Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Dkfgi4jDJzoLPP04YAo67zs0nVo.roa (download)

Subject key identifier:   0E:47:E0:8B:88:C3:27:3A:0B:3C:FD:38:60:0A:3A:EF:3B:34:9D:5A 
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
asID:                     AS211252
Prefixes:
    1: 194.31.96.0/24 maxlen: 24
    2: 194.99.46.0/24 maxlen: 24
    3: 31.210.20.0/23 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Dkfgi4jDJzoLPP04YAo67zs0nVo.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42227777 (0x2845841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
        Validity
            Not Before: Dec  2 10:32:44 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0e47e08b88c3273a0b3cfd38600a3aef3b349d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:a0:b6:44:5d:0b:c5:e4:e1:c7:39:cd:20:
                    00:23:d1:6a:cc:5f:51:55:78:59:97:7d:a2:d0:9e:
                    2c:f6:a6:99:3a:75:0e:8b:e2:13:47:c8:57:85:17:
                    b6:92:04:29:60:39:e3:1a:75:69:51:73:2c:95:fd:
                    ba:aa:49:f7:b8:9a:ba:64:b6:ec:2f:72:87:99:80:
                    59:3b:39:75:6d:54:43:66:e4:68:48:03:3d:80:a0:
                    09:32:fc:53:ee:fd:6b:2f:c6:77:3b:38:10:3a:32:
                    37:50:01:c1:88:13:3e:e0:ef:b1:f7:a9:fb:5b:98:
                    66:cc:b5:4a:ca:fe:fa:3f:08:27:cc:48:20:7c:f8:
                    4b:0b:6a:d5:b6:b1:ab:94:79:a2:8b:b9:1b:23:c9:
                    01:9a:d5:74:fc:9e:6c:86:08:a9:14:c8:00:6a:ba:
                    1a:9a:42:0b:b3:3e:ed:c8:3f:51:61:34:79:cf:c2:
                    b0:80:f8:51:b3:0d:0f:27:52:14:93:5e:2e:01:ad:
                    1d:b2:49:dd:3a:bc:47:e0:df:45:c0:ad:c2:27:e5:
                    29:b6:a1:ef:87:52:75:f8:28:d0:1b:8c:4b:82:c9:
                    11:d7:f8:55:bc:7a:98:a4:fc:5f:f8:92:93:c5:ea:
                    99:96:fd:94:ca:12:e7:ee:80:4c:44:21:fc:73:e0:
                    87:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0E:47:E0:8B:88:C3:27:3A:0B:3C:FD:38:60:0A:3A:EF:3B:34:9D:5A
            X509v3 Authority Key Identifier: 
                keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Dkfgi4jDJzoLPP04YAo67zs0nVo.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.210.20.0/23
                  194.31.96.0/24
                  194.99.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:c8:44:ea:d3:43:2f:09:30:72:54:57:d5:fb:e1:81:69:0a:
         8a:87:b0:e7:83:fe:c1:0f:d1:ee:9c:42:c4:20:0d:60:e9:5b:
         21:f6:ce:3d:92:03:06:0a:8f:f1:aa:af:4f:ad:d4:88:cb:d3:
         23:34:ed:16:4c:60:d1:d0:7d:fa:7c:c7:d8:42:05:24:a1:cd:
         92:33:92:66:a8:3a:57:ff:7d:e6:09:a4:aa:e1:f8:fb:c5:c6:
         92:90:70:d6:79:d0:8f:91:8e:79:3d:62:78:62:83:d8:b5:6c:
         cc:19:3b:6e:ad:cd:b5:c9:3c:ee:79:d4:88:c7:81:86:7d:91:
         c5:52:f8:2b:93:38:30:86:21:d0:3f:97:d6:10:35:92:17:f0:
         57:e0:4b:78:ed:f7:f6:ce:5c:b1:46:53:cd:ed:1b:cf:84:ae:
         e1:f1:b6:04:94:de:b1:86:fa:a2:a7:7a:db:73:40:da:53:73:
         d2:ff:af:73:11:58:cb:d1:8c:96:d3:61:cb:85:d1:ee:6b:6a:
         73:09:b1:15:5a:84:bd:f0:ef:03:e9:6f:11:3d:0c:89:cc:7e:
         22:3f:98:83:69:13:bf:4a:56:7f:b9:f4:59:3c:21:88:5f:72:
         71:61:a9:cd:96:54:e4:23:89:cb:ac:aa:31:79:98:5b:ac:15:
         84:59:1a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Dec 2 12:24:50 2021 by LibreSSL & rpki-client.