Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/ljcfQ7yMWTVHpLFiz8eEKy4UE3g.roa (download)

Subject key identifier:   96:37:1F:43:BC:8C:59:35:47:A4:B1:62:CF:C7:84:2B:2E:14:13:78 
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
asID:                     AS61317
Prefixes:
    1: 185.255.4.0/22 (max: 24)
    2: 31.43.164.0/22 (max: 24)
    3: 195.34.78.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/ljcfQ7yMWTVHpLFiz8eEKy4UE3g.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10233306 (0x9c25da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
        Validity
            Not Before: May  6 15:42:37 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=96371f43bc8c593547a4b162cfc7842b2e141378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:78:09:37:43:01:6b:8d:f7:90:be:6c:97:e5:
                    1d:22:3d:dc:5c:1b:f1:ef:21:b2:8e:6e:1a:56:07:
                    3e:ed:2e:04:d7:3d:dc:9d:0b:04:e9:51:a1:0f:50:
                    4e:4c:44:f3:86:13:a2:e6:6f:7c:cf:0e:58:49:c5:
                    f4:18:c5:d4:58:d9:c3:60:b1:cb:34:51:20:8f:53:
                    e3:5b:b4:c3:a4:2d:c0:02:ba:9f:58:74:f6:ad:2e:
                    e5:44:23:a2:98:62:40:9a:79:1d:fd:db:69:70:e9:
                    73:c2:98:f6:84:8b:ed:8b:d0:fc:a1:23:b7:8f:bc:
                    28:88:c0:24:6e:aa:3c:9e:4d:b0:99:4f:df:43:62:
                    93:a8:53:b5:44:cd:e5:23:98:89:35:9a:22:2e:6c:
                    7c:29:d9:fa:f7:d9:44:eb:28:f1:9a:4f:3a:4c:14:
                    55:d1:18:da:3a:2c:05:74:6a:f6:d4:1f:dc:ce:4d:
                    b1:4b:48:55:49:ae:b4:12:5a:d3:1c:8c:53:6f:14:
                    b9:91:c2:8e:a2:44:0f:3c:d1:2c:fd:ee:c8:1c:e0:
                    3f:1e:e0:89:94:52:50:f7:8f:43:00:9d:f2:d2:46:
                    3d:b4:66:4e:38:fb:25:28:39:ed:d9:87:d4:46:5a:
                    7b:50:97:54:5e:f8:b4:8c:49:75:34:5c:a7:6e:e6:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                96:37:1F:43:BC:8C:59:35:47:A4:B1:62:CF:C7:84:2B:2E:14:13:78
            X509v3 Authority Key Identifier: 
                keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/ljcfQ7yMWTVHpLFiz8eEKy4UE3g.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....+..........."N
    Signature Algorithm: sha256WithRSAEncryption
         44:8f:ac:9c:35:ca:67:49:31:f6:c2:80:95:b8:e7:19:9a:62:
         cf:2f:2a:9b:ee:df:93:2a:2d:f3:79:70:ac:92:3b:83:1a:16:
         e0:6a:21:40:de:34:31:e9:df:59:43:49:e3:68:59:7e:89:d8:
         99:64:81:49:cd:2c:7c:74:ae:b1:e9:01:53:45:d3:2c:06:8e:
         71:d0:a9:85:b4:0f:8b:30:c2:3e:e8:68:f7:1e:b7:ab:a5:9b:
         4c:32:05:4b:d3:6a:b9:d0:41:32:c2:89:40:3d:9e:5d:85:4b:
         24:95:38:fc:10:2c:0c:d1:43:94:12:c6:09:c0:33:e0:4d:36:
         7c:25:ff:c1:0b:17:40:1b:0a:d0:6a:72:e8:9b:56:4b:47:98:
         62:79:f5:2f:7a:e5:8d:a0:87:72:ca:15:a2:bf:eb:c7:8a:05:
         ea:aa:c9:7a:61:57:4d:41:64:5a:e4:1b:4b:22:f0:26:19:bf:
         4e:c1:28:f4:93:9b:d9:39:0a:e3:2a:45:cd:f9:ba:d6:ef:1d:
         59:1f:a9:19:2e:09:ed:99:bf:79:d9:33:92:7b:09:a2:ba:66:
         fa:3a:fb:3b:41:ee:dd:3f:1c:c3:1c:02:46:d8:40:58:c6:39:
         eb:6e:a1:b9:34:42:5f:57:93:63:b9:b4:05:4a:fa:5e:90:88:
         6c:34:eb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Jun 14 13:22:47 2021 by LibreSSL & rpki-client.