Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/KRv04JPrvGjuW3wG87204U_X__8.roa (download)

Subject key identifier:   29:1B:F4:E0:93:EB:BC:68:EE:5B:7C:06:F3:BD:B4:E1:4F:D7:FF:FF 
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
asID:                     AS61317
Prefixes:
    1: 185.104.32.0/21 (max: 24)
    2: 185.104.40.0/22 (max: 24)
    3: 185.101.168.0/22 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/KRv04JPrvGjuW3wG87204U_X__8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32821189 (0x1f4cfc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
        Validity
            Not Before: Apr 14 06:48:56 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=291bf4e093ebbc68ee5b7c06f3bdb4e14fd7ffff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:07:e0:b7:25:74:45:22:8e:1c:8f:f0:f1:50:
                    f4:c1:2b:98:0a:2a:f3:b7:63:08:00:e2:3a:e3:96:
                    e6:57:ed:fe:23:9b:70:12:82:eb:26:e8:15:00:d5:
                    f9:7f:5f:a0:b9:64:62:78:64:55:91:4d:ab:9c:aa:
                    37:1a:ae:51:cc:5c:59:a3:cc:2f:ba:74:c3:eb:2f:
                    54:dd:72:54:7f:d7:3b:8c:91:6f:3d:56:f7:41:5e:
                    44:00:c3:4f:39:11:31:1c:72:88:6f:4c:40:6c:2c:
                    e1:a2:06:3f:8b:69:6d:32:4b:86:d7:9b:9a:d0:db:
                    b4:ca:32:39:a6:f4:1d:77:72:95:de:02:19:d4:58:
                    b7:4b:3a:f0:23:12:5f:88:1d:18:d6:4e:7e:98:db:
                    5a:a8:cd:dc:1a:7d:f0:eb:99:4c:c8:c1:d7:25:ad:
                    c4:d4:92:d7:38:d6:5b:9c:05:db:11:a4:b6:cd:c6:
                    4f:de:86:89:2e:a6:04:37:7c:4e:79:81:a4:3e:50:
                    00:bc:90:36:0d:c5:86:34:99:3c:4f:1e:38:a2:a9:
                    02:58:c0:1a:89:37:f0:71:d8:65:71:e2:32:56:ac:
                    17:87:14:81:d8:98:8c:0b:ac:a6:54:07:f7:b6:83:
                    41:65:a5:7a:c2:83:a9:de:96:f6:1c:ec:75:19:0a:
                    0a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                29:1B:F4:E0:93:EB:BC:68:EE:5B:7C:06:F3:BD:B4:E1:4F:D7:FF:FF
            X509v3 Authority Key Identifier: 
                keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/KRv04JPrvGjuW3wG87204U_X__8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....e.0.....h ....h(
    Signature Algorithm: sha256WithRSAEncryption
         6f:5b:55:38:95:ea:44:93:2a:c6:b9:fd:0c:5a:2c:f1:09:c1:
         e7:5e:8f:6f:e4:4d:b0:5b:4f:7e:d9:84:54:c4:40:e1:73:96:
         ff:13:b9:d1:b2:49:5c:eb:4f:ff:62:4b:70:86:e6:ae:07:c7:
         af:a7:0c:50:71:a0:2d:46:b9:f5:3c:88:24:85:9a:a3:7c:93:
         0e:a0:de:5d:5c:30:d0:dc:3e:68:dc:23:68:77:0e:fa:fe:3d:
         37:82:75:26:e2:e0:ee:94:80:76:c0:76:5b:08:9b:1a:a8:d4:
         ef:a5:ab:6d:72:00:72:d0:35:69:ac:ea:d8:d5:9f:55:cc:b1:
         7f:aa:41:ab:24:21:80:2a:d2:8e:df:55:d7:d5:8d:25:af:18:
         45:0a:39:a4:14:1a:5e:d7:09:db:51:18:8c:57:7c:2c:5f:b7:
         4c:9e:6e:e0:e9:9d:04:53:11:a6:c9:c6:8c:61:f3:c7:44:30:
         f6:2a:8f:01:78:45:bf:81:10:e8:87:b2:b6:0b:5c:fe:70:38:
         e8:31:8a:bc:9c:15:3b:50:72:1e:16:10:4d:6d:b8:95:7c:58:
         37:77:53:1d:7e:30:a6:15:b9:a6:dc:3b:6b:d8:df:a8:c0:00:
         d1:08:d6:3c:91:33:2b:cb:be:c8:4a:b7:4f:03:7f:32:5d:9c:
         59:3c:08:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEAfTPxTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDFmZGM3YTJmMTFhNTc2NmQzYWQ3YmRmNjI1Y2U1ZTExOWE4ZmRmMB4XDTIxMDQx
NDA2NDg1NloXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjkxYmY0ZTA5M2Vi
YmM2OGVlNWI3YzA2ZjNiZGI0ZTE0ZmQ3ZmZmZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKsH4LcldEUijhyP8PFQ9MErmAoq87djCADiOuOW5lft/iOb
cBKC6yboFQDV+X9foLlkYnhkVZFNq5yqNxquUcxcWaPML7p0w+svVN1yVH/XO4yR
bz1W90FeRADDTzkRMRxyiG9MQGws4aIGP4tpbTJLhtebmtDbtMoyOab0HXdyld4C
GdRYt0s68CMSX4gdGNZOfpjbWqjN3Bp98OuZTMjB1yWtxNSS1zjWW5wF2xGkts3G
T96GiS6mBDd8TnmBpD5QALyQNg3FhjSZPE8eOKKpAljAGok38HHYZXHiMlasF4cU
gdiYjAusplQH97aDQWWlesKDqd6W9hzsdRkKCrkCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBQpG/Tgk+u8aO5bfAbzvbThT9f//zAfBgNVHSMEGDAWgBRUH9x6LxGldm06
1732Jc5eEZqP3zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZCX2NlaThScFhadE90ZTk5aVhPWGhHYWo5OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGQvOGZhZDY3LWJiNmItNDc3My1iODFlLWM5MDBhODlmMjBmMS8x
L0tSdjA0SlBydkdqdVczd0c4NzIwNFVfWF9fOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQv
OGZhZDY3LWJiNmItNDc3My1iODFlLWM5MDBhODlmMjBmMS8xL1ZCX2NlaThScFha
dE90ZTk5aVhPWGhHYWo5OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEArllqDAMAwQFuWggAwQCuWgoMA0G
CSqGSIb3DQEBCwUAA4IBAQBvW1U4lepEkyrGuf0MWizxCcHnXo9v5E2wW09+2YRU
xEDhc5b/E7nRsklc60//YktwhuauB8evpwxQcaAtRrn1PIgkhZqjfJMOoN5dXDDQ
3D5o3CNodw76/j03gnUm4uDulIB2wHZbCJsaqNTvpattcgBy0DVprOrY1Z9VzLF/
qkGrJCGAKtKO31XX1Y0lrxhFCjmkFBpe1wnbURiMV3wsX7dMnm7g6Z0EUxGmycaM
YfPHRDD2Ko8BeEW/gRDoh7K2C1z+cDjoMYq8nBU7UHIeFhBNbbiVfFg3d1MdfjCm
Fbmm3Dtr2N+owADRCNY8kTMry77ISrdPA38yXZxZPAgv
-----END CERTIFICATE-----

Generated at Sat Jun 12 15:41:59 2021 by LibreSSL & rpki-client.