Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/vSFg-3FXv43JrG6FJ5RSWktLnqs.roa (download)

Subject key identifier:   BD:21:60:FB:71:57:BF:8D:C9:AC:6E:85:27:94:52:5A:4B:4B:9E:AB 
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
asID:                     AS61317
Prefixes:
    1: 91.188.252.0/24 (max: 24)
    2: 91.188.254.0/24 (max: 24)
    3: 91.188.255.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/vSFg-3FXv43JrG6FJ5RSWktLnqs.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116156645 (0x6ec68e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
        Validity
            Not Before: Apr 16 09:37:22 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=bd2160fb7157bf8dc9ac6e852794525a4b4b9eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:25:ec:c1:f4:a4:f2:4f:7c:3c:54:2c:a7:dc:
                    92:52:42:9e:38:bb:d7:62:bc:bf:80:3a:23:93:df:
                    f8:89:c1:8e:4c:7a:0c:01:b8:fc:94:71:47:4c:e7:
                    d8:13:35:b6:56:93:9e:84:dc:5c:90:32:77:d0:cb:
                    d9:b5:0a:61:9f:a0:95:e2:8f:cf:f1:09:34:1b:35:
                    e3:04:a7:cf:13:00:c1:e9:9b:ca:48:0b:36:7f:e4:
                    f9:cb:3c:f5:ae:1e:a4:f2:6b:c1:05:70:69:18:4d:
                    ed:ff:a6:59:9b:d8:29:ca:f6:41:e7:c7:9b:b0:49:
                    e3:b0:82:4d:7f:2b:08:84:bc:5c:2f:24:ce:a8:1a:
                    34:df:6a:d0:82:fd:b5:ad:59:c6:5e:49:06:11:fe:
                    60:7d:ee:5e:4d:d9:5a:3c:df:82:21:3d:da:d7:85:
                    8e:15:fe:b0:4f:58:88:e0:bd:c6:0c:95:f0:e4:24:
                    c2:27:1f:fa:6a:4c:ba:32:91:07:66:fe:d3:d7:0b:
                    57:72:d4:3f:20:62:5e:62:fe:eb:b3:82:c5:1d:36:
                    ca:0f:e9:95:cd:dd:f5:9e:93:95:57:c9:47:6c:2e:
                    5e:20:71:c2:eb:2c:03:d2:73:cd:df:33:0d:eb:36:
                    6e:9d:4c:52:86:ad:67:73:d3:84:19:03:1f:74:e9:
                    8f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BD:21:60:FB:71:57:BF:8D:C9:AC:6E:85:27:94:52:5A:4B:4B:9E:AB
            X509v3 Authority Key Identifier: 
                keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/vSFg-3FXv43JrG6FJ5RSWktLnqs.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....[.....[..
    Signature Algorithm: sha256WithRSAEncryption
         8b:d8:93:4f:ee:c7:28:0c:3f:d6:45:9a:2e:70:29:14:0d:92:
         06:54:79:30:d2:fc:ce:13:0e:20:ba:21:1d:a2:53:3a:e5:55:
         1a:05:d3:cb:75:e1:62:71:54:cb:da:ba:25:7a:72:34:e3:4b:
         b1:51:e1:37:50:aa:04:e6:e4:2c:75:af:7b:d3:01:9f:02:8a:
         cb:bd:5c:3a:e8:8e:a7:0e:0b:c5:d4:59:61:f6:db:5a:ee:cd:
         9c:f4:2d:29:ea:f6:89:7c:7a:ce:af:9c:3b:9a:dd:cb:ae:30:
         c4:1b:16:c5:23:1c:06:57:ea:cc:9f:ba:ee:4b:99:d2:61:a5:
         9d:0d:8e:4e:f0:0b:7d:e2:64:8f:98:35:a5:02:18:45:16:38:
         3b:c7:6c:5a:13:2f:fe:f8:b8:d3:a4:f7:07:12:a7:5d:09:68:
         b8:70:03:4d:e2:ab:f6:fa:d3:98:fe:fe:ff:ab:0f:ca:1a:bf:
         65:40:a1:b2:26:8e:a8:88:98:08:0e:84:ca:e0:9c:19:38:3d:
         2b:fa:06:5d:32:23:5f:88:ce:42:85:b4:98:ea:e3:15:36:f0:
         cd:7f:61:58:90:db:54:a0:35:b0:53:f2:8b:5c:82:52:f4:5d:
         5c:1a:64:7e:e1:71:7e:58:db:62:98:f3:9b:50:e9:5a:3f:1e:
         53:b0:da:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat May 15 05:15:49 2021 by LibreSSL & rpki-client.