Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/byLMFZ7Ls5Xi84h5VrfStmSExK0.roa (download)

Subject key identifier:   6F:22:CC:15:9E:CB:B3:95:E2:F3:88:79:56:B7:D2:B6:64:84:C4:AD 
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
asID:                     AS399471
Prefixes:
    1: 194.99.45.0/24 (max: 24)
    2: 31.210.22.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/byLMFZ7Ls5Xi84h5VrfStmSExK0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17680572 (0x10dc8bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
        Validity
            Not Before: Jun 22 07:08:39 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6f22cc159ecbb395e2f3887956b7d2b66484c4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:1e:2a:45:29:25:f0:64:6f:c9:1e:4c:40:
                    84:fe:eb:30:7b:5b:dd:1a:4c:80:93:e8:a6:f0:ec:
                    bd:fa:30:c0:13:01:93:0e:fd:2f:c3:cc:f1:3b:28:
                    24:43:71:11:1a:fc:c7:7f:20:d3:7f:d5:2b:b1:0f:
                    e2:33:04:ed:60:88:47:67:4c:dc:fe:f9:cf:aa:7d:
                    43:7c:7a:ac:93:67:32:ff:6c:3e:60:55:81:9d:c7:
                    20:ac:e5:56:f8:00:fe:d1:5c:f4:52:91:6b:cd:63:
                    27:aa:13:b6:f5:75:c8:ed:aa:f5:4a:57:8c:1f:c1:
                    a5:49:16:b2:5b:c5:d1:8b:35:9b:18:23:81:2f:bc:
                    7a:85:4d:0c:38:70:dc:36:a8:98:b6:fd:5a:11:ba:
                    09:c6:31:2e:15:37:ac:4d:e1:a9:09:41:56:b0:f5:
                    9e:b5:a4:97:d3:d0:e3:55:06:cf:22:ba:ae:3b:11:
                    28:af:61:61:5b:82:a9:5c:6b:bd:00:28:b7:50:e1:
                    17:56:b6:32:88:3c:08:1d:6e:6c:d1:9e:38:12:ec:
                    56:5a:4b:5d:b2:9c:70:10:b7:5d:6f:84:c9:d4:8b:
                    41:6e:fd:88:a0:78:35:9d:0e:2e:5e:86:c2:a3:16:
                    af:ba:0b:13:c5:8b:53:c7:43:54:20:2f:63:dc:82:
                    00:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6F:22:CC:15:9E:CB:B3:95:E2:F3:88:79:56:B7:D2:B6:64:84:C4:AD
            X509v3 Authority Key Identifier: 
                keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/byLMFZ7Ls5Xi84h5VrfStmSExK0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.210.22.0/24
                  194.99.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:57:7a:9d:5a:26:d0:8e:9f:d7:42:e9:af:99:9a:01:b9:7c:
         ea:99:94:0b:1e:47:d1:00:1f:93:30:b3:33:23:87:ea:9a:7d:
         34:7f:66:28:5a:23:74:c9:67:48:2e:88:5f:75:4f:24:99:90:
         12:1c:9e:41:06:8c:ff:69:5a:88:6b:56:a4:4f:ea:21:22:da:
         a5:17:cc:26:41:a5:e8:4a:be:36:9c:3a:a6:f9:db:fa:67:eb:
         42:5c:6b:8f:52:23:c2:a8:d0:d4:28:8a:31:7d:98:2d:d3:62:
         46:a3:58:0c:4a:a6:58:6c:07:7d:ed:52:96:e8:ca:a3:85:df:
         82:06:b5:74:7a:21:6d:5b:82:ee:f9:fc:07:96:33:99:56:dd:
         26:ed:87:10:6c:d7:7b:c3:48:88:97:b6:2b:03:13:c7:41:d2:
         4d:da:1c:c7:41:d3:0c:e6:d9:20:7a:90:18:0f:8a:7a:7a:f3:
         ce:40:7c:32:01:4d:c0:a5:5b:c9:3c:9f:e4:6a:03:c6:93:65:
         6f:15:14:54:b3:b1:77:e3:15:65:0a:22:ad:0f:c8:bd:6e:61:
         da:9e:34:e2:58:e5:2a:26:bb:60:4a:73:fe:ec:f1:52:b5:da:
         62:f4:6e:fd:3d:ed:a3:4d:49:15:6a:b0:32:01:aa:bb:31:43:
         ca:a2:2a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:08:26 2021 by LibreSSL & rpki-client.