Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/aos_bOoc5Hx4u8RgPZ3AcMrhF-s.roa (download)

Subject key identifier:   6A:8B:3F:6C:EA:1C:E4:7C:78:BB:C4:60:3D:9D:C0:70:CA:E1:17:EB 
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
asID:                     AS211252
Prefixes:
    1: 194.31.96.0/24 (max: 24)
    2: 31.210.20.0/23 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/aos_bOoc5Hx4u8RgPZ3AcMrhF-s.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35068162 (0x2171902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
        Validity
            Not Before: Oct 13 09:40:14 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6a8b3f6cea1ce47c78bbc4603d9dc070cae117eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2c:fa:b4:bd:e6:88:f6:15:36:7e:18:15:2e:
                    fe:41:6e:c9:f4:fe:57:c8:0d:91:99:cb:91:31:ca:
                    3e:fd:08:10:8a:25:28:92:aa:3d:cb:fc:90:be:99:
                    9c:5d:ae:06:41:28:1d:aa:eb:56:4c:5b:60:8f:50:
                    63:9b:06:23:75:15:a3:fe:ff:5e:98:d6:31:b2:d1:
                    57:05:6c:27:35:d6:7b:29:38:b8:11:74:13:c2:b9:
                    44:58:38:bf:af:a3:6b:d4:ae:3d:54:b9:03:e8:44:
                    2e:f3:c6:6d:2a:d5:15:52:fd:6f:a5:23:ad:70:cc:
                    6b:98:73:6e:af:79:20:8c:ac:e3:03:60:7a:d5:8f:
                    c9:8e:82:b9:1f:4b:4a:fa:05:81:06:25:2d:94:5a:
                    a4:ad:dc:5a:53:30:c9:c8:28:cb:df:0c:3d:e0:b0:
                    a7:75:d8:25:58:ac:cc:ec:0f:dd:a8:46:31:20:8e:
                    ca:63:d2:d2:f3:de:3e:e5:ab:46:98:56:1f:cf:74:
                    62:88:21:90:6c:de:19:cc:9b:0a:bf:1b:57:53:2a:
                    a8:43:a5:a7:f1:98:66:05:fc:8c:9b:61:47:98:08:
                    5e:ef:ed:fa:6b:ca:b4:d1:91:e1:7d:89:44:c6:ef:
                    d1:c7:6b:65:82:7c:6f:93:66:fa:cc:44:f0:eb:f9:
                    fd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6A:8B:3F:6C:EA:1C:E4:7C:78:BB:C4:60:3D:9D:C0:70:CA:E1:17:EB
            X509v3 Authority Key Identifier: 
                keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/aos_bOoc5Hx4u8RgPZ3AcMrhF-s.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.210.20.0/23
                  194.31.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:4c:9f:2c:c5:d4:52:06:76:59:78:e4:3c:3b:02:d0:8c:2d:
         8b:25:95:86:9b:38:6a:42:09:b6:42:4e:57:72:eb:7b:d9:37:
         9d:4a:b2:fa:62:29:ac:f3:73:40:ab:07:64:3d:d8:43:ec:5a:
         a2:3d:af:4d:bf:d3:a3:4c:da:f3:ac:25:9b:ec:a8:d0:14:b1:
         96:75:dd:cc:d8:94:91:bf:36:92:bb:27:d2:13:ce:10:a4:3d:
         0a:b1:2a:b3:d8:3c:fa:ac:5b:ff:06:6b:0d:b4:5f:60:03:45:
         7b:88:5c:68:48:a2:35:f4:b7:16:97:df:c4:9e:de:71:57:91:
         a0:bd:e7:8e:e8:40:8f:de:82:d8:98:f0:3d:b7:b4:db:c0:bc:
         4a:87:00:ba:eb:6e:44:4a:d6:b8:d4:4d:c7:aa:8d:7f:53:d3:
         54:36:ea:a6:6b:a6:9f:53:63:07:78:70:c9:50:8e:cf:53:ac:
         38:38:1c:03:64:0f:d0:96:24:68:9d:f7:c9:6a:1a:62:e5:8d:
         0f:03:95:62:fc:cb:7f:c7:83:23:a5:4a:d6:cd:7d:32:91:95:
         a2:be:c2:a9:8d:46:fb:cd:32:a3:c4:a1:c8:ee:81:b0:44:e8:
         e1:56:5f:dc:28:8a:fa:f0:00:dc:40:dd:36:a2:cf:0d:25:bd:
         1b:0c:27:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Oct 13 11:19:37 2021 by LibreSSL & rpki-client.