Route Origin Authorization
Location: rpki.ripe.net/repository/DEFAULT/0f/e27b95-1a63-4459-97ad-06a25c5a59e2/1/D4dFFy2qoKS_QFh_Nd30mRGRF5Y.roa (download)

Subject key identifier:   0F:87:45:17:2D:AA:A0:A4:BF:40:58:7F:35:DD:F4:99:11:91:17:96 
Authority key identifier: 63:D9:B8:44:09:9F:04:64:5C:EB:FA:80:B4:51:BE:8E:2C:62:07:87
asID:                     AS26636
Prefixes:
    1: 45.10.3.0/24 (max: 32)
    2: 45.10.2.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/0f/e27b95-1a63-4459-97ad-06a25c5a59e2/1/D4dFFy2qoKS_QFh_Nd30mRGRF5Y.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95011630 (0x5a9c32e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d9b844099f04645cebfa80b451be8e2c620787
        Validity
            Not Before: Jan  1 04:44:18 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0f8745172daaa0a4bf40587f35ddf49911911796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:87:c5:bb:c5:5b:99:a3:91:42:bd:fc:b4:
                    d2:11:51:0a:64:54:ae:f2:1a:9e:de:b0:b7:9b:43:
                    52:76:90:dc:3e:ae:bc:85:64:04:09:6f:83:08:bf:
                    5f:31:11:44:72:06:08:b1:15:42:df:5d:98:26:09:
                    81:df:55:07:42:de:e7:2f:b8:2b:1a:05:85:a1:ef:
                    01:ee:3b:ef:d5:82:55:fb:32:e0:80:80:da:17:b8:
                    88:5f:a1:33:25:63:38:14:30:07:87:c5:06:08:09:
                    28:72:46:79:19:d2:85:e7:21:f9:41:77:3c:b2:61:
                    46:b8:c0:13:24:e5:ff:e5:bf:31:ac:e1:c8:29:78:
                    b0:bd:1b:8d:47:64:6f:a7:09:e0:89:c0:9b:77:08:
                    eb:51:17:77:68:95:74:31:40:a5:6c:04:d0:1b:4a:
                    ea:95:b2:3c:dc:f6:64:73:ff:76:62:10:3d:4b:30:
                    99:a6:cb:17:20:4c:f7:00:36:37:ed:16:16:bd:1c:
                    75:b1:22:f7:1c:94:ae:a8:00:28:c9:cc:3e:40:e0:
                    f4:a6:32:12:6f:ae:ca:1f:dc:21:7d:e0:ce:cd:1b:
                    f6:ee:b1:8b:d9:9c:63:de:38:10:69:75:c5:e9:71:
                    2d:9e:12:14:e1:56:13:a0:61:bc:fb:66:32:b7:e4:
                    33:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0F:87:45:17:2D:AA:A0:A4:BF:40:58:7F:35:DD:F4:99:11:91:17:96
            X509v3 Authority Key Identifier: 
                keyid:63:D9:B8:44:09:9F:04:64:5C:EB:FA:80:B4:51:BE:8E:2C:62:07:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9m4RAmfBGRc6_qAtFG-jixiB4c.cer

            Subject Information Access: 
                1.3.6.1.5.5.7.48.11 - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e27b95-1a63-4459-97ad-06a25c5a59e2/1/D4dFFy2qoKS_QFh_Nd30mRGRF5Y.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e27b95-1a63-4459-97ad-06a25c5a59e2/1/Y9m4RAmfBGRc6_qAtFG-jixiB4c.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0....-
.
    Signature Algorithm: sha256WithRSAEncryption
         4c:1b:20:07:fd:86:13:71:bb:d8:85:d4:18:9c:95:fe:cd:0f:
         a5:50:8e:e8:33:5b:5d:ff:7c:a4:b9:c9:02:b3:6d:29:e5:e0:
         80:ec:d0:d9:22:5c:e3:8f:9a:7b:be:74:68:1c:92:9b:cb:42:
         e2:17:ba:bf:ba:ef:c7:68:a2:30:58:7d:38:46:1c:06:86:dc:
         b9:c4:b2:c3:d1:a8:9c:80:d3:af:73:d8:2d:77:c2:cd:3a:b1:
         05:d8:51:14:74:dd:29:09:fc:92:b6:6e:d4:50:4d:82:3b:70:
         01:ae:26:7b:71:33:cb:41:aa:2a:d9:0b:9f:eb:de:37:0b:a6:
         b7:9b:b4:3d:cc:a4:c0:76:e7:d9:c2:69:b3:23:a4:50:6f:df:
         dc:9d:c1:43:93:e5:a6:98:cd:50:c4:98:16:ce:fd:e9:d7:c7:
         dd:89:5d:c8:c0:3d:d4:99:13:56:8d:46:48:1a:9f:d2:88:11:
         dc:19:bb:e6:b0:94:85:5a:87:10:6c:93:09:f8:4b:45:8c:5d:
         ce:f2:30:2b:e5:e9:65:bb:ee:a6:0e:6e:7f:82:48:84:a6:16:
         21:32:b9:88:f7:18:61:81:b7:aa:64:5f:c7:de:06:39:ee:e7:
         23:f5:ef:d8:69:60:5e:8f:e1:ca:74:b0:4a:c8:61:b9:62:59:
         e4:fb:65:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 03:59:10 2021 by LibreSSL & rpki-client.