Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/mTmH8UN2IvKNSVvrmU10A3j7gmE.roa (download)

Subject key identifier:   99:39:87:F1:43:76:22:F2:8D:49:5B:EB:99:4D:74:03:78:FB:82:61 
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
asID:                     AS3356
Prefixes:
    1: 91.149.218.0/23 (max: 23)
    2: 91.149.222.0/23 (max: 23)
    3: 91.149.228.0/23 (max: 23)
    4: 91.149.232.0/23 (max: 23)
    5: 91.149.230.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/mTmH8UN2IvKNSVvrmU10A3j7gmE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84960234 (0x51063ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
        Validity
            Not Before: Feb  9 16:34:06 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=993987f1437622f28d495beb994d740378fb8261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:65:6c:3e:dd:4f:99:f5:19:e4:b3:db:ec:18:
                    d4:54:3f:3d:00:2c:97:15:ef:9d:c9:b8:bb:af:ed:
                    9b:8e:e6:06:a5:59:bd:a3:ec:3c:b3:e1:60:97:95:
                    e1:33:6e:30:12:ed:93:b0:22:3c:26:0e:9b:4c:f1:
                    95:c2:9e:c5:77:50:69:5e:1c:93:c5:e3:3c:dd:0c:
                    17:a9:ad:24:91:00:5b:15:6b:95:4c:ad:54:1e:cd:
                    63:47:68:8d:15:8c:84:74:96:53:13:6b:54:ca:16:
                    69:9a:49:61:0d:9c:25:26:ee:a2:a5:57:44:31:26:
                    8a:6d:5b:b4:62:46:33:cc:00:bf:d1:0d:14:ec:64:
                    8a:2a:f9:da:45:fb:83:2c:89:5d:89:d3:de:1d:83:
                    c0:b4:4e:e5:1c:36:43:fb:34:ce:5b:7b:53:8f:22:
                    c2:fa:44:cc:d1:cd:c4:f4:b8:39:58:bb:02:f6:6d:
                    11:39:e0:4d:f9:24:0d:5e:52:f5:6f:b8:13:41:84:
                    84:14:00:7c:44:e0:e3:8c:59:b0:8c:68:47:1d:7f:
                    b0:0e:4a:0c:48:72:f6:44:81:f3:73:e5:30:fb:13:
                    4c:5c:e2:7f:17:e3:b4:90:00:97:f8:c7:17:19:b6:
                    f8:cf:c8:d7:31:26:8a:9b:82:ee:47:8d:ac:8e:6f:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                99:39:87:F1:43:76:22:F2:8D:49:5B:EB:99:4D:74:03:78:FB:82:61
            X509v3 Authority Key Identifier: 
                keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/mTmH8UN2IvKNSVvrmU10A3j7gmE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0(0&....0 ...[.....[..0....[.....[.....[..
    Signature Algorithm: sha256WithRSAEncryption
         1c:2e:56:0e:64:95:c9:6d:b1:df:b7:0b:1b:94:06:75:e6:ab:
         b2:e9:59:7d:b8:b5:3f:74:4e:5a:04:62:08:9a:98:21:4f:bc:
         4c:cb:e0:e2:03:a7:94:cb:9f:0a:9a:df:f1:04:36:ff:2d:1d:
         12:d2:7b:d0:60:dd:46:66:91:28:2e:28:0d:12:75:88:be:4f:
         46:12:f4:42:5f:a3:b7:7f:07:f3:0f:e3:1a:f4:c0:fb:4b:9f:
         63:bc:f1:a4:0b:11:b2:c7:34:52:4a:05:9e:ea:bb:1c:32:00:
         ae:85:ce:19:d6:fc:1b:d2:be:b8:53:b6:e0:ab:b8:91:2b:61:
         de:1b:ac:9c:83:4e:9a:8b:75:e0:52:42:10:f9:13:ca:e0:e9:
         a7:dc:5d:52:c0:86:80:80:db:d4:af:dc:ed:18:c2:37:82:8f:
         3a:60:f9:1e:d8:44:5b:cc:de:49:97:2d:8f:91:d1:cb:b8:8d:
         3d:41:82:61:28:5a:aa:0e:de:17:52:e4:d9:94:ab:f7:11:14:
         4d:bf:9f:02:8d:f7:92:41:10:85:b5:ae:f7:32:28:76:aa:e1:
         d7:1e:ef:06:11:a4:b4:0b:f4:d4:91:f2:3c:42:98:54:46:56:
         35:f4:ae:48:61:bf:46:62:76:55:28:03:f1:8f:89:4d:7d:c5:
         48:37:20:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jun 13 12:35:45 2021 by LibreSSL & rpki-client.