)
   20: 79.143.55.0/24 (max: 32)
   21: 79.143.62.0/24 (max: 32)
   22: 193.222.100.0/24 (max: 32)
   23: 193.222.103.0/24 (max: 32)
   24: 45.141.145.0/24 (max: 24)
   25: 45.141.147.0/24 (max: 24)
   26: 45.141.146.0/24 (max: 24)
   27: 45.142.63.0/24 (max: 32)
   28: 45.141.245.0/24 (max: 24)
   29: 185.120.12.0/24 (max: 24)
   30: 45.141.244.0/23 (max: 23)
   31: 45.141.244.0/24 (max: 24)
   32: 185.120.32.0/24 (max: 24)
   33: 185.224.146.0/24 (max: 32)
   34: 185.226.73.0/24 (max: 32)
   35: 45.130.75.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ndb2RqGiiQOdSZqyWS70m9gcp88.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356380740 (0x153df044)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Aug 18 14:33:50 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9dd6f646a1a289039d499ab2592ef49bd81ca7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:eb:2b:2a:ac:55:70:8f:cb:d4:45:82:7b:0c:
                    d4:c3:97:75:7c:f6:27:86:77:ff:28:fc:5a:cc:4b:
                    69:cb:9c:de:7d:70:20:e7:85:39:38:f6:ea:c8:48:
                    e3:33:7c:08:fd:20:47:2f:c8:8c:0d:47:32:36:83:
                    e7:fe:45:00:fc:dd:d5:d5:23:73:8a:47:6a:60:04:
                    d7:2c:4e:7d:53:3a:02:cb:82:95:7c:c2:5d:fa:78:
                    e6:0a:7c:61:67:bb:92:85:ad:b9:c8:0b:20:aa:34:
                    1d:ef:85:c5:cc:db:07:2c:b3:4c:3c:9b:3a:16:fe:
                    cb:59:7a:b6:40:d2:82:f1:79:59:d9:bf:46:64:be:
                    2f:06:a2:e1:c2:0f:c9:bd:3c:b1:8a:ee:e3:5a:64:
                    8b:7a:51:2e:3e:03:5a:77:88:2c:12:a5:44:cf:65:
                    70:ab:6c:d8:83:da:40:0b:d0:ca:99:87:ab:16:26:
                    12:e8:f7:dc:ef:17:85:1c:d9:4e:c4:90:96:ff:df:
                    bd:98:e2:28:38:bc:7f:8a:13:bd:e0:51:ed:08:71:
                    e2:e1:e1:6e:7f:a7:c8:68:a5:93:dc:34:3d:ab:34:
                    af:72:ed:4d:a3:43:57:1d:c0:67:2d:5f:5f:e6:9d:
                    54:f6:6a:ef:aa:36:f3:5e:84:ab:14:a8:6e:54:b4:
                    57:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9D:D6:F6:46:A1:A2:89:03:9D:49:9A:B2:59:2E:F4:9B:D8:1C:A7:CF
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ndb2RqGiiQOdSZqyWS70m9gcp88.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0..0......0...........%
p...-S....-.K0....-.....-.....-.....-.?.........O.7...O.>...[......N.....s~....s.....s.....s.....x.....x ....z%.......................I.......................d.....g....U!....U+
    Signature Algorithm: sha256WithRSAEncryption
         2a:aa:bd:cf:3a:49:c2:a0:e6:54:1f:db:cb:19:a8:61:a4:db:
         7f:b8:0f:86:d9:73:08:5b:fd:3f:78:b2:ac:19:c3:7b:43:17:
         f7:7e:67:3e:4a:51:65:30:d0:ea:3d:5e:37:31:46:8b:fe:e4:
         f1:8e:ba:4a:9a:82:79:48:f0:f3:67:21:d1:71:be:d5:00:10:
         a7:79:9a:7e:f2:72:8e:b4:d4:70:30:54:b5:7e:7c:21:50:fa:
         99:32:4e:b8:6a:a5:13:31:d5:bd:c4:8f:44:29:06:0a:5a:47:
         82:6b:f6:0f:c5:f4:d4:f6:76:f3:f7:ce:33:eb:e3:3b:55:3c:
         82:aa:41:49:a7:19:81:43:ca:72:f7:a0:d6:29:39:39:7d:cc:
         f0:2c:8b:cb:3c:c6:3a:07:e9:cb:45:b5:16:18:ef:83:1e:d3:
         f8:32:0d:6d:5f:24:fe:69:16:40:52:94:b4:7b:88:25:e1:33:
         da:05:b8:3a:01:e9:38:77:4d:cd:56:34:67:9b:15:22:3f:23:
         24:4c:bb:47:1b:b1:ba:3f:dd:ec:b8:9f:d1:b1:cf:d0:a3:60:
         93:7d:d2:d8:99:d2:63:f8:65:8f:fa:fc:9d:2d:a5:dc:0c:dd:
         cc:a0:dd:72:af:e3:76:01:9e:18:10:4d:ad:a9:cb:9a:16:a2:
         80:e9:ea:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Aug 24 16:17:03 2021 by LibreSSL & rpki-client.