Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/3ZBEfAQO530cC7JVaeVsq7iDGMY.roa (download)

Subject key identifier:   DD:90:44:7C:04:0E:E7:7D:1C:0B:B2:55:69:E5:6C:AB:B8:83:18:C6 
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
asID:                     AS174
Prefixes:
    1: 91.108.200.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/3ZBEfAQO530cC7JVaeVsq7iDGMY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827505627 (0x3152bbdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
        Validity
            Not Before: Apr 19 18:01:16 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dd90447c040ee77d1c0bb25569e56cabb88318c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:48:93:69:e9:e5:46:eb:36:23:87:84:b0:
                    86:19:5b:84:e1:bf:43:c3:89:06:0c:ba:db:75:80:
                    58:75:4a:70:f4:84:a9:5d:5b:21:6f:e2:1d:4d:56:
                    fc:41:59:b3:36:b0:7a:54:28:2b:5e:25:e0:67:b0:
                    67:87:f1:85:cf:6d:03:bd:79:1d:48:38:34:38:2c:
                    e3:e7:20:c0:6e:50:45:17:5e:10:a4:a6:16:93:49:
                    4a:8f:5d:bb:2b:8e:b7:55:18:91:ea:3c:dc:a8:97:
                    1e:fe:c4:af:90:ab:10:ab:61:d7:0a:7e:47:f9:dd:
                    fb:7e:c0:95:be:04:aa:2c:d6:15:9e:78:58:b2:01:
                    e9:32:7c:cb:78:c9:11:78:0e:42:5a:08:42:f3:86:
                    e2:77:92:5f:ce:ce:f0:e7:ce:8e:ef:ca:b7:94:e9:
                    5f:cc:2b:e2:e3:14:36:80:5e:8f:89:bf:ec:3a:bb:
                    a3:4b:55:60:cb:a5:73:2f:3a:3e:d8:13:50:9c:c9:
                    71:d2:54:3a:18:4f:0c:b9:2f:8d:df:3c:be:c4:63:
                    6f:a1:20:5c:11:64:4a:ac:02:99:95:85:07:fb:ea:
                    39:94:2f:0b:a4:d3:16:d9:86:ee:9b:49:16:9e:d5:
                    40:e1:7d:8e:48:74:9e:3c:86:42:a5:5f:88:fb:29:
                    17:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DD:90:44:7C:04:0E:E7:7D:1C:0B:B2:55:69:E5:6C:AB:B8:83:18:C6
            X509v3 Authority Key Identifier: 
                keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/3ZBEfAQO530cC7JVaeVsq7iDGMY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.108.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:3c:5b:22:05:46:a6:a6:44:61:f3:bc:40:24:34:7d:89:3c:
         91:e3:14:97:7d:10:b5:7c:25:3b:54:fe:7f:df:26:0b:0d:28:
         a0:a6:a6:e4:70:a6:b2:6a:82:d1:90:20:03:5e:c4:6b:37:d3:
         70:0e:d7:1d:13:df:18:dc:25:fa:2a:a6:d8:41:2d:c1:b8:06:
         de:cf:a2:b1:9c:04:59:47:ca:f3:b0:ec:ae:31:8e:9a:49:e7:
         6f:de:df:dc:ef:fb:7c:24:cd:74:02:95:d3:21:f5:f7:2c:b1:
         d9:76:76:05:8e:d9:02:8f:7d:59:57:4a:b9:d9:56:3f:e7:2c:
         d8:52:65:33:dd:41:b3:d7:0d:b5:0c:38:f7:43:0e:70:ac:0c:
         5e:01:3b:10:31:4f:3d:83:e7:75:f9:8a:ed:fc:61:d6:23:2b:
         6d:90:88:41:6d:8f:60:bd:bb:c4:69:cd:3f:f6:71:a4:df:09:
         40:34:3e:b6:be:e1:54:9c:55:84:d4:a0:db:d1:40:bf:ee:c3:
         43:60:1b:73:91:42:d8:68:fa:77:6a:e6:dd:86:9c:d7:89:60:
         b7:18:ad:07:c7:31:2f:3a:c7:f2:f5:be:8d:64:bc:b9:fd:a1:
         6b:da:43:25:07:30:de:4d:11:a5:49:8c:0a:a4:29:f6:18:7f:
         5f:44:bb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 12:04:55 2021 by LibreSSL & rpki-client.