Route Origin Authorization
Location: rpki.ripe.net/repository/DEFAULT/0b/aba7d5-6227-4c02-be82-16067d6d2793/1/I3c-WbBv8_0xCsYXE_fZRNEhiAI.roa (download)

Subject key identifier:   23:77:3E:59:B0:6F:F3:FD:31:0A:C6:17:13:F7:D9:44:D1:21:88:02 
Authority key identifier: 11:7A:E5:95:B1:FC:45:90:5E:9C:08:F8:B9:31:E4:15:FF:67:DB:EF
asID:                     AS206238
Prefixes:
    1: 45.88.10.0/23 (max: 24)
    2: 45.88.8.0/22 (max: 24)
    3: 45.88.8.0/23 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/0b/aba7d5-6227-4c02-be82-16067d6d2793/1/I3c-WbBv8_0xCsYXE_fZRNEhiAI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12711975 (0xc1f827)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117ae595b1fc45905e9c08f8b931e415ff67dbef
        Validity
            Not Before: Jan  1 07:34:59 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=23773e59b06ff3fd310ac61713f7d944d1218802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f3:1d:1e:9f:3f:88:2b:ab:aa:00:ce:7c:c3:
                    73:03:b7:b4:20:c1:ab:89:40:98:fe:24:c9:22:3c:
                    61:13:76:d0:4a:f4:58:3c:f8:e2:33:25:5d:ee:1a:
                    b1:9f:2d:47:66:54:77:a0:a2:87:b7:15:d8:e6:ab:
                    de:f2:d3:19:9c:a8:63:59:f1:f7:9c:b7:8c:92:67:
                    e9:d2:5f:0a:68:b0:50:2d:2e:10:8c:cc:9f:8f:07:
                    b7:e7:1f:0e:b8:98:7e:08:f8:a8:32:89:ee:3d:b6:
                    13:b0:5f:09:6c:14:83:31:c7:c7:13:a2:5b:52:15:
                    5e:5f:47:56:1c:33:09:51:30:d2:b7:2e:27:72:b9:
                    72:b5:c3:ef:2e:72:c7:42:9f:56:8e:a7:8a:d0:8a:
                    c6:38:68:b6:01:5e:70:c2:74:92:64:6b:54:4e:6b:
                    22:45:44:cb:18:d0:3f:fa:90:f8:c3:08:5c:80:0f:
                    85:d8:d4:e2:8f:88:6f:7a:11:1c:08:a8:02:ad:55:
                    95:94:19:3d:04:2c:99:25:39:67:19:68:ea:e6:3e:
                    e0:15:94:01:41:a7:b4:4e:85:71:4d:64:ec:66:b7:
                    99:b9:13:83:4c:5a:9f:4b:29:ec:26:6d:57:56:41:
                    26:b2:e0:6e:90:c4:c6:1a:96:31:ad:be:ca:03:2b:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                23:77:3E:59:B0:6F:F3:FD:31:0A:C6:17:13:F7:D9:44:D1:21:88:02
            X509v3 Authority Key Identifier: 
                keyid:11:7A:E5:95:B1:FC:45:90:5E:9C:08:F8:B9:31:E4:15:FF:67:DB:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXrllbH8RZBenAj4uTHkFf9n2-8.cer

            Subject Information Access: 
                1.3.6.1.5.5.7.48.11 - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aba7d5-6227-4c02-be82-16067d6d2793/1/I3c-WbBv8_0xCsYXE_fZRNEhiAI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aba7d5-6227-4c02-be82-16067d6d2793/1/EXrllbH8RZBenAj4uTHkFf9n2-8.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0....-X.
    Signature Algorithm: sha256WithRSAEncryption
         1f:63:8e:27:a2:d4:ae:9b:6d:67:4d:9c:95:10:d0:47:c8:e5:
         5e:df:11:f1:3e:d9:18:5c:e6:36:d9:f1:0f:e1:81:7f:be:16:
         e1:8f:fd:63:eb:1d:b2:3f:5b:b7:99:b7:e5:d2:4f:57:b4:d5:
         b7:6e:38:3a:e2:67:9a:02:4f:ed:cf:cc:49:34:d6:85:d4:b1:
         41:7d:cf:e9:17:9a:10:63:4a:10:91:59:c2:4d:3c:df:f7:4f:
         34:b2:ab:99:05:23:f6:1a:fc:41:7c:eb:e5:07:ba:38:16:a8:
         4c:1f:08:51:96:2a:95:64:af:78:6a:5f:a4:c6:ac:ac:a7:65:
         9c:52:0d:57:2e:9b:c0:2f:9c:6b:a8:55:31:0c:11:8b:c7:6d:
         b4:2e:05:ba:b7:64:26:43:ba:90:0a:a7:19:4b:1b:35:eb:04:
         0e:97:ae:18:a8:dd:87:76:5a:d5:f6:98:54:53:95:b5:fc:9b:
         d8:26:a9:48:2c:5a:68:b1:0b:29:cd:14:6b:b9:d7:02:fb:4c:
         df:d6:f4:e5:2c:9e:f6:a1:65:79:2d:32:0c:b8:8d:84:90:4b:
         c3:d3:26:26:db:5e:97:bf:df:fb:8f:08:1d:f8:bb:17:e2:47:
         95:2d:16:6b:56:30:c2:b1:51:bd:1c:de:4c:b2:db:ba:c3:7c:
         70:99:e6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 03:58:36 2021 by LibreSSL & rpki-client.