Route Origin Authorization
Location: rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/KLP1EwuqYVaTqCFpqEs5TAQiGkQ.roa (download)

Subject key identifier:   28:B3:F5:13:0B:AA:61:56:93:A8:21:69:A8:4B:39:4C:04:22:1A:44 
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
asID:                     AS60781
Prefixes:
    1: 185.67.4.0/22 (max: 22)
    2: 185.67.6.0/23 (max: 23)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/KLP1EwuqYVaTqCFpqEs5TAQiGkQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295289820 (0x1199c3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
        Validity
            Not Before: Jan  1 08:04:33 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=28b3f5130baa615693a82169a84b394c04221a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:39:26:ac:1d:0d:d5:9c:0b:42:59:b2:95:
                    fc:9b:0d:04:4c:21:58:95:d6:df:93:71:09:b6:7b:
                    66:1a:5e:12:db:64:b9:cc:b8:93:f6:00:19:65:84:
                    26:9f:36:a5:3c:a3:71:71:16:06:ff:25:d5:75:25:
                    77:af:65:6f:76:e2:ff:dc:bc:95:4b:00:07:f7:03:
                    83:4a:d4:c9:e0:f2:e2:da:48:18:10:23:69:e8:84:
                    07:f4:04:f2:69:7b:36:c9:a8:eb:4e:0b:de:41:f3:
                    ac:46:3f:79:ac:15:97:5b:4d:17:37:39:7f:ac:9d:
                    70:8a:1c:c8:dd:ca:63:07:2d:8d:29:14:a8:8b:80:
                    7f:9d:cb:5c:b9:50:ff:48:3c:ab:44:85:c8:82:39:
                    1e:d1:5f:ed:68:74:42:00:e6:ab:a4:8c:a8:8f:8b:
                    58:82:b2:c5:62:6d:87:df:21:8a:37:a0:1d:c4:3e:
                    3c:7a:cc:67:32:81:1b:5b:45:3d:9e:22:a8:ac:95:
                    2d:42:4f:f5:7f:a7:87:7e:2c:81:97:d6:3d:d8:1b:
                    66:f9:bc:da:72:ff:af:4f:ce:c4:c7:4c:98:e2:70:
                    64:2f:43:19:46:81:3e:71:04:9b:ae:67:cc:3e:52:
                    86:f3:27:74:06:88:de:23:14:47:71:28:84:17:5f:
                    19:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                28:B3:F5:13:0B:AA:61:56:93:A8:21:69:A8:4B:39:4C:04:22:1A:44
            X509v3 Authority Key Identifier: 
                keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer

            Subject Information Access: 
                1.3.6.1.5.5.7.48.11 - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/KLP1EwuqYVaTqCFpqEs5TAQiGkQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0.....C.
    Signature Algorithm: sha256WithRSAEncryption
         16:b0:5a:4d:3a:5e:fb:80:2e:14:8a:45:49:34:c7:b9:91:92:
         d7:63:bf:91:24:f1:c4:6d:22:7e:7e:f0:eb:ff:71:57:78:c4:
         98:f7:6a:96:f2:73:13:35:a1:30:da:d5:9c:9e:42:50:a4:f3:
         df:f9:95:6a:cb:5c:22:7b:51:61:b8:3a:43:95:cb:c4:61:14:
         c9:53:67:bc:42:12:84:5b:cd:af:4e:bf:10:be:d6:f7:cf:51:
         8f:ee:a6:ed:f6:ea:b1:78:92:f6:95:b6:97:d3:7d:34:98:d5:
         86:fc:c3:5f:a2:49:69:75:23:06:81:62:0f:12:3d:c8:04:10:
         01:14:1d:ec:98:8e:a5:8a:e8:1a:71:0f:30:db:04:27:e1:0b:
         c0:9f:07:db:77:f4:24:0c:4a:c3:ad:8d:7c:0f:d6:2b:ce:c5:
         a5:34:1f:d6:9e:4b:36:0a:67:12:9b:32:64:76:4c:b2:04:a2:
         65:57:ba:58:c8:f5:c3:7a:cd:a3:ad:81:f8:e1:fc:d4:0e:bb:
         f0:59:f4:f8:e1:2d:a5:7a:f5:ae:3c:29:0b:0c:e7:51:d7:3b:
         a3:ba:9d:35:31:9a:fc:76:fd:1f:53:0e:af:3c:43:16:82:d5:
         e6:38:42:67:0c:22:fe:2d:74:19:e5:90:65:a0:0a:27:5d:bb:
         14:6a:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:12:34 2021 by LibreSSL & rpki-client.