Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/b1/7d450d-c9e0-43be-8faf-cdea19fafd1f/1/e6efSHOtU5kwycpJoakors_Aig8.roa (download)

Subject key identifier:   7B:A7:9F:48:73:AD:53:99:30:C9:CA:49:A1:A9:28:AE:CF:C0:8A:0F 
Authority key identifier: 60:66:3B:AC:6B:3F:75:6E:E8:EE:7A:42:EB:6B:B2:C3:68:5F:6B:15
asID:                     AS399471
Prefixes:
    1: 91.199.168.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/b1/7d450d-c9e0-43be-8faf-cdea19fafd1f/1/e6efSHOtU5kwycpJoakors_Aig8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6041154 (0x5c2e42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60663bac6b3f756ee8ee7a42eb6bb2c3685f6b15
        Validity
            Not Before: Oct  5 05:38:17 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=7ba79f4873ad539930c9ca49a1a928aecfc08a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:21:76:81:95:74:47:60:9a:e0:70:5f:22:
                    4d:32:94:38:ce:25:63:48:59:65:45:5f:06:93:8f:
                    df:66:bf:27:27:30:07:00:40:6d:66:f9:52:f0:d9:
                    fe:b3:46:88:50:c7:ac:9e:4b:f8:79:f5:73:f6:62:
                    98:f5:46:14:74:e1:58:82:93:60:02:46:f2:a8:b3:
                    64:34:08:fa:30:fd:ea:d1:3a:3a:3e:61:f7:78:a9:
                    b7:eb:12:12:ce:22:e6:2b:99:ea:86:18:4f:c8:9c:
                    b0:66:e5:25:37:04:29:ba:bb:93:71:72:4b:dd:84:
                    2e:c3:bd:44:b5:9b:c1:76:5d:01:a4:3b:ea:3d:ea:
                    19:95:e7:84:3c:96:e6:41:0b:39:40:1e:19:b5:05:
                    54:3b:24:de:cc:be:31:e0:5b:5b:66:37:46:95:8b:
                    7e:f6:fb:f3:d0:d5:0a:e8:dd:a0:55:54:a6:4e:91:
                    38:9d:fa:d5:c2:5a:dc:cd:21:f0:e2:c3:11:cb:00:
                    37:c0:84:42:11:13:91:2e:76:35:5e:33:95:12:a0:
                    bf:87:3b:e5:9b:0e:88:9b:e0:b6:fd:0c:b4:ec:1d:
                    3f:48:dc:9d:ac:19:9f:74:71:94:06:f2:d4:1f:58:
                    27:eb:bd:ea:0f:2c:eb:f6:75:a0:16:f0:54:0f:76:
                    54:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7B:A7:9F:48:73:AD:53:99:30:C9:CA:49:A1:A9:28:AE:CF:C0:8A:0F
            X509v3 Authority Key Identifier: 
                keyid:60:66:3B:AC:6B:3F:75:6E:E8:EE:7A:42:EB:6B:B2:C3:68:5F:6B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGY7rGs_dW7o7npC62uyw2hfaxU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7d450d-c9e0-43be-8faf-cdea19fafd1f/1/e6efSHOtU5kwycpJoakors_Aig8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7d450d-c9e0-43be-8faf-cdea19fafd1f/1/YGY7rGs_dW7o7npC62uyw2hfaxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:88:9d:9a:3c:55:b5:f0:cd:18:37:99:65:b1:82:a7:83:fc:
         b7:2d:2a:8e:bd:c1:6c:81:f0:66:57:c4:c6:c2:bb:cf:f2:bb:
         df:b3:44:d6:67:a0:12:c2:c1:46:18:91:e2:f5:40:6a:30:3e:
         76:83:84:7b:28:8d:fe:32:e9:ad:40:e9:6d:d5:50:bb:ef:25:
         a4:e7:98:0f:e4:40:9c:fe:a7:27:36:35:37:90:de:88:87:44:
         b1:51:92:f4:df:c2:4c:68:c0:d6:33:54:cb:70:86:c2:55:8e:
         90:35:7c:0e:3a:aa:1d:4a:f8:20:c2:65:02:75:bc:70:3b:dd:
         e6:ba:c5:f1:e0:7d:f2:50:c4:47:85:b4:fe:11:76:bb:9b:e6:
         49:8d:fb:b1:17:91:09:00:3f:8d:1f:b2:ba:ac:b5:3e:f4:73:
         c0:ae:26:ab:f4:4a:99:c4:0e:41:dd:28:50:7e:92:b4:7e:a9:
         05:8c:de:b0:52:8f:f2:fd:12:b2:73:f1:a0:e1:7d:5a:92:99:
         9b:82:b3:ae:d0:cf:77:73:fa:45:b0:47:23:f5:05:94:6a:86:
         14:91:83:69:f2:78:ae:ae:4d:8c:a3:9c:f9:36:9b:15:8f:f1:
         58:7c:21:0f:77:00:35:2e:de:f4:75:62:6c:ca:b4:bd:3c:da:
         d0:fd:51:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Oct 5 07:39:33 2021 by LibreSSL & rpki-client.