Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/1QBmPjnCTM4qEf1lCsFJti-tF1k.roa (download)

Subject key identifier:   D5:00:66:3E:39:C2:4C:CE:2A:11:FD:65:0A:C1:49:B6:2F:AD:17:59 
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
asID:                     AS396982
Prefixes:
    1: 46.16.161.0/24 (max: 24)
    2: 46.16.160.0/24 (max: 24)
    3: 46.16.164.0/24 (max: 24)
    4: 46.16.166.0/24 (max: 24)
    5: 185.27.146.0/24 (max: 24)
    6: 46.16.165.0/24 (max: 24)
    7: 185.27.147.0/24 (max: 24)
    8: 91.197.140.0/24 (max: 24)
    9: 91.197.140.0/22 (max: 22)
   10: 91.197.141.0/24 (max: 24)
   11: 91.197.143.0/24 (max: 24)
   12: 91.197.142.0/24 (max: 24)
   13: 185.27.144.0/24 (max: 24)
   14: 185.27.144.0/22 (max: 22)
   15: 185.27.145.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/1QBmPjnCTM4qEf1lCsFJti-tF1k.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76737789 (0x492ecfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
        Validity
            Not Before: Apr 19 12:52:14 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d500663e39c24cce2a11fd650ac149b62fad1759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:a7:f4:3a:bb:e4:6a:9a:ed:57:4c:80:19:
                    db:b7:c1:4d:be:91:e2:78:3c:b6:03:e2:5e:d8:04:
                    6b:f2:ed:ee:22:1e:ca:33:98:67:0f:00:21:9c:37:
                    1c:1b:c8:f4:34:6d:57:e2:60:ed:7c:ae:1c:50:01:
                    a5:cf:5a:8a:88:11:20:b7:af:87:20:84:00:1f:c7:
                    64:d0:41:36:28:98:d4:5d:d9:34:b6:0c:7d:c5:bb:
                    c8:0e:60:d6:5d:ad:39:7e:12:af:4a:5e:33:a8:a2:
                    3e:ce:b6:f0:e8:19:1d:ce:92:21:e4:1e:08:73:63:
                    46:01:17:72:a2:63:c9:11:2d:ce:7f:ef:45:0c:68:
                    0c:a7:9e:e1:0c:37:26:f9:ad:ce:3c:f0:2a:b9:8e:
                    3e:09:df:d4:d4:ea:f1:b4:67:ed:19:0d:fe:6c:04:
                    3f:59:f3:30:ce:85:26:44:33:f5:97:17:f9:2c:77:
                    06:b5:23:97:74:2e:a1:28:ef:a4:89:74:56:b5:de:
                    7d:f0:56:82:74:44:a8:85:20:ab:51:8e:23:ca:40:
                    b5:44:7d:f5:3d:1d:f7:12:d9:3d:9c:1e:2a:78:05:
                    0b:35:df:81:6e:11:a3:60:c3:63:b4:80:e2:38:44:
                    a8:d4:da:a9:a5:af:1f:71:e5:0a:7a:26:a3:ed:81:
                    98:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D5:00:66:3E:39:C2:4C:CE:2A:11:FD:65:0A:C1:49:B6:2F:AD:17:59
            X509v3 Authority Key Identifier: 
                keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/1QBmPjnCTM4qEf1lCsFJti-tF1k.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0(0&....0 ......0................[........
    Signature Algorithm: sha256WithRSAEncryption
         77:82:ce:23:e4:1b:23:db:10:fd:3c:b6:c3:e9:c5:5c:4b:36:
         6b:7f:be:5d:36:13:55:51:d5:f3:9b:2f:e2:03:d8:39:5d:96:
         ac:de:c4:94:39:91:bc:db:a0:21:61:31:10:f7:c0:4e:b1:cb:
         b0:4b:75:9c:9e:94:85:0b:5e:52:53:d6:4c:cd:59:50:f4:d7:
         c4:7d:d7:05:bb:b7:f3:4a:43:ab:98:d1:c4:5f:34:70:c0:6a:
         93:3c:95:dd:ed:ac:29:75:5b:87:b7:d3:33:5a:5c:5b:c5:e1:
         c0:58:00:ae:5d:c1:1c:ef:b8:ad:45:b9:40:c5:40:6c:ae:14:
         67:03:48:4b:21:58:c4:a4:0f:41:e8:36:11:28:b9:89:2b:63:
         5e:ec:ea:fc:7f:bb:0c:39:ad:71:1c:c6:16:51:16:08:cb:81:
         d0:b2:61:59:ea:db:e0:cc:c0:7a:7c:f8:9b:2f:6e:67:d2:e6:
         1b:33:20:44:19:a3:01:72:62:da:d1:ff:82:f0:78:b5:48:40:
         a4:8f:52:9e:57:8b:d7:61:7c:3c:30:90:63:bd:c7:8c:ee:8a:
         45:2c:1e:5d:ac:a8:19:01:5f:61:3f:74:6b:35:31:50:5b:0a:
         ac:28:cb:46:fb:ac:43:71:70:b4:47:bb:3b:4b:c5:30:1f:93:
         56:88:81:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 09:33:43 2021 by LibreSSL & rpki-client.