Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/kUu2sFiaQaFWptzvLTgdT2n7qc8.roa (download)

Subject key identifier:   91:4B:B6:B0:58:9A:41:A1:56:A6:DC:EF:2D:38:1D:4F:69:FB:A9:CF 
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
asID:                     AS207429
Prefixes:
    1: 176.105.228.0/24 (max: 24)
    2: 176.105.230.0/23 (max: 24)
    3: 91.244.197.0/24 (max: 24)
    4: 91.244.198.0/23 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/kUu2sFiaQaFWptzvLTgdT2n7qc8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85102670 (0x512904e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: May 13 19:35:33 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=914bb6b0589a41a156a6dcef2d381d4f69fba9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:dd:17:bc:fa:80:1c:69:47:3a:47:b0:43:
                    96:96:9a:67:f0:ff:0d:70:6c:85:81:e8:6d:20:f3:
                    8f:c3:6f:86:1f:9e:cb:63:fb:ca:22:e2:bf:0d:4c:
                    75:d0:fd:ce:2b:d2:07:db:10:52:16:b4:d1:92:9f:
                    99:72:a9:06:75:51:86:f6:2f:73:37:56:ad:84:89:
                    d2:9f:49:bf:cc:ff:45:3a:17:cb:1a:06:ea:3a:53:
                    60:09:68:98:ba:f8:63:a1:5e:b2:b9:54:fe:14:b5:
                    86:13:45:bb:dc:71:1c:60:50:fc:d5:9c:a6:04:49:
                    eb:99:fe:5d:d1:fc:d5:83:25:1a:d6:7d:a0:1f:f3:
                    b9:a5:ff:f9:e7:45:6c:87:21:cc:49:d4:8f:65:85:
                    8d:65:d2:04:b3:15:e0:7f:60:7d:0f:f0:85:a8:8b:
                    12:48:c1:16:d7:d3:ea:03:bd:8d:0a:e7:35:e3:c8:
                    4e:dc:f1:9a:5f:7e:a8:80:fe:3a:ed:86:39:8c:ed:
                    2b:6a:6b:81:63:a5:90:c3:32:ad:57:72:de:5f:7a:
                    9b:2f:df:1c:91:32:4e:ec:4d:44:e2:03:4a:3f:5b:
                    8d:97:34:69:6a:49:8b:c9:7d:3b:c7:f0:dc:92:93:
                    42:38:bf:63:af:62:13:0c:61:85:e1:31:1c:5a:ee:
                    d7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                91:4B:B6:B0:58:9A:41:A1:56:A6:DC:EF:2D:38:1D:4F:69:FB:A9:CF
            X509v3 Authority Key Identifier: 
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/kUu2sFiaQaFWptzvLTgdT2n7qc8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0"0 ....0.0....[.....[......i.....i.
    Signature Algorithm: sha256WithRSAEncryption
         80:d3:0c:39:9f:78:c9:43:dd:39:86:3b:20:59:20:cc:6c:03:
         4e:b0:f8:58:59:50:be:ae:87:70:9c:95:0d:dc:40:69:1b:fa:
         aa:a6:78:c6:15:d0:e4:45:19:58:a1:5b:bf:b1:a2:da:fe:b8:
         49:96:5b:df:e3:c9:10:3b:77:05:aa:e6:e5:a4:8d:13:41:30:
         65:47:76:45:06:68:9e:17:08:b8:03:4c:0f:99:77:3a:c6:fe:
         4b:af:c6:3b:6e:e1:b5:68:f1:6a:59:b0:ba:6b:4c:b7:56:e0:
         87:08:ee:75:25:74:06:33:5f:97:b3:a8:39:05:9f:46:fc:03:
         de:b9:71:d8:67:13:e7:99:86:e4:d6:9f:a4:5c:25:19:f2:af:
         b4:ad:ab:41:00:e0:ce:cb:3e:3e:74:70:3f:50:3d:2f:20:57:
         98:f6:d5:58:f8:32:3a:26:68:19:02:26:01:32:36:12:f7:9b:
         3a:5a:56:cb:79:61:e5:73:8e:8c:0b:2e:2f:f7:62:63:45:26:
         2d:36:40:9e:bc:ef:2e:5c:50:1b:7e:98:07:3d:1b:6f:eb:26:
         5a:be:4c:2c:67:cc:e0:45:9c:52:86:29:0e:ed:6e:7e:b9:62:
         d0:04:32:ea:fa:0e:25:b7:43:37:18:71:c9:8b:5d:5d:be:fb:
         bc:bc:70:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Jul 9 09:29:41 2021 by LibreSSL & rpki-client.