Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/BChy9tSBd7y8InZC3zsqpB7z-MA.roa (download)

Subject key identifier:   04:28:72:F6:D4:81:77:BC:BC:22:76:42:DF:3B:2A:A4:1E:F3:F8:C0 
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
asID:                     AS61317
Prefixes:
    1: 91.220.249.0/24 (max: 24)
    2: 152.89.192.0/23 (max: 24)
    3: 152.89.195.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/BChy9tSBd7y8InZC3zsqpB7z-MA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10555047 (0xa10ea7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
        Validity
            Not Before: Apr 23 03:33:36 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=042872f6d48177bcbc227642df3b2aa41ef3f8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:e0:28:b0:11:53:ea:c9:49:d2:cf:92:2f:
                    0c:9b:17:91:bf:1b:15:5a:27:d5:c0:d8:ac:43:5e:
                    79:82:16:09:56:c1:e3:67:63:df:54:e7:61:fd:61:
                    02:a4:d8:04:2b:1b:40:df:5e:66:0e:1f:34:2b:e0:
                    52:41:36:77:a4:26:98:fd:c5:21:a0:d9:97:50:44:
                    56:20:10:7b:65:16:89:ed:9c:48:d0:ef:bd:ef:b3:
                    81:6a:5a:d7:3f:b5:3f:50:8d:d3:4c:ed:d1:c2:fe:
                    33:ae:40:01:f3:a7:10:e7:0b:b6:b6:ff:1b:f8:b5:
                    e2:6a:55:2b:42:51:23:42:43:d9:98:64:f4:a0:42:
                    52:cd:9b:2f:b1:4a:ae:7b:f7:d0:e8:8a:d3:ed:f5:
                    11:e6:3a:c1:38:c5:14:ff:c2:09:64:3f:17:f5:bd:
                    01:4a:d1:05:73:2b:b2:08:bf:9c:b2:21:1c:cc:5d:
                    96:06:16:98:18:e7:ae:b4:dc:e8:96:7c:51:46:f5:
                    60:20:99:fe:ce:74:49:bb:d9:3c:2e:4d:7e:59:00:
                    15:02:7e:21:3e:c8:1e:6f:cd:3c:93:6b:71:f5:65:
                    7d:6e:4d:39:aa:28:c7:ea:3b:10:69:35:7f:62:e2:
                    5e:16:42:2c:9e:f4:11:b9:90:ae:85:2d:a1:37:34:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                04:28:72:F6:D4:81:77:BC:BC:22:76:42:DF:3B:2A:A4:1E:F3:F8:C0
            X509v3 Authority Key Identifier: 
                keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/BChy9tSBd7y8InZC3zsqpB7z-MA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....[......Y.....Y.
    Signature Algorithm: sha256WithRSAEncryption
         48:29:8e:1f:17:78:cb:3c:7d:04:fc:24:0d:f8:0d:38:a3:ff:
         ce:ba:0e:b8:38:8f:93:c1:a7:e4:64:a1:97:81:dd:95:38:65:
         58:55:d8:be:f5:82:8b:62:9b:13:c8:50:8d:09:8a:d1:f7:0b:
         65:b5:3b:c0:16:a2:5d:8d:1b:ba:e6:f2:97:4a:2c:79:12:48:
         49:bd:da:96:1d:73:5e:e0:26:2f:5f:a3:79:19:43:e2:90:c5:
         68:37:16:7c:59:87:42:06:0a:25:01:ab:ae:6a:c2:69:8b:ac:
         e9:d4:13:84:ae:ba:dc:e9:b5:9a:ed:64:b4:ba:27:24:f3:97:
         86:bf:3b:45:a6:be:d3:2a:b3:e6:dd:f4:5f:1d:37:8c:67:3c:
         3e:e6:c3:e6:28:a0:39:5e:76:4b:d1:42:65:2b:e2:fa:29:f3:
         7d:f4:1b:73:2f:f0:a6:c1:5a:70:d1:d1:2a:b5:35:27:d2:dd:
         89:47:fb:c6:bb:e8:21:65:49:23:97:0b:f1:0a:7c:65:2f:83:
         68:bb:2b:9a:f3:f7:e7:f7:f4:74:58:c2:2b:69:e5:fa:02:35:
         c6:be:1c:f0:59:05:6e:ce:a6:70:fa:47:c1:b7:87:3e:04:c2:
         14:e2:b3:c5:51:b3:29:16:cf:b4:1b:0b:19:e5:37:96:2f:a1:
         dd:f8:3b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jun 13 01:55:09 2021 by LibreSSL & rpki-client.