Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/hbKdNMPSkc6B8cv6aviEtoAvarA.roa (download)

Subject key identifier:   85:B2:9D:34:C3:D2:91:CE:81:F1:CB:FA:6A:F8:84:B6:80:2F:6A:B0 
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
asID:                     AS26636
Prefixes:
    1: 91.149.230.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/hbKdNMPSkc6B8cv6aviEtoAvarA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106514484 (0x6594834)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
        Validity
            Not Before: Jun 28 20:03:22 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=85b29d34c3d291ce81f1cbfa6af884b6802f6ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f1:71:59:a8:65:e9:3f:e7:8f:0f:4f:98:86:
                    c0:48:c4:3e:f8:f6:bb:23:80:8b:cb:2f:9d:b9:6d:
                    c0:77:f0:79:57:4b:fe:e4:a1:ec:3b:c6:9c:ee:f5:
                    fc:37:5f:b2:bd:7d:ec:2e:0b:e6:80:04:59:fe:7e:
                    7e:55:9d:23:0c:d4:14:8b:02:80:5d:4c:a0:32:6d:
                    e4:27:67:35:8d:88:c3:c7:3d:7d:7f:df:64:68:73:
                    87:4a:ea:60:70:4a:a4:af:bb:9c:71:6e:e5:07:7a:
                    d3:ce:4f:22:e9:ef:d8:09:28:03:ff:84:3d:a3:db:
                    7c:1e:10:92:68:06:43:a7:2c:16:24:f5:34:0c:27:
                    78:a6:b4:bd:8f:43:d8:4a:a8:85:19:63:b6:e4:76:
                    41:1b:3b:6d:fe:14:ac:d1:7b:3f:eb:0f:c2:94:09:
                    81:e3:6e:b5:e1:d7:7b:2a:77:24:7d:5c:35:5c:15:
                    d0:5f:57:17:7b:d1:36:0a:38:ce:41:76:5c:11:a5:
                    37:65:34:ad:f4:97:32:17:d3:c4:79:39:27:33:86:
                    cf:c8:39:c2:cd:58:d4:05:9c:07:a9:a6:71:26:58:
                    e8:83:fa:cc:83:1e:f1:f8:80:7a:1f:b2:f3:63:71:
                    7b:fe:c6:e2:47:1f:87:62:7e:e1:13:30:4e:7a:c8:
                    9a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                85:B2:9D:34:C3:D2:91:CE:81:F1:CB:FA:6A:F8:84:B6:80:2F:6A:B0
            X509v3 Authority Key Identifier: 
                keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/hbKdNMPSkc6B8cv6aviEtoAvarA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.149.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:c5:d7:cc:28:4e:4a:2a:8e:da:7a:7c:2c:c8:24:46:7c:e4:
         6b:db:69:90:71:c8:75:c1:19:e0:50:df:82:9c:c5:4a:0b:c6:
         ba:f1:df:e9:71:87:e9:ea:73:d5:a7:f2:74:41:5f:ab:b0:c0:
         20:db:22:bd:28:53:42:b7:39:c1:ad:ad:df:40:b4:5d:c6:98:
         29:ed:fe:29:44:88:ac:5a:6d:22:45:21:f4:fa:a0:2d:b3:39:
         7e:df:31:2f:9f:7a:5b:7d:0b:15:67:e1:45:fb:3e:22:c1:b1:
         3d:84:32:ec:d0:f4:28:a5:a1:1b:9f:be:6c:a1:e6:a0:cd:01:
         3e:95:41:34:8c:55:c7:6f:1c:90:13:ff:dd:8c:2b:1a:9c:3f:
         eb:22:ff:a5:98:eb:87:60:30:b2:e8:73:41:fd:5f:fe:fc:91:
         37:be:4a:6c:5d:7f:95:10:c5:6b:96:8c:78:e0:9e:e4:56:be:
         f9:4f:d7:95:ac:6b:08:5e:29:66:1c:3b:e9:34:78:68:d4:b3:
         d4:7e:2c:6d:d2:38:4f:8b:0f:5c:53:bc:b4:ca:f3:e0:f8:2b:
         e4:09:fd:ac:72:7e:fc:c7:83:36:5d:fc:cd:33:91:bb:24:43:
         ac:58:c9:4a:af:ef:84:2c:34:02:57:cc:96:18:d9:87:77:85:
         7a:0f:41:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:48:28 2021 by LibreSSL & rpki-client.