Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/aKV-tJOpW1kS25lMDmHWtrWhJIg.roa (download)

Subject key identifier:   68:A5:7E:B4:93:A9:5B:59:12:DB:99:4C:0E:61:D6:B6:B5:A1:24:88 
Authority key identifier: 46:A8:CC:61:DE:20:A9:00:48:83:1F:AC:AE:22:FA:37:0E:57:69:36
asID:                     AS1239
Prefixes:
    1: 91.246.63.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/aKV-tJOpW1kS25lMDmHWtrWhJIg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11153973 (0xaa3235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46a8cc61de20a90048831facae22fa370e576936
        Validity
            Not Before: Jan  1 05:05:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=68a57eb493a95b5912db994c0e61d6b6b5a12488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:98:67:f0:77:ea:95:51:85:a9:af:6a:5b:
                    6b:8e:23:31:6f:2d:94:9b:ea:70:c6:24:96:99:07:
                    e5:d3:e1:6f:c9:eb:1c:e4:e9:3d:89:ab:e5:40:7e:
                    93:a5:f8:2f:a0:19:b2:e8:3b:1d:18:d0:48:a8:45:
                    11:58:62:ce:50:b3:2d:8a:81:60:4c:04:70:3c:29:
                    e3:df:d0:0e:4f:61:b2:af:d1:55:35:76:6d:17:b3:
                    83:fd:20:d6:9f:f6:73:ae:65:0d:4b:36:10:1b:50:
                    46:de:14:e0:ec:9f:7e:0c:4f:19:26:07:49:66:9b:
                    da:f0:e0:85:9b:34:2b:60:2e:69:7d:3b:44:7d:1c:
                    d3:fa:45:d9:f0:a6:5e:c5:87:6e:73:8f:f3:1a:e3:
                    f0:8f:86:bd:46:7f:65:43:15:cb:32:e8:0d:26:6f:
                    49:df:cd:a3:29:9b:68:83:e2:62:63:cd:64:05:9b:
                    1d:15:72:03:40:70:8e:3a:bd:8c:67:b5:9f:1d:c7:
                    d7:a8:09:1a:a5:a1:bd:94:49:ed:1d:59:b0:8d:56:
                    78:94:d9:8b:05:43:5a:f9:ea:63:12:cd:80:e6:d7:
                    d0:da:f5:9a:33:cd:59:d4:fc:06:d0:61:45:93:ae:
                    1f:2a:b2:4d:52:03:4f:24:32:38:18:0f:e6:bc:12:
                    d3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                68:A5:7E:B4:93:A9:5B:59:12:DB:99:4C:0E:61:D6:B6:B5:A1:24:88
            X509v3 Authority Key Identifier: 
                keyid:46:A8:CC:61:DE:20:A9:00:48:83:1F:AC:AE:22:FA:37:0E:57:69:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqjMYd4gqQBIgx-sriL6Nw5XaTY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/aKV-tJOpW1kS25lMDmHWtrWhJIg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/RqjMYd4gqQBIgx-sriL6Nw5XaTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.246.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:a7:28:fc:6c:dc:05:e8:48:8f:8c:4e:2e:e6:7c:4d:f5:67:
