Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/TB_tVHb2Qk5TGzT-Dddj-CFpoGc.roa (download)

Subject key identifier:   4C:1F:ED:54:76:F6:42:4E:53:1B:34:FE:0D:D7:63:F8:21:69:A0:67 
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
asID:                     AS397423
Prefixes:
    1: 91.132.160.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/TB_tVHb2Qk5TGzT-Dddj-CFpoGc.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107949239 (0x66f2cb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
        Validity
            Not Before: Jul 24 11:11:32 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=4c1fed5476f6424e531b34fe0dd763f82169a067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cc:1b:eb:12:49:01:04:2d:36:e9:57:fc:01:
                    d5:ad:98:2c:d2:af:aa:eb:80:17:89:c2:9f:3e:65:
                    48:a6:3f:48:1a:98:d5:cc:a9:91:86:20:35:e9:e3:
                    bd:ca:87:00:aa:a2:58:e1:9b:79:c4:62:66:58:ab:
                    80:00:70:a2:82:fc:c1:e8:c9:f1:a3:b5:8b:5f:2c:
                    e5:a4:2f:97:ad:fd:1b:b6:1f:18:ff:c6:f3:96:22:
                    48:a3:dc:3a:21:d2:98:ea:7e:0c:36:ba:77:d0:e2:
                    a8:62:b8:fd:4a:e2:66:53:79:0d:99:fd:31:50:4e:
                    ef:7d:dc:a4:25:bb:55:48:58:2b:86:a0:d1:9e:25:
                    05:db:8d:c2:6a:ce:36:e4:59:17:9f:80:1a:29:50:
                    e0:f4:8b:a4:c3:55:ec:d9:e0:f2:7c:96:29:31:68:
                    30:13:d9:de:75:66:90:7e:73:38:11:94:17:1d:6b:
                    4c:b5:69:46:46:78:57:3a:bb:fb:18:1c:47:15:27:
                    92:67:b7:b6:27:91:49:d7:bc:27:6f:af:7c:0c:a0:
                    af:1b:be:d9:e0:b8:b4:73:42:91:7f:3d:cf:79:6d:
                    96:80:cf:d0:8d:db:97:fd:bb:fd:10:32:77:c1:a5:
                    23:30:64:66:41:3c:80:08:39:61:1c:e3:94:f8:de:
                    b8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4C:1F:ED:54:76:F6:42:4E:53:1B:34:FE:0D:D7:63:F8:21:69:A0:67
            X509v3 Authority Key Identifier: 
                keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/TB_tVHb2Qk5TGzT-Dddj-CFpoGc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.132.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:4d:90:b7:be:6f:94:fe:08:c3:22:b1:c0:30:3c:56:86:ab:
         7c:e9:ed:ea:ad:9b:ca:14:2a:1e:02:eb:58:95:1c:6d:41:cb:
         91:f9:dc:e8:ed:39:7e:3c:be:ef:87:a3:f6:15:bb:15:05:d0:
         48:1a:3e:77:45:3d:5c:f1:3c:40:33:89:26:9e:18:b2:59:cf:
         e3:2b:bb:71:22:a7:03:82:d8:c0:61:b5:a1:ea:3e:96:e3:d4:
         81:51:f7:73:94:4d:67:42:3e:f0:47:c1:12:0e:3d:5c:54:a2:
         cd:ff:58:ea:a4:40:78:66:40:ce:fb:e9:95:6e:f0:0b:09:9e:
         4f:f7:92:f6:de:f5:17:f5:d7:48:0c:f3:7a:d8:bf:7e:73:e2:
         a8:c2:94:83:3c:96:a2:9b:01:7b:b1:e0:15:bc:bb:7e:af:8d:
         0e:3d:e4:a1:82:27:34:28:41:19:9d:99:d6:b0:b3:e8:d8:23:
         40:b1:a7:87:18:8a:53:82:44:70:c4:4b:4b:3d:d8:4c:6a:88:
         57:ff:1c:db:3b:6d:d7:95:44:b7:67:9c:f0:07:84:b7:cd:0d:
         db:be:57:a4:9e:d6:a8:69:b1:37:c2:dd:f1:ba:68:c7:31:cd:
         df:1e:ae:42:c8:9b:09:10:55:d8:3e:b8:37:fe:48:dc:10:e2:
         81:22:10:9a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBm8stzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
OTg2YzczOTk0ZDAyZDkxZmM5N2Q5MTZlOTgwOWE2ZDk4MWU2YjE3MB4XDTIxMDcy
NDExMTEzMloXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGMxZmVkNTQ3NmY2
NDI0ZTUzMWIzNGZlMGRkNzYzZjgyMTY5YTA2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJnMG+sSSQEELTbpV/wB1a2YLNKvquuAF4nCnz5lSKY/SBqY
1cypkYYgNenjvcqHAKqiWOGbecRiZlirgABwooL8wejJ8aO1i18s5aQvl639G7Yf
GP/G85YiSKPcOiHSmOp+DDa6d9DiqGK4/UriZlN5DZn9MVBO733cpCW7VUhYK4ag
0Z4lBduNwmrONuRZF5+AGilQ4PSLpMNV7Nng8nyWKTFoMBPZ3nVmkH5zOBGUFx1r
TLVpRkZ4Vzq7+xgcRxUnkme3tieRSde8J2+vfAygrxu+2eC4tHNCkX89z3ltloDP
0I3bl/27/RAyd8GlIzBkZkE8gAg5YRzjlPjeuMUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRMH+1UdvZCTlMbNP4N12P4IWmgZzAfBgNVHSMEGDAWgBRJhsc5lNAtkfyX
2RbpgJptmB5rFzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NZYkhPWlRRTFpIOGw5a1c2WUNhYlpnZWF4Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWEvNDU3ZTEzLTQxZDMtNDBlZi1iNTcyLTllODk1ZDBlZjhkMi8x
L1RCX3RWSGIyUWs1VEd6VC1EZGRqLUNGcG9HYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEv
NDU3ZTEzLTQxZDMtNDBlZi1iNTcyLTllODk1ZDBlZjhkMi8xL1NZYkhPWlRRTFpI
OGw5a1c2WUNhYlpnZWF4Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAluEoDANBgkqhkiG9w0BAQsFAAOC
AQEAqE2Qt75vlP4IwyKxwDA8VoarfOnt6q2byhQqHgLrWJUcbUHLkfnc6O05fjy+
74ej9hW7FQXQSBo+d0U9XPE8QDOJJp4YslnP4yu7cSKnA4LYwGG1oeo+luPUgVH3
c5RNZ0I+8EfBEg49XFSizf9Y6qRAeGZAzvvplW7wCwmeT/eS9t71F/XXSAzzeti/
fnPiqMKUgzyWopsBe7HgFby7fq+NDj3koYInNChBGZ2Z1rCz6NgjQLGnhxiKU4JE
cMRLSz3YTGqIV/8c2ztt15VEt2ec8AeEt80N275XpJ7WqGmxN8Ld8bpoxzHN3x6u
QsibCRBV2D64N/5I3BDigSIQmg==
-----END CERTIFICATE-----

Generated at Fri Sep 17 17:22:37 2021 by LibreSSL & rpki-client.