Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/a_TOWwu1BSL_F6PsUH-XjprnZlI.roa (download)

Subject key identifier:   6B:F4:CE:5B:0B:B5:05:22:FF:17:A3:EC:50:7F:97:8E:9A:E7:66:52 
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
asID:                     AS398464
Prefixes:
    1: 77.105.4.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/a_TOWwu1BSL_F6PsUH-XjprnZlI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150523558 (0x8f8cea6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Apr 21 06:51:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6bf4ce5b0bb50522ff17a3ec507f978e9ae76652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dc:76:6f:7d:63:ed:e3:55:c8:8c:4a:9f:ba:
                    b0:ab:28:a2:8a:ec:97:d2:27:04:8a:a6:44:3c:e7:
                    fb:d6:fb:a6:41:4a:11:7b:85:b2:a6:40:41:ca:9d:
                    e6:c1:0c:34:5a:4e:55:ee:63:ec:9d:26:6f:f1:34:
                    74:42:f7:1b:03:4c:f4:16:e1:e8:f8:c6:91:84:37:
                    da:23:59:17:18:93:4e:9f:ea:a7:28:68:6a:8b:82:
                    8c:98:3a:03:7f:43:6f:72:2a:55:60:53:a3:f7:9b:
                    37:8e:cf:8c:a0:3e:0d:a0:65:a9:ad:99:a8:62:d6:
                    88:3d:65:84:bc:f8:80:f8:7c:e2:40:59:4b:f4:7e:
                    8e:8a:60:09:a3:4a:9d:03:ea:c6:17:c7:e8:78:e0:
                    9c:af:c6:b9:6f:5b:0d:9d:8b:05:fd:78:8a:34:97:
                    53:65:a6:2e:ea:94:6d:bf:95:24:56:85:b3:40:a0:
                    8f:c5:08:95:8a:81:0c:b0:cf:66:76:e1:7b:56:88:
                    67:5f:61:d0:3d:bc:66:bf:d3:be:8d:e2:e7:33:a1:
                    8d:18:32:55:d5:2f:56:4e:9d:c3:87:dd:cd:1e:69:
                    06:a0:0c:a8:5a:0e:94:30:09:ab:6c:39:ef:b2:77:
                    1d:63:fc:42:87:5c:b8:bd:7a:30:df:77:20:37:3b:
                    cd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6B:F4:CE:5B:0B:B5:05:22:FF:17:A3:EC:50:7F:97:8E:9A:E7:66:52
            X509v3 Authority Key Identifier: 
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/a_TOWwu1BSL_F6PsUH-XjprnZlI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:fd:9d:84:25:61:c3:93:05:91:8c:78:15:4b:39:26:73:97:
         3b:cb:16:fe:01:28:8f:9b:56:f4:bc:41:83:35:d9:7e:ec:1d:
         95:3a:1b:54:b5:6e:58:83:5a:85:54:4a:54:3f:7e:c7:06:d9:
         72:24:aa:f9:92:3f:7e:16:f9:98:11:02:82:c6:91:b4:90:73:
         6e:6e:26:df:61:00:6b:77:65:0d:b2:22:3c:31:20:e7:3f:0f:
         7d:b4:12:04:f4:e1:d3:91:04:57:ac:66:76:44:12:3b:9c:e2:
         f9:fa:ba:91:e6:9c:07:90:e2:86:e8:64:03:5f:9c:33:cd:9c:
         d3:c2:88:4f:9c:11:87:8b:ea:35:ae:a4:ff:46:03:30:a2:17:
         6b:ef:7d:f7:44:20:8f:af:db:66:18:f5:9a:e9:cf:4c:13:ff:
         05:28:6d:b7:c9:54:b7:75:80:21:1c:d3:ff:f8:45:9a:73:84:
         57:04:59:99:e9:90:0b:6d:a2:b2:2f:a4:53:e3:f1:01:a1:3e:
         86:b2:e5:0b:68:70:90:c7:d4:9b:1e:00:da:31:28:25:83:66:
         98:ff:99:60:7c:1f:27:3d:2d:3e:f9:12:4d:0f:31:e6:13:dd:
         14:02:18:9d:49:e7:5f:be:0b:5a:ed:3f:3f:27:6f:12:8d:7a:
         2a:78:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Apr 21 09:39:58 2022 by LibreSSL & rpki-client.