Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/0--axGfDxh76qDao8zHvebsixz8.roa (download)

Subject key identifier:   D3:EF:9A:C4:67:C3:C6:1E:FA:A8:36:A8:F3:31:EF:79:BB:22:C7:3F 
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
asID:                     AS61317
Prefixes:
    1: 85.209.16.0/22 (max: 24)
    2: 45.8.172.0/22 (max: 22)
    3: 45.66.148.0/22 (max: 24)
    4: 77.83.252.0/22 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/0--axGfDxh76qDao8zHvebsixz8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108744173 (0x67b4ded)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Apr 28 16:17:40 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d3ef9ac467c3c61efaa836a8f331ef79bb22c73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:26:12:b2:82:51:bf:f7:6b:93:c8:83:15:76:
                    3b:08:39:7c:ae:de:85:0f:c9:1b:80:80:ab:f3:f0:
                    2b:2d:c1:6c:63:98:c6:0a:f0:9a:97:f8:74:ed:01:
                    2c:70:59:95:10:bd:e2:18:ab:87:c2:96:31:67:d5:
                    75:3f:55:56:41:20:25:22:ed:69:cc:74:3e:00:94:
                    9d:a3:7b:a3:3f:be:f1:ae:ed:34:ff:d0:10:7c:e5:
                    57:82:71:95:9e:33:03:e7:b3:84:b6:35:79:65:0e:
                    3c:8f:e3:22:ad:35:8b:68:43:b8:21:c6:15:be:07:
                    5e:68:8c:b5:84:b0:7b:a3:4a:37:87:d7:5d:93:b1:
                    5a:27:c3:2b:e1:a3:7b:e1:59:a2:f5:d5:7b:9c:17:
                    7c:87:a3:2a:d3:2e:77:70:de:41:15:9e:55:f0:79:
                    f0:ff:06:c8:41:9d:af:4d:e7:c4:29:7b:f6:22:ca:
                    a2:f8:01:c7:59:62:6a:38:51:92:28:4d:90:23:ec:
                    dd:56:14:c7:49:c5:ff:d1:23:88:ef:44:c4:05:55:
                    9d:de:1f:70:8c:30:ac:4a:ee:3a:43:06:8b:ca:fa:
                    3b:6b:ce:04:e5:ef:5e:d1:d6:30:82:ad:f0:e7:57:
                    ce:7e:86:2c:76:69:9d:55:23:be:83:66:1e:b6:f1:
                    d0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D3:EF:9A:C4:67:C3:C6:1E:FA:A8:36:A8:F3:31:EF:79:BB:22:C7:3F
            X509v3 Authority Key Identifier: 
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/0--axGfDxh76qDao8zHvebsixz8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0 0.....0....-.....-B....MS....U..
    Signature Algorithm: sha256WithRSAEncryption
         35:a1:8c:fe:64:ba:4c:fb:01:47:73:40:16:48:f8:1a:33:56:
         f3:26:73:6e:c1:23:97:52:62:fa:89:b3:d4:74:96:51:41:46:
         96:ea:c1:c8:c6:11:b5:a1:7f:54:03:57:04:02:69:82:2e:09:
         64:cb:0d:ee:fc:42:df:cc:b6:ae:a0:3b:d4:83:39:f6:e9:7e:
         8c:ab:44:95:05:17:cf:a3:59:45:39:69:98:b7:05:f5:af:94:
         77:db:89:b9:95:1c:0e:41:32:a4:7f:c3:c9:3f:d5:f9:c7:79:
         63:b7:b0:44:1c:f1:3e:cc:a6:98:4f:1f:9b:9d:ba:63:be:3d:
         d5:56:30:2d:46:20:88:a6:93:9f:76:b2:58:93:65:0d:9a:2e:
         7e:d0:3a:9f:ba:f2:34:1e:4a:f3:6b:5f:5c:af:6a:f8:1a:67:
         ce:de:57:ce:e5:97:9f:0b:64:65:3f:39:b7:12:54:0c:68:bc:
         81:8e:9f:c4:c2:14:35:1b:b1:c7:b6:b0:79:d6:c5:d9:41:4a:
         f5:96:fd:d0:9c:34:5e:95:70:e3:d1:ee:65:70:a9:24:61:26:
         0e:82:dd:f4:13:e5:98:59:86:19:84:75:31:8e:bc:75:37:bb:
         f1:dd:0b:a4:65:77:df:85:5e:3e:20:bd:3a:e1:69:6f:d0:6a:
         f8:4c:41:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu May 27 21:31:01 2021 by LibreSSL & rpki-client.