Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/041hTuU6_GQszEzzCHzRZQkK9KQ.roa (download)

Subject key identifier:   D3:8D:61:4E:E5:3A:FC:64:2C:CC:4C:F3:08:7C:D1:65:09:0A:F4:A4 
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
asID:                     AS17819
Prefixes:
    1: 176.121.90.0/24 (max: 24)
    2: 176.121.91.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/041hTuU6_GQszEzzCHzRZQkK9KQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56427031 (0x35d0217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
        Validity
            Not Before: May 21 14:15:19 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d38d614ee53afc642ccc4cf3087cd165090af4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:bc:18:b0:c9:05:7b:d9:95:7a:84:ee:e9:
                    43:5c:ee:e2:52:15:be:a0:fa:45:e2:ab:20:5f:77:
                    03:98:41:a9:97:19:bd:77:d4:b4:68:b8:b4:26:55:
                    60:20:ac:d0:93:4c:4f:1e:be:b8:ab:e0:75:ad:2e:
                    03:ac:b2:1c:4a:df:49:9f:96:d0:c2:2c:ef:62:cc:
                    47:d9:2e:e2:5a:77:d7:70:72:d5:da:bd:bc:a9:7d:
                    cf:94:10:bb:c7:8a:f0:0c:4a:fe:45:1a:4c:cb:dc:
                    d4:a9:7e:bc:4d:71:50:bf:2e:b1:31:48:97:9f:d2:
                    52:80:c9:6b:2c:53:a2:cd:9b:88:59:bc:f8:6a:b0:
                    39:83:84:3f:0e:2a:ee:8b:ce:59:18:3a:33:0e:ce:
                    f1:09:59:63:01:56:85:f0:c3:f1:54:84:de:47:2b:
                    08:91:bc:00:d2:ec:4e:59:ad:03:bf:e6:27:a3:82:
                    51:86:0a:eb:06:0e:ec:a8:4b:32:c8:fe:0f:d8:a7:
                    6f:65:06:6f:6d:f4:21:68:bb:28:8e:c3:69:08:3f:
                    14:9e:0d:89:51:7e:ee:5f:87:ac:9a:20:5f:fe:14:
                    a2:5e:dc:ee:ae:e6:d5:d0:56:f7:4e:88:40:81:11:
                    9c:8f:f5:54:4f:07:be:ef:24:75:67:c6:dc:3d:cd:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D3:8D:61:4E:E5:3A:FC:64:2C:CC:4C:F3:08:7C:D1:65:09:0A:F4:A4
            X509v3 Authority Key Identifier: 
                keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/041hTuU6_GQszEzzCHzRZQkK9KQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....yZ
    Signature Algorithm: sha256WithRSAEncryption
         39:27:42:29:8b:fb:c8:21:8f:f4:0a:5f:3d:e4:11:92:ef:b8:
         18:e3:90:db:05:13:64:bd:f3:60:ef:04:47:64:47:2b:19:70:
         0b:3d:8a:73:7d:7b:2a:ef:63:40:d5:b1:71:f1:42:18:88:db:
         9f:da:3a:81:60:9d:7e:ee:4e:b3:3c:72:5a:de:92:b4:6e:32:
         c1:a9:51:bc:e2:41:e5:b5:b5:2e:c0:0d:35:b0:cd:70:d7:fb:
         b8:3b:33:4f:4c:d0:77:b8:a7:99:57:2b:59:47:12:a2:9b:5e:
         e8:23:76:db:cf:51:3e:e3:f3:38:db:8c:92:38:1d:39:34:7e:
         03:fd:65:f9:64:a9:01:63:2c:3f:68:37:72:6b:e8:67:08:21:
         3c:64:eb:00:96:9c:c9:f8:28:ce:72:81:08:f9:8f:05:de:51:
         a9:36:6c:2c:22:48:bd:f2:06:d7:b4:09:90:9e:a9:a2:a7:30:
         f0:42:61:9a:0c:11:be:b0:32:47:c0:93:03:0c:89:12:bb:fa:
         44:27:d5:e6:40:4c:c2:d0:19:b0:29:9b:59:d9:1d:75:81:70:
         d1:47:9e:7b:cb:d7:3c:c0:d2:d4:a2:88:5f:f3:c1:18:f6:9f:
         ae:81:1c:83:ac:4f:5e:8f:69:ef:af:b4:17:60:0d:db:70:6c:
         e9:a7:84:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Aug 1 19:26:49 2021 by LibreSSL & rpki-client.