Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/lFoo7NPPR-84Lfsnm2Yk3cdFpSE.roa (download)

Subject key identifier:   94:5A:28:EC:D3:CF:47:EF:38:2D:FB:27:9B:66:24:DD:C7:45:A5:21 
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
asID:                     AS174
Prefixes:
    1: 91.149.252.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/lFoo7NPPR-84Lfsnm2Yk3cdFpSE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105563195 (0x64ac43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
        Validity
            Not Before: Jun 25 08:37:10 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=945a28ecd3cf47ef382dfb279b6624ddc745a521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:e9:50:99:92:a5:ed:65:59:c8:bb:20:bd:
                    d1:fd:ca:36:e4:6a:02:32:aa:5e:e3:c0:fb:f9:9e:
                    06:fa:8b:9a:cb:1a:06:8f:94:c3:f9:75:25:24:d6:
                    0e:d9:dc:55:ff:24:61:0f:76:b1:b4:9b:eb:55:34:
                    7e:a0:e0:2a:10:3b:90:10:1c:9c:d8:0f:9a:e0:0e:
                    2d:be:3c:3c:bc:8d:a6:42:12:7c:c1:e3:75:c8:59:
                    0a:37:b0:b9:b1:aa:48:05:81:14:0c:57:b5:d1:0c:
                    bb:24:89:58:66:93:4d:5f:94:19:42:b7:32:2e:60:
                    63:4f:da:5b:a5:cc:1a:5f:0a:e1:05:b8:3c:66:93:
                    d8:a1:ad:6a:a2:7b:93:aa:26:61:f8:c0:c6:64:80:
                    a0:19:c0:0b:d4:10:45:96:8b:ea:ac:63:eb:be:03:
                    0b:2c:a1:af:1c:ab:22:66:3a:c5:7e:cd:c3:a0:d9:
                    19:60:aa:13:33:b0:4d:c7:33:61:33:bf:89:33:3f:
                    3d:67:68:f2:b1:ac:0d:53:e9:f1:99:f3:68:de:b1:
                    f4:65:5f:2b:e8:f8:4d:fb:1d:71:f0:06:41:10:24:
                    41:d4:04:f7:70:58:08:64:12:f1:5b:90:15:d8:76:
                    1f:ba:35:5a:5a:30:e6:6f:aa:7a:ec:48:1d:55:6b:
                    1b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                94:5A:28:EC:D3:CF:47:EF:38:2D:FB:27:9B:66:24:DD:C7:45:A5:21
            X509v3 Authority Key Identifier: 
                keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/lFoo7NPPR-84Lfsnm2Yk3cdFpSE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.149.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:54:3b:a4:d4:11:d6:69:af:b4:03:9c:23:5d:7c:06:4e:0e:
         9e:63:28:b0:9c:5f:1a:76:3f:04:cc:ae:c6:00:81:45:34:34:
         49:f1:c0:18:f9:77:97:f0:d1:d2:bb:7c:c5:47:2b:02:4b:23:
         d9:aa:be:12:19:39:b5:f6:c6:02:4a:6d:e7:f5:2b:51:83:ce:
         8d:84:6f:6c:5a:3e:01:f1:3e:c9:85:ce:32:8d:d8:41:a1:7f:
         00:5b:a2:99:2b:21:2b:22:d6:42:10:aa:31:52:13:25:51:ae:
         8a:20:c9:14:f5:5f:16:af:2c:6e:d8:f2:f6:93:cf:52:f1:d8:
         ee:d4:b9:24:9a:76:37:01:86:d4:fa:d5:73:57:20:d1:bb:af:
         65:5a:49:1f:54:2d:ab:db:29:3d:56:9d:72:26:97:98:70:b8:
         3a:99:e3:78:ca:68:4d:5e:78:a7:c7:a3:a5:e5:49:cb:b7:47:
         d4:12:cb:6e:cf:be:4b:b9:ae:7d:7d:ae:b4:71:e6:77:4c:d6:
         e6:91:1d:8d:ae:75:90:ed:12:fc:17:ae:cc:45:b2:b1:0c:37:
         dc:48:d1:a3:db:89:b6:0c:fa:e2:b3:79:7a:f1:34:9d:35:b0:
         e2:97:fc:c0:ad:d5:5f:41:6d:67:46:8b:fb:a4:cc:ed:d7:b7:
         ca:cc:72:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 12:05:57 2021 by LibreSSL & rpki-client.