Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/_611K3EwJkbywy5HODlA3nx_hH4.roa (download)

Subject key identifier:   FF:AD:75:2B:71:30:26:46:F2:C3:2E:47:38:39:40:DE:7C:7F:84:7E 
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
asID:                     AS213035
Prefixes:
    1: 194.99.44.0/24 (max: 24)
    2: 194.31.98.0/23 (max: 24)
    3: 194.31.97.0/24 (max: 24)
    4: 194.99.46.0/23 (max: 24)
    5: 31.210.23.0/24 (max: 24)
    6: 194.59.216.0/22 (max: 24)
    7: 162.12.206.0/24 (max: 24)
    8: 162.12.204.0/23 (max: 24)
    9: 162.12.207.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/_611K3EwJkbywy5HODlA3nx_hH4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35111230 (0x217c13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
        Validity
            Not Before: Oct 13 09:40:15 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ffad752b71302646f2c32e47383940de7c7f847e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:df:d2:60:3b:59:81:09:6f:23:af:bf:05:
                    59:42:31:e8:47:1e:c2:84:bf:65:a7:3e:c2:b5:03:
                    2e:ba:29:19:99:49:7a:87:18:78:97:a7:6c:9e:72:
                    16:be:72:00:00:6e:4d:82:ac:d5:44:c2:a3:3f:f9:
                    ae:a1:b3:9e:08:1d:b1:09:33:dd:39:ec:4c:d7:27:
                    9b:41:bc:a9:89:6c:d1:d0:7b:66:05:c1:fa:c5:cf:
                    4f:8a:49:c1:76:d2:c0:72:51:30:ec:20:26:97:71:
                    08:6e:d1:0d:e8:d1:a5:59:b9:52:83:4a:04:2a:8d:
                    b5:64:1d:b5:fd:7e:13:3e:c0:72:95:a4:f4:19:37:
                    77:3b:08:0c:5f:b9:cb:13:a2:d6:c5:5f:9d:0d:8c:
                    a9:2c:d1:d7:5e:3f:82:0b:64:06:32:62:dd:55:0c:
                    22:07:87:7e:e9:98:c6:c9:90:61:65:48:dd:97:e1:
                    d6:15:e2:49:bb:b8:99:81:21:ea:54:b0:0a:ca:fd:
                    18:35:36:3a:e1:c1:53:c9:48:a4:87:14:00:70:c8:
                    3a:1a:c6:93:61:21:08:f7:d4:92:12:0c:d9:b6:56:
                    53:81:ce:d3:30:fa:1d:fb:07:e6:69:00:e4:2e:8b:
                    83:c0:f1:ed:e2:39:bf:86:cf:49:6d:ae:dc:20:57:
                    fa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FF:AD:75:2B:71:30:26:46:F2:C3:2E:47:38:39:40:DE:7C:7F:84:7E
            X509v3 Authority Key Identifier: 
                keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/_611K3EwJkbywy5HODlA3nx_hH4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.210.23.0/24
                  162.12.204.0/22
                  194.31.97.0-194.31.99.255
                  194.59.216.0/22
                  194.99.44.0/24
                  194.99.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:1f:28:77:64:10:6c:4d:98:90:dc:f7:fd:11:58:91:a7:35:
         b5:82:56:78:bc:af:d1:65:a9:49:4a:0e:51:95:40:7e:9e:b2:
         e0:28:51:1f:7a:2f:26:1c:0e:e9:9e:aa:8c:4a:ee:44:fc:e2:
         1a:64:1d:53:14:54:c6:d7:ce:3a:bd:d8:65:fa:be:9f:19:74:
         76:fc:b1:e1:64:3c:bf:5f:10:05:97:46:7f:75:bb:6f:a7:b9:
         65:1f:63:b6:c5:94:fe:ad:4b:3b:52:fa:2a:2c:79:52:4e:30:
         1c:5d:cc:71:85:da:bf:8a:14:29:1b:ec:78:f3:31:70:80:70:
         bb:09:3b:aa:d3:33:cb:3e:2d:0a:35:4b:20:11:1a:b0:4f:52:
         9b:72:1a:71:ba:3f:11:78:2e:74:3b:e2:6e:43:ce:e6:5c:ad:
         02:10:c5:a8:d5:91:99:ba:f0:e2:93:9f:e4:a8:f8:7c:b2:b1:
         79:cb:53:a3:2d:a7:1b:ce:7c:30:4d:01:b0:26:cc:77:b3:c1:
         8c:0b:95:4a:87:3c:8d:85:b8:4f:5c:c5:a2:12:8d:0d:15:f7:
         11:47:ba:63:04:5c:14:16:7b:2b:c7:8b:57:ad:e2:a5:e9:8d:
         1d:97:bd:ce:a8:dd:bb:7f:7f:3f:83:75:6c:26:d2:a5:27:e3:
         9c:4b:d0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Oct 13 11:19:37 2021 by LibreSSL & rpki-client.