Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/hjEfguz-KZ0qlUjvjU3oY7XL83Y.roa (download)

Subject key identifier:   86:31:1F:82:EC:FE:29:9D:2A:95:48:EF:8D:4D:E8:63:B5:CB:F3:76 
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
asID:                     AS396073
Prefixes:
    1: 91.193.232.0/22 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/hjEfguz-KZ0qlUjvjU3oY7XL83Y.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51219020 (0x30d8a4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
        Validity
            Not Before: Jan  1 02:53:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=86311f82ecfe299d2a9548ef8d4de863b5cbf376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:35:7c:12:f7:41:61:d4:4c:66:e0:59:84:
                    39:ae:18:88:56:53:8e:ba:7f:9e:c2:f8:f1:f5:81:
                    a9:0e:6f:c9:f7:16:3d:21:b4:f4:f2:66:92:b8:2a:
                    87:e2:e7:af:18:ab:13:f4:96:e1:0e:0f:3c:e7:e3:
                    5b:f9:77:7b:ac:9b:e5:cb:ec:70:11:28:a6:08:1c:
                    76:10:c8:8a:c7:4c:eb:bc:2c:63:18:bf:86:34:2c:
                    d2:c8:f0:54:38:14:42:54:fd:42:c0:e1:6d:11:63:
                    f3:53:d8:b4:33:e2:e8:61:72:0e:9b:cb:a4:49:7b:
                    a6:98:86:54:12:bd:73:b4:c3:7a:3b:40:64:4d:1d:
                    55:6f:60:11:df:fc:a1:da:ce:84:7b:9c:35:53:ba:
                    a3:12:a5:6f:cc:85:f7:2b:d1:a3:fb:a1:49:d3:41:
                    cf:b2:24:d3:b8:84:6d:b6:98:e6:6f:d6:f6:bb:e3:
                    3b:2e:f2:0c:10:18:c2:f5:54:34:2f:8a:2e:fa:27:
                    21:8f:76:3f:28:b2:eb:d9:35:7e:ae:a2:4f:8e:5f:
                    9d:25:62:68:40:5b:71:b8:ea:29:dc:c9:42:47:23:
                    50:fb:81:0f:00:70:83:ee:ce:f7:c4:ee:8d:b7:29:
                    25:a1:7f:40:b4:93:70:0b:d1:84:7b:68:ca:0f:31:
                    7f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                86:31:1F:82:EC:FE:29:9D:2A:95:48:EF:8D:4D:E8:63:B5:CB:F3:76
            X509v3 Authority Key Identifier: 
                keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/hjEfguz-KZ0qlUjvjU3oY7XL83Y.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.193.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:86:26:3c:d5:5b:ae:34:85:10:ec:c4:8b:66:71:04:7d:88:
         c4:f2:68:44:1d:5a:c4:e8:f4:98:e0:72:1e:47:89:2a:69:c9:
         15:f0:13:f5:55:da:81:c7:3a:57:d1:67:b6:9b:24:4a:38:b5:
         7a:11:bb:bd:a0:2e:e5:71:79:57:9f:3e:22:6f:e1:89:3d:79:
         2b:51:80:29:0c:8c:c3:d3:d0:a5:a1:28:ed:29:d9:45:9d:c7:
         56:f1:3a:c5:b4:0d:31:25:9d:52:67:ae:06:79:aa:bd:da:0c:
         39:fe:1c:33:da:8b:71:d3:eb:0e:ce:c8:3a:40:27:ec:05:f4:
         29:39:ad:b5:74:71:c3:1c:bd:e1:2f:b1:d2:93:e3:69:20:16:
         95:9c:ac:0a:87:cc:7a:d8:8a:3e:41:4e:1a:d6:ec:6f:0d:f2:
         fd:b3:f3:58:6c:57:68:71:ec:e7:8e:32:84:b9:2f:5c:07:79:
         ea:4e:72:08:2e:be:df:c6:93:7c:a5:a3:d1:d8:ec:74:e4:e7:
         37:11:07:91:fc:fd:4a:64:5f:3a:4f:45:60:e9:77:63:13:41:
         2a:2c:24:6e:13:67:97:65:be:6d:22:df:2a:53:0e:dc:3e:aa:
         52:ad:18:77:41:dc:a1:78:29:00:68:a9:e3:40:25:c9:73:12:
         82:a6:c6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 04:47:56 2022 by LibreSSL & rpki-client.