Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hhzJ4xZh5IQ30V7ILj-WGLkwdpg.roa (download)

Subject key identifier:   86:1C:C9:E3:16:61:E4:84:37:D1:5E:C8:2E:3F:96:18:B9:30:76:98 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS26484
Prefixes:
    1: 91.189.186.0/24 (max: 24)
    2: 5.253.137.0/24 (max: 32)
    3: 185.171.3.0/24 (max: 32)
    4: 185.224.146.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hhzJ4xZh5IQ30V7ILj-WGLkwdpg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369640154 (0x160842da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Sep 30 09:51:53 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=861cc9e31661e48437d15ec82e3f9618b9307698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c7:c3:02:6b:df:dd:a4:41:2d:d3:56:65:73:
                    ea:e5:f1:6f:ad:0d:86:47:91:5e:4b:1b:bf:af:cd:
                    8e:b4:12:e8:a6:64:83:58:ef:13:8b:53:76:44:a2:
                    4d:27:5a:98:e6:4d:fb:df:d7:b0:be:95:a4:b7:91:
                    c2:96:9b:6c:6c:12:8f:83:ce:ec:08:1d:d7:c1:d3:
                    38:c2:7c:d6:b8:32:52:f3:06:21:eb:f1:dd:5b:39:
                    4c:7c:40:65:3d:d7:4d:34:c3:23:18:7c:1f:1f:d7:
                    12:f1:09:56:88:9c:5c:ad:81:c6:67:e2:7f:f4:ee:
                    4a:f9:16:47:f8:20:da:4e:d3:1e:9e:e4:fa:e0:84:
                    e4:e9:55:e3:30:45:a8:18:df:d2:60:7c:23:b0:c9:
                    66:4a:44:6a:89:da:11:4a:7b:e7:60:ff:01:33:84:
                    1f:6f:7c:3c:22:80:46:1d:7b:c3:53:48:af:ba:40:
                    6a:00:b1:43:45:96:d9:1f:c6:e1:1c:d8:9d:6c:c0:
                    a0:c0:b1:f0:ba:3f:b2:82:99:fb:00:ee:16:31:52:
                    10:98:d9:36:34:42:4f:6a:67:94:26:2a:24:6f:53:
                    31:36:f4:3e:27:e5:c0:f4:fa:c6:4e:1e:6f:d6:29:
                    62:6b:b8:67:76:c9:23:61:5d:1d:50:2d:b2:73:ff:
                    3a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                86:1C:C9:E3:16:61:E4:84:37:D1:5E:C8:2E:3F:96:18:B9:30:76:98
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hhzJ4xZh5IQ30V7ILj-WGLkwdpg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.137.0/24
                  91.189.186.0/24
                  185.171.3.0/24
                  185.224.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:a0:14:75:cb:0f:7d:18:65:39:c9:f7:8f:2c:47:73:f2:dd:
         5c:c3:f7:55:35:51:85:07:b6:de:41:8b:27:24:1b:47:c5:67:
         55:72:87:26:ed:9c:1c:81:67:a4:da:78:db:9b:3e:d5:d8:ba:
         18:43:bc:b2:b8:7e:90:1a:56:2b:47:3d:38:b0:2a:71:20:6d:
         1f:28:ea:8b:3a:a3:0e:65:8c:1b:51:06:6a:42:f4:ec:24:03:
         b3:e4:b5:36:bf:91:86:8b:d4:f9:82:9e:6c:a8:ca:32:4f:b4:
         2d:58:e6:2d:e8:b5:f6:74:77:69:aa:68:cc:c5:23:7d:e6:d0:
         01:43:79:ae:4d:74:fe:60:c2:46:b1:93:f3:98:df:3b:c8:0f:
         2e:44:57:65:97:f4:6e:97:77:10:b2:9d:e9:0a:cd:bd:37:4f:
         ef:22:33:c0:f0:f4:81:67:f6:f2:61:8f:ad:50:b1:65:b1:f5:
         4d:7b:68:51:8d:77:10:9e:fb:b9:95:05:71:ef:8a:a5:c5:b4:
         75:5b:92:d0:04:89:b0:0a:88:d6:34:fb:a4:d4:c2:fa:c0:2e:
         ae:bb:d3:fe:94:b3:cd:9c:28:93:58:4f:1f:8d:51:c7:c9:b1:
         84:0e:d2:b4:53:9b:6d:9d:20:a7:fd:c6:c0:37:01:4b:6a:79:
         57:44:97:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Sep 30 12:34:32 2021 by LibreSSL & rpki-client.