Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/3Z-o8rx6Y8hiVSSCLJl3flVVOPA.roa (download)

Subject key identifier:   DD:9F:A8:F2:BC:7A:63:C8:62:55:24:82:2C:99:77:7E:55:55:38:F0 
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
asID:                     AS61317
Prefixes:
    1: 83.147.0.0/22 (max: 24)
    2: 83.147.4.0/22 (max: 24)
    3: 83.147.8.0/21 (max: 24)
    4: 83.147.16.0/20 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/3Z-o8rx6Y8hiVSSCLJl3flVVOPA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161133 (0x11b7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Mar 12 11:18:11 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dd9fa8f2bc7a63c8625524822c99777e555538f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:19:22:4b:6e:dd:05:34:d8:94:d1:35:9c:
                    f5:a1:76:79:0e:e4:5f:10:52:ed:d7:b1:3f:e2:ca:
                    62:ff:e1:34:e9:e3:10:48:48:32:5d:64:07:8a:70:
                    b3:8f:14:89:b3:ee:df:39:4e:1d:c3:ad:b0:a6:33:
                    87:f7:52:a1:39:7e:68:83:57:98:42:11:be:c2:d1:
                    1d:ee:40:3c:68:9c:6d:ac:c9:79:e8:24:6b:14:93:
                    7d:4d:14:b4:15:20:8b:c1:0d:b0:be:e8:df:de:c4:
                    e0:9e:8d:6f:51:16:42:1a:6b:26:6f:dc:5c:36:d8:
                    73:c6:d3:a0:d6:c3:b8:e6:e6:ec:e1:7d:d9:51:69:
                    92:d4:e5:44:bd:ec:8f:91:dd:fa:1d:e0:d1:10:c7:
                    ec:85:79:1a:da:75:a7:21:3e:25:cf:8a:7e:2f:aa:
                    2d:48:24:cd:ec:0f:85:2b:73:3c:40:dd:ac:3a:05:
                    dc:cb:19:4d:36:69:18:03:98:e2:e3:f2:b7:48:06:
                    7e:3b:62:08:28:57:59:a8:6d:43:b4:6e:85:c6:9a:
                    e5:b7:5b:63:af:e9:09:69:5f:91:5a:5e:69:ef:3a:
                    d7:93:54:2a:82:73:e6:0b:09:c2:42:99:d2:50:3c:
                    22:0e:41:7b:57:2a:15:52:aa:d1:d8:7f:5b:34:c8:
                    f2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DD:9F:A8:F2:BC:7A:63:C8:62:55:24:82:2C:99:77:7E:55:55:38:F0
            X509v3 Authority Key Identifier: 
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/3Z-o8rx6Y8hiVSSCLJl3flVVOPA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....S..
    Signature Algorithm: sha256WithRSAEncryption
         a1:6f:47:45:e6:98:ad:4f:37:2d:78:a2:7e:da:00:05:67:ed:
         07:15:55:26:bc:7c:be:8b:b9:27:a0:2b:f9:fa:85:04:bb:02:
         03:85:99:b7:80:25:65:04:6e:92:56:91:b7:f5:df:4e:a5:b3:
         7f:24:69:fa:74:cc:ae:1b:7f:57:ae:af:e8:fe:af:ef:0e:0a:
         46:6b:fb:f5:17:1f:e8:7e:cb:a6:23:f7:b9:68:b1:d9:6f:7f:
         70:2a:82:bf:98:9c:04:7c:fb:e9:bd:f3:c5:71:f2:ed:11:44:
         31:bf:3a:31:02:8e:83:9b:9f:aa:08:ca:c9:47:b9:2a:0f:da:
         f2:fe:ee:83:21:c0:2b:03:17:8e:e4:e9:0e:1a:e8:29:2e:70:
         f7:dd:78:5f:26:3d:73:0d:73:6e:f8:12:83:ac:e9:33:a8:d0:
         b4:dc:d8:e0:9e:f0:0e:11:12:de:9f:4a:0a:5b:76:cb:e6:d1:
         95:48:e3:5d:a6:9a:50:29:1b:00:e7:ac:55:86:4f:c4:5d:d4:
         c1:3c:28:bf:94:57:38:74:de:89:84:83:20:43:37:19:b0:d6:
         fb:01:8e:7b:30:9b:05:02:5a:12:6e:8e:4b:61:b7:f4:b1:d3:
         d0:92:63:42:19:30:7f:8d:6d:2f:9c:1b:34:6c:c7:8d:75:6a:
         ab:ea:8a:c4
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDEbetMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgx
OTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFmMzBjOWYwHhcNMjEwMzEy
MTExODExWhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkZDlmYThmMmJjN2E2
M2M4NjI1NTI0ODIyYzk5Nzc3ZTU1NTUzOGYwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAscQZIktu3QU02JTRNZz1oXZ5DuRfEFLt17E/4spi/+E06eMQ
SEgyXWQHinCzjxSJs+7fOU4dw62wpjOH91KhOX5og1eYQhG+wtEd7kA8aJxtrMl5
6CRrFJN9TRS0FSCLwQ2wvujf3sTgno1vURZCGmsmb9xcNthzxtOg1sO45ubs4X3Z
UWmS1OVEveyPkd36HeDREMfshXka2nWnIT4lz4p+L6otSCTN7A+FK3M8QN2sOgXc
yxlNNmkYA5ji4/K3SAZ+O2IIKFdZqG1DtG6Fxprlt1tjr+kJaV+RWl5p7zrXk1Qq
gnPmCwnCQpnSUDwiDkF7VyoVUqrR2H9bNMjy1wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFN2fqPK8emPIYlUkgiyZd35VVTjwMB8GA1UdIwQYMBaAFIGT/+nbN2JrE/hd
fMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Z1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcxLzEv
M1otbzhyeDZZOGhpVlNTQ0xKbDNmbFZWT1BBLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83
NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcxLzEvZ1pQXzZkczNZbXNU
LUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFU5MAMA0GCSqGSIb3DQEBCwUAA4IB
AQChb0dF5pitTzcteKJ+2gAFZ+0HFVUmvHy+i7knoCv5+oUEuwIDhZm3gCVlBG6S
VpG39d9OpbN/JGn6dMyuG39Xrq/o/q/vDgpGa/v1Fx/ofsumI/e5aLHZb39wKoK/
mJwEfPvpvfPFcfLtEUQxvzoxAo6Dm5+qCMrJR7kqD9ry/u6DIcArAxeO5OkOGugp
LnD33XhfJj1zDXNu+BKDrOkzqNC03NjgnvAOERLen0oKW3bL5tGVSONdpppQKRsA
56xVhk/EXdTBPCi/lFc4dN6JhIMgQzcZsNb7AY57MJsFAloSbo5LYbf0sdPQkmNC
GTB/jW0vnBs0bMeNdWqr6orE
-----END CERTIFICATE-----

Generated at Tue May 11 07:56:12 2021 by LibreSSL & rpki-client.