Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/B7HzfssWfBcU6jA7fH3C2L6m79E.roa (download)

Subject key identifier:   07:B1:F3:7E:CB:16:7C:17:14:EA:30:3B:7C:7D:C2:D8:BE:A6:EF:D1 
Authority key identifier: 53:7B:37:65:6C:D1:4D:48:8A:70:51:29:21:87:57:17:A0:D9:10:B6
asID:                     AS398704
Prefixes:
    1: 91.240.163.0/24 maxlen: 24
    2: 91.240.89.0/24 maxlen: 24
    3: 91.240.128.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/B7HzfssWfBcU6jA7fH3C2L6m79E.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100210260 (0x5f91654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537b37656cd14d488a70512921875717a0d910b6
        Validity
            Not Before: Jan  1 11:00:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=07b1f37ecb167c1714ea303b7c7dc2d8bea6efd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:ac:61:79:42:8c:14:bd:d8:12:26:af:38:
                    9f:52:51:7e:bb:55:8b:46:da:7b:ef:d4:9a:82:2f:
                    15:94:50:a3:c3:4f:04:a0:2b:8a:96:12:a9:77:22:
                    fc:be:90:30:66:2c:33:84:69:c9:b1:e0:a9:0a:4c:
                    f3:38:0e:9f:1c:38:87:cc:2e:1b:26:a2:62:87:92:
                    99:df:b9:57:6e:23:5f:2a:1e:ba:cf:d8:05:a2:d6:
                    cc:db:e2:6b:c6:63:2d:cc:50:7a:b4:3e:3c:0e:31:
                    d7:7f:21:1f:21:43:ab:f0:fe:06:00:ee:47:73:f6:
                    71:a8:93:8d:21:8b:06:59:f6:ea:ec:30:0d:16:52:
                    a9:df:20:ba:24:81:48:cf:e5:3f:80:35:7b:85:45:
                    f1:b9:f0:17:f0:18:98:7a:a0:6d:7a:a8:cd:1a:d0:
                    46:fb:d6:a7:c1:4e:9a:54:78:98:29:ea:54:e0:e1:
                    07:22:65:6c:12:21:c5:5a:0f:02:85:35:a6:38:49:
                    eb:6f:1c:e0:c8:81:13:f4:3d:d9:8b:07:56:a2:8f:
                    90:4d:0b:dd:8d:c5:3b:b8:6b:0d:d3:fc:93:d3:7b:
                    08:6f:17:f0:43:0e:91:2e:c8:a4:4c:b9:71:88:73:
                    dc:67:4b:11:df:68:1d:a1:22:e1:7e:1c:7d:00:e6:
                    37:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                07:B1:F3:7E:CB:16:7C:17:14:EA:30:3B:7C:7D:C2:D8:BE:A6:EF:D1
            X509v3 Authority Key Identifier: 
                keyid:53:7B:37:65:6C:D1:4D:48:8A:70:51:29:21:87:57:17:A0:D9:10:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3s3ZWzRTUiKcFEpIYdXF6DZELY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/B7HzfssWfBcU6jA7fH3C2L6m79E.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/U3s3ZWzRTUiKcFEpIYdXF6DZELY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.89.0/24
                  91.240.128.0/24
                  91.240.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:04:d7:42:4f:00:44:d6:5b:cb:18:2d:26:07:6e:6f:af:75:
         18:c6:63:48:6f:65:ad:45:56:60:ce:ce:58:b9:3d:db:37:ba:
         a2:24:f8:0d:92:fb:9f:57:25:a0:0c:85:73:04:1a:ea:79:9b:
         d2:93:9e:d8:a7:ce:cb:f1:86:40:e1:0e:3a:dc:a6:30:fb:b5:
         d8:34:84:ec:17:32:04:32:b7:9d:5d:cd:b2:7a:34:39:86:a2:
         2e:47:33:ce:7a:52:66:3d:ad:71:f6:02:d3:15:12:e8:c4:57:
         c5:e2:5e:e1:78:5d:28:f0:6b:00:6a:19:d4:5e:de:75:e7:a5:
         57:b1:84:f6:7c:25:85:d7:e3:80:6a:f9:61:57:eb:03:a0:80:
         72:36:e7:45:d3:62:57:62:05:24:7e:ba:5b:ec:0a:77:c1:20:
         e9:64:cb:d7:2d:d5:32:ad:57:b1:80:55:e4:17:93:8a:3c:1e:
         ff:d5:7a:7f:7c:7b:2f:e3:d7:62:78:5f:3c:97:1b:e4:fb:d8:
         fd:ed:1c:40:ce:a2:6f:ce:33:fc:a2:13:c1:f7:af:1c:05:92:
         2b:99:87:e7:aa:84:63:df:0f:8a:18:20:ab:48:4d:d4:05:69:
         6e:e7:a5:ee:79:69:32:d3:58:a6:17:5f:9e:6f:a3:32:6e:eb:
         fc:ca:7e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 13:52:17 2022 by LibreSSL & rpki-client.