Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/FIx8ERkt3vBUJD-GBYZ4sEXE4YA.roa (download)

Subject key identifier:   14:8C:7C:11:19:2D:DE:F0:54:24:3F:86:05:86:78:B0:45:C4:E1:80 
Authority key identifier: 53:7B:37:65:6C:D1:4D:48:8A:70:51:29:21:87:57:17:A0:D9:10:B6
asID:                     AS398704
Prefixes:
    1: 91.240.163.0/24 (max: 24)
    2: 91.240.89.0/24 (max: 24)
    3: 91.240.128.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/FIx8ERkt3vBUJD-GBYZ4sEXE4YA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44771718 (0x2ab2986)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537b37656cd14d488a70512921875717a0d910b6
        Validity
            Not Before: Jan  1 02:55:22 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=148c7c11192ddef054243f86058678b045c4e180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:55:27:22:67:9d:b1:17:6e:c6:f5:47:f7:
                    b2:92:c3:19:be:bc:15:34:4a:44:50:7f:1b:b5:1a:
                    df:5a:a1:ac:84:e5:0a:47:79:1b:94:34:e0:36:91:
                    b6:f0:88:ed:29:91:54:38:36:d5:a9:61:69:4f:27:
                    e3:e0:e4:57:c7:6c:cb:c4:7e:d4:91:03:8b:9e:35:
                    18:4d:88:0c:4b:c6:70:3a:71:53:9c:57:76:86:49:
                    97:77:b0:e1:25:b7:50:94:48:c6:56:14:bc:fc:4b:
                    a1:78:8c:11:f0:7b:ee:e3:28:7d:79:ae:6e:16:cc:
                    6e:b6:ca:b5:da:cd:c4:08:5f:c3:fe:22:e3:df:6d:
                    28:58:83:37:a3:55:37:c5:e3:03:94:d2:41:0b:4e:
                    28:e5:ad:40:1f:79:16:bd:a7:37:3c:a5:09:bb:69:
                    20:6d:25:ad:5d:52:ae:e8:53:fa:1b:3b:fb:a1:60:
                    ee:dd:eb:d5:b9:54:5d:4b:77:25:c9:2d:38:44:b6:
                    64:16:f9:e2:47:a9:bc:b1:6a:01:57:30:ce:ff:e5:
                    6d:6d:fa:ca:21:c7:77:d5:0c:29:2f:4a:f3:77:c1:
                    5e:04:8b:c1:47:a8:77:c7:44:47:7b:2b:2b:a1:7c:
                    55:b2:0e:84:97:b2:92:95:55:8d:10:ab:2a:e8:15:
                    89:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                14:8C:7C:11:19:2D:DE:F0:54:24:3F:86:05:86:78:B0:45:C4:E1:80
            X509v3 Authority Key Identifier: 
                keyid:53:7B:37:65:6C:D1:4D:48:8A:70:51:29:21:87:57:17:A0:D9:10:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3s3ZWzRTUiKcFEpIYdXF6DZELY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/FIx8ERkt3vBUJD-GBYZ4sEXE4YA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/U3s3ZWzRTUiKcFEpIYdXF6DZELY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.89.0/24
                  91.240.128.0/24
                  91.240.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:d4:d3:eb:3d:e5:ce:a7:8f:e6:53:66:3a:be:ab:18:77:53:
         51:be:a3:f6:45:0f:c0:59:5f:f0:52:0f:59:8f:1b:42:5b:18:
         3c:1d:cc:a2:2d:43:cc:e3:c3:8d:52:88:d8:b6:14:af:13:50:
         bf:19:84:d8:36:06:12:fd:5c:83:5b:ea:d6:78:4a:bf:c7:b4:
         07:37:62:15:33:06:54:32:e7:67:bb:d2:88:43:93:ab:9d:03:
         37:f9:2a:49:8f:ac:e4:be:f4:3d:04:f8:4e:a2:04:bc:0a:88:
         22:1d:89:40:d8:9d:d4:50:a0:e6:02:02:5c:4f:0b:51:1e:e1:
         ed:35:f0:7c:8f:f8:7e:a9:02:19:a0:49:37:6e:7c:2d:dd:48:
         d1:83:c2:8e:bc:e9:c5:e3:05:20:78:2d:b1:ab:6a:ea:c6:19:
         26:e2:67:b7:42:c2:e1:e8:22:34:b3:69:4e:5b:ce:1b:b7:2d:
         a2:07:15:1d:de:5e:ae:f6:df:56:1a:58:a9:63:a8:ba:ea:fa:
         e0:0d:ca:cc:f0:41:cd:a9:cb:84:d8:6d:eb:c6:b6:0a:22:9a:
         8b:4f:dc:26:d1:87:a0:5a:15:63:a3:e7:a5:51:20:16:f2:7d:
         18:c9:a2:cb:58:db:ca:db:1c:13:f3:88:1c:f6:fa:59:d0:f7:
         1e:d7:67:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:07:14 2021 by LibreSSL & rpki-client.