Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/8c/717cc9-3362-46be-8792-2d5bbc9158da/1/hndvqKhPHxCnfBDWehk-CXTdsWA.roa (download)

Subject key identifier:   86:77:6F:A8:A8:4F:1F:10:A7:7C:10:D6:7A:19:3E:09:74:DD:B1:60 
Authority key identifier: 91:C6:B7:CE:90:34:18:F3:D5:93:7F:40:8E:09:36:C7:83:31:73:0F
asID:                     AS61317
Prefixes:
    1: 5.253.36.0/22 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/8c/717cc9-3362-46be-8792-2d5bbc9158da/1/hndvqKhPHxCnfBDWehk-CXTdsWA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99215380 (0x5e9e814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c6b7ce903418f3d5937f408e0936c78331730f
        Validity
            Not Before: Jan  1 02:34:43 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=86776fa8a84f1f10a77c10d67a193e0974ddb160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:43:16:9a:7a:9b:d5:e5:a1:d8:b4:b6:48:
                    2c:ca:79:3d:51:9b:46:e8:ac:02:6b:a7:a2:b7:b9:
                    d5:e0:5f:0e:89:e5:c3:fe:7e:c0:a4:69:7c:37:d1:
                    3c:9a:a1:e4:f4:7c:7a:6d:7d:3c:0c:ce:12:5d:75:
                    53:39:24:c3:6b:87:59:bb:16:bf:a1:ef:bb:11:d9:
                    30:17:84:17:12:9d:23:c5:02:1b:89:2a:2b:2a:66:
                    75:71:de:e1:a7:59:b7:e7:f2:08:b1:d7:25:ff:55:
                    db:1d:23:fb:f1:7a:4a:1b:42:ed:24:79:30:9c:09:
                    7d:ed:d1:f2:cb:00:d2:f1:08:d6:c9:af:0b:36:8b:
                    63:1d:69:46:3f:09:15:d3:b5:45:d9:bf:6e:4b:74:
                    72:b8:e7:5b:66:7a:35:94:87:7f:83:c1:90:ca:5c:
                    72:a6:a4:0c:56:d7:bf:6f:71:ff:fd:e4:8c:6b:06:
                    b1:25:97:82:ba:3a:7e:1b:b2:d8:04:6d:9d:c4:c1:
                    5a:9c:f7:42:01:94:12:b6:6c:93:54:81:fb:22:49:
                    24:87:aa:cb:24:5c:bd:28:c1:01:ce:92:ab:44:43:
                    29:2e:7b:a6:5f:33:df:b7:29:e0:81:b1:e6:b2:ce:
                    82:df:f1:76:da:0e:3a:3a:f4:4d:9c:36:03:0e:06:
                    06:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                86:77:6F:A8:A8:4F:1F:10:A7:7C:10:D6:7A:19:3E:09:74:DD:B1:60
            X509v3 Authority Key Identifier: 
                keyid:91:C6:B7:CE:90:34:18:F3:D5:93:7F:40:8E:09:36:C7:83:31:73:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kca3zpA0GPPVk39Ajgk2x4Mxcw8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/717cc9-3362-46be-8792-2d5bbc9158da/1/hndvqKhPHxCnfBDWehk-CXTdsWA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/717cc9-3362-46be-8792-2d5bbc9158da/1/kca3zpA0GPPVk39Ajgk2x4Mxcw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0......$
    Signature Algorithm: sha256WithRSAEncryption
         08:5b:86:ed:6b:ee:24:7f:3e:4a:6f:42:55:26:ae:e2:52:27:
         90:1d:26:ea:3e:49:8d:d9:36:b7:bb:6e:7f:8e:ea:49:2a:a2:
         3b:f4:09:2c:89:aa:8d:53:ea:de:88:f0:35:85:29:9c:67:2d:
         7d:3f:d1:3a:ea:31:89:20:36:f0:5f:16:c3:bb:11:6a:ae:c1:
         ba:4e:6d:d3:75:d5:1a:f4:91:ec:19:ad:1c:36:95:84:cc:6f:
         73:14:1e:44:6e:9f:02:9c:7b:fb:a2:87:f3:4c:27:7f:a4:8e:
         df:cb:98:5f:c0:ba:cb:9b:c9:8e:7c:0e:bb:b1:3c:1c:51:64:
         68:57:d1:0e:9a:dd:d0:c6:09:99:0d:29:9b:ee:e9:84:08:0e:
         e0:7e:6e:e1:58:d2:72:7c:09:44:0f:3c:f6:76:83:32:53:a7:
         12:49:fe:8e:4c:00:69:f0:c0:33:8a:67:e4:a7:c1:c7:cc:3e:
         38:38:6b:a8:13:35:0f:12:e0:d8:a3:aa:88:e2:7d:3b:e3:66:
         39:0f:90:de:14:f1:97:9f:3f:ca:fe:b6:d9:31:18:39:ae:d8:
         9c:5b:56:51:ba:ba:a9:fa:41:9f:b6:7e:ec:95:7f:5f:3b:f4:
         b3:b9:13:08:8a:6f:fa:79:1f:b0:61:df:8b:80:dc:b3:cd:38:
         df:25:ba:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 15:52:34 2021 by LibreSSL & rpki-client.