Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/_kQFMMAJumXTPi4UcZUgTCdtYU4.roa (download)

Subject key identifier:   FE:44:05:30:C0:09:BA:65:D3:3E:2E:14:71:95:20:4C:27:6D:61:4E 
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
asID:                     AS61317
Prefixes:
    1: 91.235.2.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/_kQFMMAJumXTPi4UcZUgTCdtYU4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2495069 (0x26125d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
        Validity
            Not Before: Jan  1 02:28:16 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=fe440530c009ba65d33e2e147195204c276d614e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:12:70:46:a2:d4:22:9c:ff:65:7f:1c:89:ca:
                    30:ff:22:5d:2f:d8:8b:5c:b9:fe:a8:7c:6f:90:84:
                    f0:81:af:70:f5:12:f6:86:88:c0:13:51:9e:26:08:
                    0a:92:4c:f7:90:c0:f1:94:84:b2:f9:a1:83:59:40:
                    cb:fa:97:5a:0c:88:be:ae:83:38:e4:0c:f4:d9:36:
                    fb:67:db:88:59:2f:4d:c0:20:bc:0a:3f:b2:76:19:
                    0a:25:24:38:c6:64:62:ea:86:e1:3b:38:a3:e1:1a:
                    1f:1b:d3:9b:63:a8:3e:cc:11:17:90:84:8e:ed:71:
                    71:43:ae:be:b7:48:a5:ec:ba:a9:26:76:6d:cc:6a:
                    bf:76:42:5b:90:dc:f1:a6:1a:18:4b:10:22:76:bb:
                    5e:43:fe:2f:34:b5:64:76:2a:10:8f:44:73:25:03:
                    5a:b7:14:be:93:49:ca:84:b5:2d:90:46:75:33:f8:
                    d2:2a:61:68:13:7f:7f:e5:fb:2d:ac:11:cc:99:2c:
                    7f:da:3c:cb:0e:73:f4:71:46:1c:3a:b1:0b:a8:69:
                    20:f0:16:9c:2c:c9:e4:4a:43:fb:78:89:8b:67:16:
                    d7:72:4e:02:40:0c:3f:07:3b:77:72:c9:fa:6c:fa:
                    fb:f5:fd:13:03:2c:8f:45:d1:25:34:d4:4d:35:ff:
                    16:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FE:44:05:30:C0:09:BA:65:D3:3E:2E:14:71:95:20:4C:27:6D:61:4E
            X509v3 Authority Key Identifier: 
                keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/_kQFMMAJumXTPi4UcZUgTCdtYU4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....[..
    Signature Algorithm: sha256WithRSAEncryption
         30:a2:6f:04:20:85:2b:08:cc:80:b7:8d:44:26:8c:98:0a:75:
         9b:c8:42:28:04:5e:77:1a:e6:c4:eb:c3:b7:7c:d0:d0:a6:a4:
         52:d4:c5:4c:e9:d9:e3:cc:19:4b:eb:82:dc:1c:f9:8b:44:4e:
         a4:09:97:0f:9b:d6:cd:31:7c:5d:a5:27:6a:8e:19:8f:3c:a1:
         6c:e1:73:d1:45:50:f8:fd:fe:b8:c5:50:fb:2b:94:66:b7:44:
         35:81:85:b9:c4:32:57:49:a7:db:66:18:0e:ad:c3:ce:41:55:
         63:7c:e0:a8:ce:11:b0:a3:ec:9d:1d:0e:e5:ef:48:cb:aa:6c:
         a5:a2:42:47:7b:9e:be:be:58:44:4a:e7:f0:43:63:b5:7e:93:
         6e:85:25:5c:02:5d:c9:94:2f:ea:fb:ee:d7:69:66:94:9a:ae:
         97:13:1d:93:c6:d6:97:d9:25:8c:91:c6:b4:36:e5:29:5e:6d:
         ca:86:69:ab:ca:31:a6:33:fd:0a:c3:f1:19:2e:51:89:70:de:
         d8:af:9d:1b:cf:a7:bb:78:30:8b:c7:a5:da:03:46:aa:a6:dd:
         b4:a4:af:e6:cf:e5:a8:90:b2:37:5b:ed:c2:47:19:51:07:f3:
         92:97:ee:a8:0f:08:39:2d:65:c1:80:eb:04:ba:50:3a:46:f8:
         03:d0:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 16:00:52 2021 by LibreSSL & rpki-client.