Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/DfzScMGZevRRYRJtp9l7GwqTnF4.roa (download)

Subject key identifier:   0D:FC:D2:70:C1:99:7A:F4:51:61:12:6D:A7:D9:7B:1B:0A:93:9C:5E 
Authority key identifier: 35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
asID:                     AS61317
Prefixes:
    1: 168.220.128.0/19 (max: 24)
    2: 198.14.16.0/20 (max: 24)
    3: 77.223.192.0/21 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/DfzScMGZevRRYRJtp9l7GwqTnF4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1520275 (0x173293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35c96065093998ba42cfba11bf0d17d3ac403d40
        Validity
            Not Before: May  6 07:14:23 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0dfcd270c1997af45161126da7d97b1b0a939c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:94:31:04:4d:33:4c:f9:68:d3:90:e1:84:
                    01:e3:b9:c7:a0:b6:ec:94:03:fe:30:43:c9:d5:ee:
                    70:24:07:4e:35:82:10:b0:8a:44:8b:62:2d:13:04:
                    ba:54:a4:86:2d:08:96:8d:ae:85:47:6b:1d:3a:d5:
                    b2:f2:6f:be:3b:33:f7:12:88:04:0f:de:0f:c6:c5:
                    6a:62:5b:55:39:8b:e9:6c:98:db:96:1e:f8:e6:db:
                    1a:8f:1c:1c:f2:80:06:d2:31:f4:22:27:a8:f0:62:
                    51:7c:e7:ec:46:6d:66:1d:38:f3:1f:45:19:c4:49:
                    e8:b0:6f:e4:80:d3:60:0e:98:8c:50:c5:6f:18:ba:
                    e7:f3:5b:01:18:0b:3c:7e:7b:0a:70:4b:f9:77:4a:
                    42:8e:e6:21:06:4d:f6:d1:7d:a2:e8:83:ea:84:a4:
                    8b:9a:b6:ce:88:05:b0:82:1d:b0:a1:39:ee:2f:09:
                    07:14:18:47:0a:eb:28:ae:6d:58:fc:22:b4:1b:4a:
                    e0:6a:db:8d:7c:6a:a5:47:a1:f2:91:38:79:37:6e:
                    83:d0:b4:10:d5:80:c2:42:c0:8b:52:24:bd:8d:d9:
                    ef:cf:61:65:85:42:5c:3c:a9:b5:bf:2d:7a:80:9d:
                    73:db:ae:db:5f:5f:3e:c1:b0:5d:f7:e3:35:2d:1e:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0D:FC:D2:70:C1:99:7A:F4:51:61:12:6D:A7:D9:7B:1B:0A:93:9C:5E
            X509v3 Authority Key Identifier: 
                keyid:35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/DfzScMGZevRRYRJtp9l7GwqTnF4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....M..............
    Signature Algorithm: sha256WithRSAEncryption
         93:0c:f1:f8:b6:1f:77:4a:99:50:ff:b3:8c:22:65:b3:a1:a3:
         cf:ad:fa:9f:a0:82:3e:72:49:d3:bf:1e:b6:c0:05:4f:55:23:
         32:fc:55:86:d3:a5:f5:2a:bf:ec:54:21:a1:49:14:9d:1a:4e:
         f1:27:4a:30:c4:41:2a:49:7a:96:c1:9d:a2:ce:34:44:13:25:
         53:0a:dc:0f:46:d0:33:cf:00:84:fa:ef:2f:27:bc:2e:c4:29:
         7c:01:9c:4d:fe:a1:6d:93:09:71:b4:f9:23:64:58:f5:7a:69:
         a3:12:df:5c:00:36:86:cc:61:1a:5a:73:45:24:18:aa:46:01:
         17:cb:90:aa:77:42:70:6e:85:51:61:43:5e:d9:1f:0b:e7:e3:
         67:4e:f2:b8:f2:bb:df:36:a0:be:dd:90:a0:f0:ae:73:67:f1:
         3f:5c:d6:cb:e0:12:a5:18:dd:b8:cc:68:22:78:26:17:74:52:
         1a:da:a4:2f:04:f2:a7:f9:68:bc:c9:ef:b3:54:68:e2:84:01:
         15:07:b6:4e:8f:da:95:5c:d3:b9:ba:aa:0f:83:d4:78:0a:12:
         ba:1e:d9:5c:0d:5c:c5:8f:50:39:86:c3:79:1b:34:1f:29:e2:
         bc:6e:d8:1b:20:2c:af:cc:95:ef:a9:2f:3d:bf:fb:7a:a8:9a:
         fc:f1:d8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Jun 14 13:06:06 2021 by LibreSSL & rpki-client.