Route Origin Authorization
Location: rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/28CQarSOv7wqWDLFd-CiyAUaRbQ.roa (download)

Subject key identifier:   DB:C0:90:6A:B4:8E:BF:BC:2A:58:32:C5:77:E0:A2:C8:05:1A:45:B4 
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
asID:                     AS42831
Prefixes:
    1: 91.224.109.0/24 (max: 24)
    2: 91.224.108.0/23 (max: 23)
    3: 91.224.108.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/28CQarSOv7wqWDLFd-CiyAUaRbQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889380637 (0x3502df1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
        Validity
            Not Before: Jan  1 04:05:54 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dbc0906ab48ebfbc2a5832c577e0a2c8051a45b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:f0:6b:32:6f:02:cb:50:d5:18:83:a1:90:
                    b8:e2:2a:95:07:da:4d:b2:69:e0:a4:5c:d5:11:64:
                    72:a8:c1:12:65:f1:65:d0:95:4e:59:ee:f6:af:ba:
                    23:99:40:33:9c:50:28:91:58:df:a6:64:d7:a7:58:
                    f6:8e:68:59:2f:ec:3c:ef:47:ed:94:86:30:30:33:
                    aa:99:a1:97:ea:84:0b:0c:20:ce:41:db:98:bc:80:
                    32:23:ef:4c:5d:b0:d0:d2:72:5f:b7:fa:3a:1e:bd:
                    86:42:99:e5:00:39:3d:b3:3c:3a:8c:e0:0a:c8:1e:
                    9e:6a:d1:35:02:72:10:82:d3:1e:1c:ac:f4:80:e6:
                    2e:86:81:cc:50:8e:cb:45:bb:9b:4d:33:9d:cb:9c:
                    e9:17:a6:c1:dd:e5:ce:f4:62:6a:ca:8c:a4:20:46:
                    c7:fd:d3:4a:f3:c2:0d:ae:29:28:20:94:ac:0a:bc:
                    28:ab:84:8b:8a:32:c5:68:51:b6:d1:18:97:76:74:
                    8a:43:46:8e:68:86:20:7f:5b:41:5c:92:dd:1d:a3:
                    f2:58:87:04:5f:e3:b4:db:4e:3d:7d:58:6a:84:ce:
                    70:88:e0:46:c7:d6:c2:e3:67:6a:2b:99:3f:83:53:
                    09:44:01:7f:ba:30:c5:12:73:1e:d5:4a:df:63:94:
                    9a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DB:C0:90:6A:B4:8E:BF:BC:2A:58:32:C5:77:E0:A2:C8:05:1A:45:B4
            X509v3 Authority Key Identifier: 
                keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer

            Subject Information Access: 
                1.3.6.1.5.5.7.48.11 - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/28CQarSOv7wqWDLFd-CiyAUaRbQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0....[.l
    Signature Algorithm: sha256WithRSAEncryption
         14:5b:8a:f9:71:cd:9f:65:6c:57:86:f9:ee:42:bb:f7:38:8b:
         c8:fc:61:28:67:4b:a3:d7:82:a5:f8:ad:55:5d:f2:4d:1c:69:
         9e:2c:80:cb:8e:7a:60:0d:a4:22:4c:a1:e4:3f:85:56:78:e0:
         9a:8e:12:a7:25:b7:f7:af:bb:35:50:00:9d:ca:8d:c4:87:e2:
         90:ff:0c:52:6d:d0:b7:b0:5f:3a:87:a9:8c:6a:dd:e0:2b:8e:
         79:76:a1:cd:88:1d:54:72:c6:97:c5:a3:c4:69:bf:44:1e:1b:
         39:6c:f9:94:cd:50:b1:ea:87:fc:73:f5:ee:62:67:d7:61:55:
         cd:5b:40:1b:ae:e2:28:b7:aa:ff:60:5a:3b:60:98:c2:51:ff:
         93:10:23:76:4f:fe:f3:7b:16:f8:71:15:f9:c0:cc:33:f8:cd:
         fa:ce:04:48:b0:09:7b:9d:a1:ee:00:cb:94:03:94:6c:ce:34:
         9a:70:2d:08:dd:c3:f6:c1:2f:83:59:3a:15:e8:6b:ff:13:94:
         53:bc:2a:af:ba:b4:f8:f7:e3:86:ab:05:08:59:3e:c0:67:a6:
         bc:1d:46:18:72:13:44:ff:ac:fc:a0:f9:b9:e2:1b:e0:9a:3e:
         4f:df:d2:80:56:00:5e:72:08:42:4b:f1:91:58:c3:a0:9f:95:
         86:c5:41:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:03:18 2021 by LibreSSL & rpki-client.