Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/b4/8d7b21-7350-4107-8aae-05be9ce9533c/1/z1EcglZjAM-gcBmAPZ4pt7vW-R8.roa (download)

Subject key identifier:   CF:51:1C:82:56:63:00:CF:A0:70:19:80:3D:9E:29:B7:BB:D6:F9:1F 
Authority key identifier: 40:44:9C:F7:2A:1B:E4:97:B0:21:40:83:6F:01:91:EC:B1:D1:23:4F
asID:                     AS397423
Prefixes:
    1: 91.233.20.0/24 (max: 24)
    2: 91.233.54.0/24 (max: 24)
    3: 91.233.89.0/24 (max: 24)
    4: 91.232.255.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/b4/8d7b21-7350-4107-8aae-05be9ce9533c/1/z1EcglZjAM-gcBmAPZ4pt7vW-R8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156281 (0x26279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40449cf72a1be497b02140836f0191ecb1d1234f
        Validity
            Not Before: Jul 20 06:15:00 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=cf511c82566300cfa07019803d9e29b7bbd6f91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:37:bd:de:cb:14:f3:a2:b3:1b:d4:3b:71:
                    12:52:17:2a:25:71:e5:79:a2:d7:5f:b0:5b:90:d9:
                    0b:29:c1:03:ce:58:a6:52:0a:6d:74:99:ea:a6:21:
                    03:bf:bf:85:fe:1e:89:fd:33:6b:ab:b3:ae:91:91:
                    0a:3f:55:68:54:fb:c2:0c:01:80:72:19:71:2c:9c:
                    e1:84:a9:22:eb:10:8a:0c:9c:92:9f:36:bc:bf:d0:
                    b1:13:0b:72:6e:4f:12:0f:95:fa:9f:62:5c:9c:f0:
                    0f:56:31:b9:3b:6a:eb:f1:1a:9c:b3:57:99:80:41:
                    ee:6c:dc:02:1b:55:cb:07:d5:d1:4a:d1:ee:dd:20:
                    80:d4:ff:5c:f9:31:40:bc:f5:14:d9:33:df:3b:13:
                    b2:df:c8:6e:93:4e:a2:0b:7f:5b:98:b1:84:9b:d1:
                    08:2f:52:33:76:3d:3d:9e:f3:bf:36:e1:d0:2b:5e:
                    f0:54:2c:ef:a4:de:e8:e3:65:07:43:84:3d:51:67:
                    1b:4d:08:ff:a0:af:55:08:20:c9:50:19:54:f1:21:
                    93:ea:bf:cb:2c:8e:b7:33:5d:a8:8d:45:63:96:c4:
                    5b:68:82:be:15:c6:c0:6f:a1:2e:f1:88:f6:e4:ff:
                    d5:6b:e1:44:fc:e1:6b:99:75:11:da:0b:e9:85:41:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CF:51:1C:82:56:63:00:CF:A0:70:19:80:3D:9E:29:B7:BB:D6:F9:1F
            X509v3 Authority Key Identifier: 
                keyid:40:44:9C:F7:2A:1B:E4:97:B0:21:40:83:6F:01:91:EC:B1:D1:23:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QESc9yob5JewIUCDbwGR7LHRI08.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8d7b21-7350-4107-8aae-05be9ce9533c/1/z1EcglZjAM-gcBmAPZ4pt7vW-R8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8d7b21-7350-4107-8aae-05be9ce9533c/1/QESc9yob5JewIUCDbwGR7LHRI08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0 0.....0....[.....[.....[.6...[.Y
