Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/7r4R9Yep3OeBGow7FiyHPTy9mQI.roa (download)

Subject key identifier:   EE:BE:11:F5:87:A9:DC:E7:81:1A:8C:3B:16:2C:87:3D:3C:BD:99:02 
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
asID:                     AS395880
Prefixes:
    1: 91.205.233.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/7r4R9Yep3OeBGow7FiyHPTy9mQI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81687040 (0x4de7200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
        Validity
            Not Before: Jan  1 01:00:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eebe11f587a9dce7811a8c3b162c873d3cbd9902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:98:a9:6b:d6:4e:8f:1f:7b:3b:cd:5e:cc:
                    32:2e:50:60:e3:f6:3e:6b:c3:9b:5c:3d:31:f8:ff:
                    6f:69:87:ce:0c:a6:ea:78:b8:ac:4a:46:73:1e:1c:
                    87:35:bd:f0:b5:07:29:04:06:14:d8:be:97:77:75:
                    16:9b:39:a6:95:83:15:7e:5f:15:f1:16:fa:60:55:
                    d0:23:5e:58:62:64:3f:5c:84:3a:fa:d3:95:6e:8b:
                    6d:3e:65:f2:ed:41:4f:1f:ed:87:e9:7a:06:33:44:
                    c3:62:19:6e:52:72:b4:8e:7a:b5:e5:1c:3f:fd:64:
                    fb:d8:70:09:22:a6:b9:78:b4:62:bd:e6:3e:a7:37:
                    39:3f:29:a9:42:fb:ff:a0:1e:31:a3:c3:08:22:c6:
                    e0:e9:78:1d:c3:09:36:04:4c:55:a7:b9:f3:cc:61:
                    81:b1:49:d3:d1:35:95:8f:8f:50:7d:8a:82:91:d5:
                    2f:72:e7:d1:bd:72:fc:1d:b1:7c:32:c6:b1:59:92:
                    01:7b:a0:b6:20:e1:46:cd:88:73:b7:9a:91:1e:d4:
                    a6:00:78:88:57:d0:d1:e2:b2:df:3e:07:7d:66:d6:
                    50:9b:f6:56:46:b5:66:ea:12:fb:36:ac:6f:55:b9:
                    53:df:e6:83:2e:c8:4a:4c:5b:20:e8:ce:31:25:59:
                    60:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EE:BE:11:F5:87:A9:DC:E7:81:1A:8C:3B:16:2C:87:3D:3C:BD:99:02
            X509v3 Authority Key Identifier: 
                keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/7r4R9Yep3OeBGow7FiyHPTy9mQI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.205.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:f6:94:d4:24:46:c2:56:b0:9d:b0:b7:47:eb:1e:3e:f4:68:
         b0:44:8e:c0:79:a8:b7:3d:9c:a9:6d:20:c9:d3:97:1b:dd:2e:
         ba:72:37:a0:ff:6e:12:3f:a3:6c:96:ab:f2:a5:53:5f:91:d6:
         f2:50:43:b7:00:cd:bd:ca:a1:ec:14:15:96:6e:89:bd:e7:66:
         3e:ae:f1:d2:61:77:cf:a7:91:de:ab:bb:1f:e7:a3:59:9b:77:
         a7:8b:17:b1:9a:20:09:91:02:52:23:ac:10:f0:3b:a0:52:b0:
         27:2c:78:c3:c1:d7:b5:00:4d:0a:25:91:66:e6:f6:e2:f0:24:
         75:3b:ad:3f:45:c4:e4:16:e2:c3:22:26:68:0e:1c:4a:61:88:
         69:45:ca:85:3c:92:74:48:20:f8:16:5d:02:52:b4:46:9e:6c:
         1d:9e:b3:b1:47:a8:c7:d0:40:bc:06:85:0b:17:e2:10:5c:98:
         4b:f7:73:94:5c:f6:17:de:83:af:e4:62:2d:a2:56:70:3f:ae:
         98:bd:7d:82:58:54:65:05:af:6b:8b:ac:99:6a:6f:54:f1:96:
         83:dd:48:20:84:fc:59:09:e5:6c:a6:4f:29:d5:7f:43:65:07:
         ca:53:58:0c:3f:2f:ff:2a:15:36:bb:05:21:34:0d:1b:54:43:
         85:0f:7a:0d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBN5yADANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MmRjOWMyMThiNTEwYzA3YmM2NjU5YjA5ZmJkMzJhZmU2OGFiZmQyMB4XDTIyMDEw
MTAxMDA0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWViZTExZjU4N2E5
ZGNlNzgxMWE4YzNiMTYyYzg3M2QzY2JkOTkwMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALMDmKlr1k6PH3s7zV7MMi5QYOP2PmvDm1w9Mfj/b2mHzgym
6ni4rEpGcx4chzW98LUHKQQGFNi+l3d1Fps5ppWDFX5fFfEW+mBV0CNeWGJkP1yE
OvrTlW6LbT5l8u1BTx/th+l6BjNEw2IZblJytI56teUcP/1k+9hwCSKmuXi0Yr3m
Pqc3OT8pqUL7/6AeMaPDCCLG4Ol4HcMJNgRMVae588xhgbFJ09E1lY+PUH2KgpHV
L3Ln0b1y/B2xfDLGsVmSAXugtiDhRs2Ic7eakR7UpgB4iFfQ0eKy3z4HfWbWUJv2
Vka1ZuoS+zasb1W5U9/mgy7ISkxbIOjOMSVZYAsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTuvhH1h6nc54EajDsWLIc9PL2ZAjAfBgNVHSMEGDAWgBRS3Jwhi1EMB7xm
WbCfvTKv5oq/0jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1V0eWNJWXRSREFlOFpsbXduNzB5ci1hS3Y5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWQvNDA5YjdlLTEyNzUtNDNlZC1hZjBmLTUyZjk3YjI3N2QxZi8x
LzdyNFI5WWVwM09lQkdvdzdGaXlIUFR5OW1RSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQv
NDA5YjdlLTEyNzUtNDNlZC1hZjBmLTUyZjk3YjI3N2QxZi8xL1V0eWNJWXRSREFl
OFpsbXduNzB5ci1hS3Y5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvN6TANBgkqhkiG9w0BAQsFAAOC
AQEAYPaU1CRGwlawnbC3R+sePvRosESOwHmotz2cqW0gydOXG90uunI3oP9uEj+j
bJar8qVTX5HW8lBDtwDNvcqh7BQVlm6JvedmPq7x0mF3z6eR3qu7H+ejWZt3p4sX
sZogCZECUiOsEPA7oFKwJyx4w8HXtQBNCiWRZub24vAkdTutP0XE5BbiwyImaA4c
SmGIaUXKhTySdEgg+BZdAlK0Rp5sHZ6zsUeox9BAvAaFCxfiEFyYS/dzlFz2F96D
r+RiLaJWcD+umL19glhUZQWva4usmWpvVPGWg91IIIT8WQnlbKZPKdV/Q2UHylNY
DD8v/yoVNrsFITQNG1RDhQ96DQ==
-----END CERTIFICATE-----

Generated at Sat Jan 1 03:02:05 2022 by LibreSSL & rpki-client.