Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/MWqgISomejbbOjSaxOZ21t4B188.roa (download)

Subject key identifier:   31:6A:A0:21:2A:26:7A:36:DB:3A:34:9A:C4:E6:76:D6:DE:01:D7:CF 
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
asID:                     AS15830
Prefixes:
    1: 217.79.208.0/20 (max: 24)
    2: 88.84.128.0/21 (max: 24)
    3: 89.202.0.0/17 (max: 24)
    4: 88.84.136.0/21 (max: 24)
    5: 217.68.144.0/20 (max: 24)
    6: 88.84.144.0/21 (max: 24)
    7: 88.84.152.0/21 (max: 24)
    8: 193.110.116.0/22 (max: 24)
    9: 2a02:20a8::/32 (max: 48)
   10: 2001:4c68::/32 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/MWqgISomejbbOjSaxOZ21t4B188.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862741867 (0x336c656b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
        Validity
            Not Before: Jan  1 02:06:01 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=316aa0212a267a36db3a349ac4e676d6de01d7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:24:5c:47:8c:0c:9c:6f:c6:16:db:fb:7d:
                    7c:1a:f3:06:7b:96:56:9e:f9:cc:71:48:11:0a:97:
                    be:f4:ee:9a:65:ff:a3:ba:aa:04:c9:b6:09:da:cc:
                    d2:ea:be:86:92:f9:2d:42:e0:13:ba:f8:c1:93:8c:
                    04:68:18:6c:33:10:79:d2:66:20:c8:12:b6:43:40:
                    a7:dc:59:10:b0:06:a3:9a:cd:0b:ef:67:a6:92:b2:
                    69:8b:f8:cf:32:3e:33:38:ba:7d:8c:de:24:35:6a:
                    c2:8f:e0:50:f9:ee:69:b5:fa:a3:18:5e:bc:3f:d3:
                    4f:10:e4:f7:4b:e2:2b:8a:ba:ac:7c:47:ce:5b:4e:
                    64:8b:1a:55:d1:04:bd:c9:31:9a:7f:47:87:8f:b9:
                    28:55:5c:13:68:17:6b:55:65:46:63:2b:08:0b:4a:
                    e0:94:cc:78:19:38:47:3b:06:5b:b2:a2:9f:d4:9a:
                    1f:15:66:ab:0e:62:ba:c1:d4:55:b7:a2:8e:8a:27:
                    2b:c8:ae:e7:ee:8f:f4:39:c5:50:58:f7:cb:ae:e8:
                    71:b2:10:6b:00:77:62:39:de:e8:18:89:2f:fd:5a:
                    5f:7d:d4:c6:ed:31:96:06:e6:a9:b8:c1:6d:5c:27:
                    bb:36:81:44:ce:80:a6:e3:63:77:85:5a:bd:3b:4c:
                    58:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                31:6A:A0:21:2A:26:7A:36:DB:3A:34:9A:C4:E6:76:D6:DE:01:D7:CF
            X509v3 Authority Key Identifier: 
                keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/MWqgISomejbbOjSaxOZ21t4B188.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0<0$....0....XT....Y......nt....D.....O.0.....0.... .Lh...*. .
    Signature Algorithm: sha256WithRSAEncryption
         13:60:19:6c:f9:b9:51:1b:0f:6d:c6:87:3b:1b:56:4f:d0:74:
         40:59:ed:58:9c:f4:5a:52:38:b6:a6:2c:e7:35:ae:85:e4:1b:
         98:86:5e:f9:21:b5:35:55:dc:75:2a:29:8f:4d:35:79:7e:3c:
         91:4d:9f:85:d2:53:a1:a1:82:8b:b1:54:de:25:de:5f:3c:ac:
         61:2b:26:00:05:c6:bd:a6:f1:28:6f:7c:3b:f4:6f:dc:93:08:
         fd:45:26:e4:44:92:a4:f2:72:49:0a:35:11:e3:44:9e:13:7d:
         12:8b:2a:af:3f:17:91:90:39:88:ed:a5:d7:b4:99:e3:2e:d9:
         a2:6f:63:51:f3:15:c2:a1:8e:ff:83:75:82:d2:09:88:ce:39:
         2a:e9:0d:d5:68:f5:bf:0e:bd:10:ba:1a:6f:75:c8:61:62:60:
         49:15:40:b8:06:e4:a8:62:ac:ef:8d:97:21:34:74:2f:34:7b:
         cc:e7:4e:f4:c3:ce:32:b8:0a:07:69:94:a4:09:04:34:34:23:
         ad:75:aa:6e:bc:39:48:29:e3:a7:35:fd:fd:43:09:fe:3d:c1:
         34:fe:32:21:ff:54:b4:f4:9b:10:be:fa:a9:0a:1c:54:b9:15:
         5f:83:44:d4:b7:c2:79:80:ca:48:44:5b:ba:57:6e:0e:cb:ff:
         01:8a:78:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jul 31 09:21:34 2021 by LibreSSL & rpki-client.