         74:6a:a7:36:3c:e8:29:69:b8:40:7c:bd:b9:83:2a:8d:a6:03:
         da:2d:14:e8:ea:c5:c0:29:17:9a:01:1d:5b:15:b3:1d:5d:ea:
         da:cb:95:79:64:f9:3f:9b:9f:8e:3b:16:47:29:72:f7:73:fd:
         46:a4:f5:08:4b:d6:f5:53:54:1b:33:63:61:02:b2:fc:1d:ea:
         2a:b5:2b:fe:e6:07:8c:d3:dd:11:4b:ca:4d:f2:56:3c:c5:43:
         5f:e4:6d:92:d0:53:02:42:30:bf:af:29:30:bb:80:c4:ea:95:
         90:6b:40:c8:40:97:36:9d:3d:1d:7c:c2:f9:84:95:8a:47:6d:
         53:58:57:56:e6:9a:b3:e6:8b:ef:a5:f1:6e:16:a0:bc:9b:3a:
         03:d2:a4:5a:0d:57:e7:0f:9b:ca:59:1a:d7:ee:4f:6b:af:1c:
         51:44:0a:77:3d:d1:aa:b9:a3:b9:a7:31:81:cd:e5:9e:7c:71:
         21:62:71:68:ef:87:7b:a8:4d:7e:0a:7d:ed:54:24:6e:db:83:
         18:87:c2:58:b9:03:27:74:93:6e:fb:8c:19:dd:4a:5f:eb:d8:
         92:b1:91:f9:49:46:45:72:dc:e8:e1:d0:3a:83:1f:62:f4:61:
         48:8e:46:5f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAKoyNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NmE4Y2M2MWRlMjBhOTAwNDg4MzFmYWNhZTIyZmEzNzBlNTc2OTM2MB4XDTIyMDEw
MTA1MDU1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjhhNTdlYjQ5M2E5
NWI1OTEyZGI5OTRjMGU2MWQ2YjZiNWExMjQ4ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALRjmGfwd+qVUYWpr2pba44jMW8tlJvqcMYklpkH5dPhb8nr
HOTpPYmr5UB+k6X4L6AZsug7HRjQSKhFEVhizlCzLYqBYEwEcDwp49/QDk9hsq/R
VTV2bRezg/0g1p/2c65lDUs2EBtQRt4U4OyffgxPGSYHSWab2vDghZs0K2AuaX07
RH0c0/pF2fCmXsWHbnOP8xrj8I+GvUZ/ZUMVyzLoDSZvSd/NoymbaIPiYmPNZAWb
HRVyA0Bwjjq9jGe1nx3H16gJGqWhvZRJ7R1ZsI1WeJTZiwVDWvnqYxLNgObX0Nr1
mjPNWdT8BtBhRZOuHyqyTVIDTyQyOBgP5rwS03kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRopX60k6lbWRLbmUwOYda2taEkiDAfBgNVHSMEGDAWgBRGqMxh3iCpAEiD
H6yuIvo3DldpNjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Jxak1ZZDRncVFCSWd4LXNyaUw2Tnc1WGFUWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzMvYTc1ZjYwLTA1OGUtNDNjNy05Y2E1LTcxZDQ3Mjc0OGI1My8x
L2FLVi10Sk9wVzFrUzI1bE1EbUhXdHJXaEpJZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMv
YTc1ZjYwLTA1OGUtNDNjNy05Y2E1LTcxZDQ3Mjc0OGI1My8xL1Jxak1ZZDRncVFC
SWd4LXNyaUw2Tnc1WGFUWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFv2PzANBgkqhkiG9w0BAQsFAAOC
AQEAS6co/GzcBehIj4xOLuZ8TfVndGqnNjzoKWm4QHy9uYMqjaYD2i0U6OrFwCkX
mgEdWxWzHV3q2suVeWT5P5ufjjsWRyly93P9RqT1CEvW9VNUGzNjYQKy/B3qKrUr
/uYHjNPdEUvKTfJWPMVDX+RtktBTAkIwv68pMLuAxOqVkGtAyECXNp09HXzC+YSV
ikdtU1hXVuaas+aL76XxbhagvJs6A9KkWg1X5w+bylka1+5Pa68cUUQKdz3Rqrmj
uacxgc3lnnxxIWJxaO+He6hNfgp97VQkbtuDGIfCWLkDJ3STbvuMGd1KX+vYkrGR
+UlGRXLc6OHQOoMfYvRhSI5GXw==
-----END CERTIFICATE-----

Generated at Sun Jan 30 12:32:34 2022 by LibreSSL & rpki-client.