Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/ZhLLRrVKHsYvD6bed0tjfmdxjIM.roa (download)

Subject key identifier:   66:12:CB:46:B5:4A:1E:C6:2F:0F:A6:DE:77:4B:63:7E:67:71:8C:83 
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
asID:                     AS174
Prefixes:
    1: 91.229.58.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/ZhLLRrVKHsYvD6bed0tjfmdxjIM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40665860 (0x26c8304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
        Validity
            Not Before: Jan  1 07:04:04 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6612cb46b54a1ec62f0fa6de774b637e67718c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:5b:b3:8a:f9:d5:9d:cd:2f:26:39:be:35:
                    14:04:50:82:8e:f0:7e:8c:53:e2:12:50:82:db:30:
                    e1:8d:a3:d5:2a:ad:64:35:8c:dd:06:4f:19:2e:46:
                    56:08:68:27:7c:9e:2c:ad:25:9a:f4:98:0f:66:7e:
                    e2:b4:b2:e1:e1:c5:1e:ab:3a:ae:7d:e9:1a:f8:4c:
                    67:e2:aa:ed:c2:96:fd:4c:17:85:30:d6:0d:f7:ef:
                    d4:68:84:73:12:67:01:2f:d9:05:35:3b:a8:ef:29:
                    0f:60:70:87:74:da:19:7b:3b:93:bc:e3:98:4b:b1:
                    b4:72:43:9e:d7:55:6f:28:f5:a0:00:60:e8:c4:40:
                    b0:50:5b:3c:9b:4c:cc:1a:41:17:6f:4e:58:d2:28:
                    08:4f:07:29:c1:e6:ae:fb:36:3e:67:c3:42:cb:b4:
                    aa:e7:07:28:5b:b1:f7:a9:60:2f:ff:3d:2c:a4:87:
                    34:9e:62:e7:ec:cb:c1:a5:24:e8:66:4f:7b:28:84:
                    8c:89:70:65:a6:bb:50:49:99:c1:7f:f3:ff:08:ca:
                    93:d6:ba:ec:60:5f:ae:ca:dd:b9:6a:61:1b:9e:60:
                    cf:3c:1f:f4:2a:4f:a3:ad:4b:19:eb:7b:12:5a:15:
                    a0:c3:9d:84:36:8f:f5:d3:13:ee:3f:ab:d8:5b:c0:
                    48:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                66:12:CB:46:B5:4A:1E:C6:2F:0F:A6:DE:77:4B:63:7E:67:71:8C:83
            X509v3 Authority Key Identifier: 
                keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/ZhLLRrVKHsYvD6bed0tjfmdxjIM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:c0:db:e3:3c:49:57:fb:c9:52:82:21:fc:48:d9:3f:0e:07:
         cc:e9:42:d4:c9:d9:86:f3:70:a2:a0:59:b0:b1:26:e0:57:78:
         9d:0a:d4:8a:ba:ea:9d:b5:68:f8:a9:86:19:8c:59:0e:29:8c:
         f8:d8:10:f3:d9:a8:4f:72:87:94:0a:65:0f:00:cc:3a:61:a8:
         10:1d:81:b4:a8:7c:2f:73:35:39:b2:94:f5:96:d7:86:08:18:
         5f:b6:62:84:e3:70:7b:ab:eb:9b:aa:f1:04:07:95:32:ad:e6:
         c3:15:5e:12:3e:b7:bf:44:47:53:ce:41:04:aa:3e:27:18:62:
         cb:0b:d7:6c:51:96:be:f3:83:04:6a:6a:37:e3:b9:84:eb:a2:
         d2:93:ec:91:53:4c:c3:76:b7:82:e0:91:04:ad:af:99:80:83:
         2a:00:9f:85:07:18:e8:f9:2e:66:82:e3:4b:af:81:0a:53:4b:
         64:0c:e2:3b:3f:68:73:01:5a:d7:7a:4c:52:d3:01:01:9e:2a:
         76:fc:64:a9:1b:31:8f:cd:5c:0b:ba:60:70:96:45:57:f9:c0:
         bb:0b:8f:d5:30:e6:ce:51:70:f5:a5:3b:a7:af:7e:9c:db:91:
         3c:c3:5e:59:a0:68:df:22:ea:fd:cc:db:36:08:a4:84:bd:5b:
         92:f6:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 11:53:35 2021 by LibreSSL & rpki-client.