Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/qYwWRQM9OHUvIp4EDHMGTbR9f2s.roa (download)

Subject key identifier:   A9:8C:16:45:03:3D:38:75:2F:22:9E:04:0C:73:06:4D:B4:7D:7F:6B 
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
asID:                     AS61317
Prefixes:
    1: 193.31.15.0/24 (max: 24)
    2: 193.31.62.0/24 (max: 24)
    3: 193.31.60.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/qYwWRQM9OHUvIp4EDHMGTbR9f2s.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65971897 (0x3eea6b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
        Validity
            Not Before: Jan  4 14:17:34 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=a98c1645033d38752f229e040c73064db47d7f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9c:e5:7e:37:0b:26:88:47:29:82:55:9a:d3:
                    68:87:bd:f2:9f:5c:69:db:3f:61:e0:79:6f:4f:9f:
                    0f:5f:aa:50:89:7d:16:f3:10:d5:fd:a1:5f:6c:55:
                    a7:b8:bb:b3:b4:ca:8d:d8:a0:72:cf:92:3a:b6:6a:
                    fe:24:30:ac:e3:d9:2b:14:a0:56:38:85:44:0c:fe:
                    64:f8:82:0b:5e:ec:83:be:a7:f8:f6:e2:93:f2:36:
                    13:63:ab:aa:f9:c6:e9:d3:98:c4:fe:ce:27:13:0b:
                    4f:89:65:de:d2:b8:62:2e:80:10:4a:cc:7a:c6:67:
                    55:b4:8b:a3:f8:83:d8:a7:75:a8:de:af:f7:90:a7:
                    67:9a:bf:38:46:ce:29:c4:30:8b:59:e4:9b:1d:4c:
                    f0:a7:cd:07:28:e1:1b:35:a0:4b:a8:54:45:29:3d:
                    b2:91:80:0a:1f:e1:40:e6:36:52:25:11:93:1a:21:
                    4a:99:93:e7:da:1c:75:35:95:56:d6:c5:07:39:4f:
                    51:1e:45:61:be:2d:fd:e3:f1:37:61:f9:45:c7:a4:
                    ef:e4:7a:af:02:21:ee:84:7e:7f:12:ea:87:be:c9:
                    07:7b:c6:b9:2f:49:1e:0b:5e:99:41:dc:a8:07:97:
                    bb:b7:a1:9a:cf:f7:ea:ac:08:9f:9d:f5:04:84:88:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A9:8C:16:45:03:3D:38:75:2F:22:9E:04:0C:73:06:4D:B4:7D:7F:6B
            X509v3 Authority Key Identifier: 
                keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/qYwWRQM9OHUvIp4EDHMGTbR9f2s.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0............<.....>
    Signature Algorithm: sha256WithRSAEncryption
         3b:28:ec:a9:89:1d:a8:59:04:29:14:3a:d4:f8:3c:04:4c:a4:
         e5:3b:3e:f8:a6:b7:0b:db:df:a3:3d:0e:cf:7f:40:ea:56:c5:
         e8:80:3e:eb:39:8e:03:49:c6:15:e0:01:09:31:63:b7:cf:a0:
         fb:b6:3b:dd:e8:74:ae:40:1e:88:8f:11:c5:e9:37:09:e6:06:
         4f:d5:ef:8f:ac:b4:4b:1e:a6:25:1e:84:af:ac:12:56:fb:05:
         13:21:a1:bc:4b:4d:ee:5f:25:7e:0a:d0:37:eb:e6:79:6c:85:
         97:00:73:a9:82:a1:9a:08:4d:5e:9f:3d:8b:20:bc:79:aa:1f:
         b3:9a:9c:27:73:9f:09:b0:db:dc:46:60:47:84:e6:cc:44:d5:
         56:41:31:6f:be:eb:67:d5:1f:1c:ef:4d:c3:36:91:cb:6b:b3:
         29:7b:42:b5:c3:ad:b0:2d:ba:3e:a0:f2:0d:40:dd:7d:95:a6:
         07:95:cf:e2:19:9e:12:13:2a:e5:69:a9:aa:0c:7f:ad:f6:5e:
         03:15:07:ca:3b:5e:da:fd:14:56:3b:1b:5b:fa:e0:20:71:31:
         44:c9:4d:89:8b:78:39:de:28:7c:fa:f9:3d:b4:0d:e4:7a:87:
         f2:57:49:9a:17:08:b8:f9:47:e3:d3:d0:c3:ef:86:0e:e6:17:
         7a:78:3d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jun 13 02:01:41 2021 by LibreSSL & rpki-client.