    Signature Algorithm: sha256WithRSAEncryption
         10:c0:70:02:af:ac:30:88:5a:83:26:ad:7b:4e:86:9b:9d:ae:
         17:5b:cd:84:39:92:4b:58:83:8d:de:f2:0b:36:25:b2:78:ca:
         d4:9f:0e:4f:72:45:01:1c:a1:f0:a9:6a:ab:e1:30:47:15:3c:
         48:f8:a3:07:8c:00:77:e7:73:c0:69:ec:15:ad:6e:fe:5f:3d:
         5f:fa:cc:9b:54:ec:86:9e:10:19:ec:e0:0d:4e:c0:d3:0e:ec:
         ae:8b:75:b6:ed:cd:f5:2a:95:a4:b8:24:bf:29:03:e2:dd:f5:
         f9:33:b5:42:62:b2:0f:b1:c9:84:0c:00:43:d8:9e:47:64:ec:
         5b:81:4b:8c:76:b4:e0:68:22:22:bf:af:15:8e:49:9d:d7:3b:
         23:d6:8a:9a:10:76:b2:ab:25:8b:a0:35:16:50:83:66:1f:97:
         39:df:37:c7:ee:dc:25:6d:09:9b:c8:de:e5:38:9f:4f:1c:40:
         b5:4a:68:42:3f:cb:25:c0:b0:87:1d:59:78:7e:d8:e4:e4:a2:
         2a:25:5c:94:89:32:9b:cc:7e:27:b2:32:92:86:0c:ce:db:94:
         44:cb:0d:33:ea:99:f9:c5:44:b6:81:6d:c8:51:af:3a:23:f4:
         62:15:6c:93:ec:58:81:42:84:c3:32:24:df:02:6d:95:76:f0:
         1d:71:60:09
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIDAmJ5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQw
NDQ5Y2Y3MmExYmU0OTdiMDIxNDA4MzZmMDE5MWVjYjFkMTIzNGYwHhcNMjEwNzIw
MDYxNTAwWhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjZjUxMWM4MjU2NjMw
MGNmYTA3MDE5ODAzZDllMjliN2JiZDZmOTFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv3Q3vd7LFPOisxvUO3ESUhcqJXHleaLXX7BbkNkLKcEDzlim
UgptdJnqpiEDv7+F/h6J/TNrq7OukZEKP1VoVPvCDAGAchlxLJzhhKki6xCKDJyS
nza8v9CxEwtybk8SD5X6n2JcnPAPVjG5O2rr8Rqcs1eZgEHubNwCG1XLB9XRStHu
3SCA1P9c+TFAvPUU2TPfOxOy38huk06iC39bmLGEm9EIL1Izdj09nvO/NuHQK17w
VCzvpN7o42UHQ4Q9UWcbTQj/oK9VCCDJUBlU8SGT6r/LLI63M12ojUVjlsRbaIK+
FcbAb6Eu8Yj25P/Va+FE/OFrmXUR2gvphUETwwIDAQABo4ICGzCCAhcwHQYDVR0O
BBYEFM9RHIJWYwDPoHAZgD2eKbe71vkfMB8GA1UdIwQYMBaAFEBEnPcqG+SXsCFA
g28Bkeyx0SNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
UUVTYzl5b2I1SmV3SVVDRGJ3R1I3TEhSSTA4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iNC84ZDdiMjEtNzM1MC00MTA3LThhYWUtMDViZTljZTk1MzNjLzEv
ejFFY2dsWmpBTS1nY0JtQVBaNHB0N3ZXLVI4LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84
ZDdiMjEtNzM1MC00MTA3LThhYWUtMDViZTljZTk1MzNjLzEvUUVTYzl5b2I1SmV3
SVVDRGJ3R1I3TEhSSTA4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW+j/AwQAW+kUAwQAW+k2AwQAW+lZ
MA0GCSqGSIb3DQEBCwUAA4IBAQAQwHACr6wwiFqDJq17Toabna4XW82EOZJLWION
3vILNiWyeMrUnw5PckUBHKHwqWqr4TBHFTxI+KMHjAB353PAaewVrW7+Xz1f+syb
VOyGnhAZ7OANTsDTDuyui3W27c31KpWkuCS/KQPi3fX5M7VCYrIPscmEDABD2J5H
ZOxbgUuMdrTgaCIiv68Vjkmd1zsj1oqaEHayqyWLoDUWUINmH5c53zfH7twlbQmb
yN7lOJ9PHEC1SmhCP8slwLCHHVl4ftjk5KIqJVyUiTKbzH4nsjKShgzO25REyw0z
6pn5xUS2gW3IUa86I/RiFWyT7FiBQoTDMiTfAm2VdvAdcWAJ
-----END CERTIFICATE-----

Generated at Tue Aug 3 19:26:30 2021 by LibreSSL & rpki-client.