Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/bEz4dNevneCk-XZbHXHY2BkeTjI.roa (download)

Subject key identifier:   6C:4C:F8:74:D7:AF:9D:E0:A4:F9:76:5B:1D:71:D8:D8:19:1E:4E:32 
Authority key identifier: 09:48:95:A0:71:A3:AD:D9:DF:3E:C8:4E:64:54:7A:FD:CA:6B:62:A3
asID:                     AS2013333
Prefixes:
    1: 45.11.116.0/22 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/bEz4dNevneCk-XZbHXHY2BkeTjI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145277500 (0x8a8c23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094895a071a3add9df3ec84e64547afdca6b62a3
        Validity
            Not Before: Jan  1 06:06:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6c4cf874d7af9de0a4f9765b1d71d8d8191e4e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:9b:29:eb:2f:62:78:d7:fc:c9:e4:10:42:
                    0c:41:9b:8d:01:f8:40:ed:ea:5f:78:02:44:9c:57:
                    89:d4:b5:31:a6:c6:45:6b:ba:60:a7:4e:73:96:5b:
                    c4:60:84:4d:a5:5c:6b:28:5d:4f:78:02:24:e6:25:
                    b4:f9:43:90:fb:ad:c9:ed:cc:0a:e5:3a:24:ab:7d:
                    de:bc:15:fd:b7:50:22:2b:f8:a0:59:65:0c:b1:ba:
                    67:41:dc:49:80:8a:d2:40:23:f7:75:30:06:96:5f:
                    c4:49:02:ad:73:d9:fa:fa:c4:f6:86:c4:cc:6e:20:
                    21:5f:19:98:e1:84:9e:54:21:1e:b1:f4:4b:ee:cc:
                    be:6a:60:db:cd:8d:60:15:00:d6:8f:61:9f:08:5f:
                    0a:ab:1b:e8:38:a1:c3:45:60:5d:f1:bc:18:ed:13:
                    72:bb:fe:02:fe:a0:69:85:72:83:87:fe:78:d7:de:
                    2c:d3:f8:07:2f:5f:73:49:ab:86:66:bc:9d:e5:4f:
                    7c:a1:87:bd:51:3c:6a:4d:ba:df:93:5f:eb:83:e1:
                    fa:77:b6:07:b4:1b:52:b6:82:86:ef:1c:c5:41:1c:
                    e6:45:6e:90:f5:23:11:f9:d5:0f:3e:a9:ae:65:3a:
                    2e:85:aa:cd:95:4e:2f:a0:c5:5b:6b:75:d1:24:d0:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6C:4C:F8:74:D7:AF:9D:E0:A4:F9:76:5B:1D:71:D8:D8:19:1E:4E:32
            X509v3 Authority Key Identifier: 
                keyid:09:48:95:A0:71:A3:AD:D9:DF:3E:C8:4E:64:54:7A:FD:CA:6B:62:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUiVoHGjrdnfPshOZFR6_cprYqM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/bEz4dNevneCk-XZbHXHY2BkeTjI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/CUiVoHGjrdnfPshOZFR6_cprYqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:e7:d0:d1:26:2f:b7:35:f9:ca:a9:30:34:94:d1:02:7e:e5:
         9e:77:a3:02:92:e1:7a:bd:e8:90:34:f2:df:c8:7b:e0:62:d0:
         4b:8c:fe:55:11:dc:65:3a:8e:a9:9d:70:47:df:9e:ad:48:fc:
         1b:87:b1:38:87:ab:ac:3a:a2:fd:ee:91:7b:ad:dd:e5:31:0c:
         9e:5b:d7:17:f6:bd:9a:e4:49:af:77:f0:fe:16:59:c6:4b:95:
         20:e2:cd:38:37:0c:10:19:06:52:96:97:37:31:45:fc:fa:2e:
         71:3d:77:e4:95:59:55:6e:36:49:75:70:27:33:21:ff:2d:cf:
         a6:ad:5c:a2:bc:7a:d1:54:3f:e6:83:e0:88:66:de:68:58:25:
         6d:97:db:95:9d:3e:98:7d:1c:34:b8:d7:65:b7:4a:81:73:1c:
         22:78:3b:08:c3:10:f1:36:38:bf:c1:62:99:e8:38:af:67:27:
         e9:3c:18:a5:2e:f7:85:84:33:33:cf:03:37:81:85:7f:49:46:
         6d:de:47:df:ff:50:0a:63:11:7f:4c:34:74:7b:7c:c2:7f:d8:
         b7:7d:a7:e5:bd:4c:0b:c9:9d:63:a1:d3:3d:3c:01:76:b7:41:
         d0:da:f8:94:92:24:64:7c:49:15:6b:ef:50:22:7f:33:3f:4c:
         46:7c:a1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 12:28:59 2022 by LibreSSL & rpki-client.