Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/qPcfW9uE2OZrWpTz3RuXUkwA7wY.roa (download)

Subject key identifier:   A8:F7:1F:5B:DB:84:D8:E6:6B:5A:94:F3:DD:1B:97:52:4C:00:EF:06 
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
asID:                     AS399641
Prefixes:
    1: 213.170.145.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/qPcfW9uE2OZrWpTz3RuXUkwA7wY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377999884 (0x1687d20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
        Validity
            Not Before: Jan  1 06:01:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a8f71f5bdb84d8e66b5a94f3dd1b97524c00ef06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:09:cb:66:22:29:64:f8:76:b7:64:6a:37:
                    3f:ae:d3:18:0c:56:f6:9b:49:13:07:c8:71:97:1b:
                    31:37:18:a0:22:94:30:ad:20:d3:d9:69:eb:32:02:
                    5d:9a:1a:29:e9:30:a1:68:2f:56:f8:f9:b3:d4:db:
                    70:d3:1a:bd:14:8d:fe:61:64:9b:11:bc:9f:95:1e:
                    ee:ed:4e:18:2b:95:35:b4:64:86:4e:e9:68:9a:9d:
                    cf:fe:9d:99:e6:87:be:14:10:66:19:4c:ac:e6:15:
                    bf:b5:8d:33:ca:ae:15:98:32:6d:bd:96:05:7c:f7:
                    95:04:53:3b:24:01:10:a6:0c:9f:bb:b2:e0:54:f7:
                    1a:76:30:3e:a0:54:70:2c:c9:7e:08:54:1c:12:ce:
                    2c:7f:56:5a:65:c5:88:71:65:3e:c7:08:fc:be:ac:
                    98:ec:87:96:c6:6c:2e:0a:c2:1f:3d:8a:fd:a1:86:
                    80:5a:64:cf:75:c2:e9:44:10:e3:7b:35:b7:db:71:
                    c6:67:45:27:e5:ca:06:30:93:34:96:9a:6d:8f:91:
                    fe:f5:c4:67:1c:ba:31:37:63:e5:3e:3b:bf:44:3b:
                    37:b2:1b:05:53:d4:5c:64:e7:54:92:74:63:20:09:
                    42:6a:a8:5c:11:84:ba:7d:74:64:90:bf:60:5d:ae:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A8:F7:1F:5B:DB:84:D8:E6:6B:5A:94:F3:DD:1B:97:52:4C:00:EF:06
            X509v3 Authority Key Identifier: 
                keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/qPcfW9uE2OZrWpTz3RuXUkwA7wY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.170.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:75:7d:0d:f2:51:4d:ee:3d:52:aa:3f:b3:4e:af:5f:e1:4f:
         d3:69:dc:a6:30:9f:2d:19:9b:5a:f0:04:b6:9a:fd:1e:97:19:
         e4:62:45:73:5d:b5:0a:cd:bc:c9:04:d7:01:c2:78:56:2b:7d:
         3a:17:dd:a4:8e:5a:0b:bf:53:73:c0:48:ed:82:3b:1a:89:a7:
         c8:7d:e2:43:07:25:f1:ef:7b:85:2a:59:07:ec:39:55:69:4e:
         5d:c7:1f:48:f8:f7:4e:94:d7:34:60:dd:6f:74:50:55:7c:16:
         66:93:93:06:6f:f8:48:2f:c9:0a:ea:ab:1a:05:bc:88:df:23:
         78:85:b9:8e:bc:54:2d:00:ef:5f:b2:66:36:8f:69:46:33:c3:
         0f:6c:c7:26:0e:f1:c4:0b:b6:6f:28:b0:86:88:3a:54:47:83:
         0a:cf:d9:4e:48:1f:65:2b:fe:a3:af:74:07:03:5b:7d:b9:41:
         1f:b6:a4:01:0b:0a:5e:32:d8:5f:2f:32:59:88:e1:57:6d:72:
         d6:37:57:ca:9b:72:82:a1:42:42:8e:6c:3e:13:d2:4b:55:53:
         58:00:b7:f4:d8:14:49:7d:a9:ff:4c:82:52:af:83:1f:ae:90:
         50:a2:5c:40:c1:fe:99:61:d8:c6:c0:cd:26:b7:3d:65:58:56:
         4f:5f:c7:e2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFofSDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTUxNjA1YjY3NWVjZTRlMGZjZTcxNzVhZTMxYTkzZmE4MjcyYmE2MB4XDTIyMDEw
MTA2MDE1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYThmNzFmNWJkYjg0
ZDhlNjZiNWE5NGYzZGQxYjk3NTI0YzAwZWYwNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALRzCctmIilk+Ha3ZGo3P67TGAxW9ptJEwfIcZcbMTcYoCKU
MK0g09lp6zICXZoaKekwoWgvVvj5s9TbcNMavRSN/mFkmxG8n5Ue7u1OGCuVNbRk
hk7paJqdz/6dmeaHvhQQZhlMrOYVv7WNM8quFZgybb2WBXz3lQRTOyQBEKYMn7uy
4FT3GnYwPqBUcCzJfghUHBLOLH9WWmXFiHFlPscI/L6smOyHlsZsLgrCHz2K/aGG
gFpkz3XC6UQQ43s1t9txxmdFJ+XKBjCTNJaabY+R/vXEZxy6MTdj5T47v0Q7N7Ib
BVPUXGTnVJJ0YyAJQmqoXBGEun10ZJC/YF2uXFkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSo9x9b24TY5mtalPPdG5dSTADvBjAfBgNVHSMEGDAWgBQFUWBbZ17OTg/O
cXWuMak/qCcrpjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JWRmdXMmRlems0UHpuRjFyakdwUDZnbks2WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvMjhlYTQ1LTdkMzAtNDZkZi04ZjJhLTA3NzlmNDhlY2VhMC8x
L3FQY2ZXOXVFMk9acldwVHozUnVYVWt3QTd3WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
MjhlYTQ1LTdkMzAtNDZkZi04ZjJhLTA3NzlmNDhlY2VhMC8xL0JWRmdXMmRlems0
UHpuRjFyakdwUDZnbks2WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANWqkTANBgkqhkiG9w0BAQsFAAOC
AQEARHV9DfJRTe49Uqo/s06vX+FP02ncpjCfLRmbWvAEtpr9HpcZ5GJFc121Cs28
yQTXAcJ4Vit9OhfdpI5aC79Tc8BI7YI7GomnyH3iQwcl8e97hSpZB+w5VWlOXccf
SPj3TpTXNGDdb3RQVXwWZpOTBm/4SC/JCuqrGgW8iN8jeIW5jrxULQDvX7JmNo9p
RjPDD2zHJg7xxAu2byiwhog6VEeDCs/ZTkgfZSv+o690BwNbfblBH7akAQsKXjLY
Xy8yWYjhV21y1jdXyptygqFCQo5sPhPSS1VTWAC39NgUSX2p/0yCUq+DH66QUKJc
QMH+mWHYxsDNJrc9ZVhWT1/H4g==
-----END CERTIFICATE-----

Generated at Sun Jan 30 12:31:39 2022 by LibreSSL & rpki-client.