Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/NK23YSZSln5QmcasBvkVATRs-YE.roa (download)

Subject key identifier:   34:AD:B7:61:26:52:96:7E:50:99:C6:AC:06:F9:15:01:34:6C:F9:81 
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
asID:                     AS61317
Prefixes:
    1: 37.44.228.0/22 (max: 24)
    2: 192.145.52.0/22 (max: 24)
    3: 193.219.99.0/24 (max: 24)
    4: 193.219.7.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/NK23YSZSln5QmcasBvkVATRs-YE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63894231 (0x3cef2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Jan 17 18:56:09 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=34adb7612652967e5099c6ac06f91501346cf981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:ef:bc:43:37:50:82:41:6a:d3:d5:2c:9c:
                    99:c4:44:5d:21:20:02:22:b0:d5:14:47:1e:91:a7:
                    2c:09:85:eb:cd:d8:86:66:f9:9c:7a:cf:25:54:bb:
                    f8:88:cd:8b:d1:8f:ba:ed:d1:98:9f:4b:f1:56:6c:
                    45:2a:bc:85:b3:b6:05:9a:ba:dd:17:fc:d9:d7:eb:
                    73:dc:52:ec:46:b4:7a:1d:8f:6f:46:71:81:8a:c9:
                    09:ba:16:fe:67:84:e2:3f:d5:52:50:c6:b8:05:bd:
                    02:fc:04:54:93:24:9c:e0:c1:02:ce:33:a6:3c:98:
                    06:07:64:93:37:3d:53:00:61:6f:86:3e:22:4f:3b:
                    53:7f:f5:f7:67:05:66:21:7c:e7:66:aa:4e:5a:a7:
                    b6:2f:7f:0e:f8:60:17:12:e4:c1:7b:f2:16:59:9d:
                    43:10:0f:8e:f3:1a:5c:47:ed:1e:55:5f:2a:4d:f8:
                    11:4e:f8:bf:8e:03:22:61:7e:84:6b:01:ce:72:50:
                    98:b5:70:12:d2:c4:ae:ee:88:b6:22:ae:ff:62:e2:
                    46:e3:3f:32:47:93:35:10:92:c5:77:2d:67:e6:29:
                    b9:9a:a3:b1:44:f2:8e:fb:af:4d:77:3c:bb:72:08:
                    5d:10:e1:36:08:96:1b:48:47:5a:82:7f:fe:40:44:
                    80:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                34:AD:B7:61:26:52:96:7E:50:99:C6:AC:06:F9:15:01:34:6C:F9:81
            X509v3 Authority Key Identifier: 
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/NK23YSZSln5QmcasBvkVATRs-YE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0 0.....0....%,......4...........c
    Signature Algorithm: sha256WithRSAEncryption
         71:22:f3:62:52:16:a2:0b:c7:94:0f:54:13:13:89:ea:de:e8:
         3b:7f:c2:4c:f4:f0:b6:16:e2:d7:47:67:ae:b4:49:2e:ff:a4:
         92:10:e4:86:6e:af:c3:00:17:67:4c:c7:7c:6f:32:ec:ec:d1:
         09:ca:4f:11:8c:5a:37:63:c1:a0:d6:30:16:2f:c8:32:c1:cf:
         92:1b:03:99:6e:3e:76:c4:78:43:8e:3b:94:d8:6b:e7:a6:28:
         a6:84:48:93:e9:99:53:bc:f1:5f:35:55:79:b9:2e:d3:cb:44:
         78:ae:13:2b:ae:31:cd:38:f9:aa:6e:a7:4d:94:14:4a:87:c2:
         08:69:23:0b:86:9e:94:a6:2a:fd:e6:41:8c:73:b1:0f:21:48:
         19:5a:3a:b5:cf:fd:0a:72:9a:c4:ac:ae:74:4f:05:43:c6:a1:
         b7:4e:38:c1:d2:12:db:54:ae:39:67:23:c2:a6:4d:6f:1d:32:
         51:f8:0d:be:dc:29:77:c3:de:7a:06:9a:c0:f9:e4:ae:ac:b8:
         7d:c8:cf:97:97:f5:74:ec:9a:a1:92:3f:4b:1c:6f:05:5c:33:
         e9:a7:34:bf:12:76:a2:21:63:80:02:db:70:1c:25:d1:e9:2c:
         56:04:ee:04:cb:95:28:ad:f5:be:fb:3e:6e:36:95:b9:6b:f6:
         b3:b9:6c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jun 13 02:01:30 2021 by LibreSSL & rpki-client.