Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/_t02EudLDTMhc7kLSpLMImYrCjg.roa (download)

Subject key identifier:   FE:DD:36:12:E7:4B:0D:33:21:73:B9:0B:4A:92:CC:22:66:2B:0A:38 
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
asID:                     AS1239
Prefixes:
    1: 45.153.90.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/_t02EudLDTMhc7kLSpLMImYrCjg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88283333 (0x54318c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
        Validity
            Not Before: May 19 20:07:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fedd3612e74b0d332173b90b4a92cc22662b0a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:be:71:1a:94:d4:a3:fd:85:13:c7:e9:ec:13:
                    ae:f3:c0:6d:21:29:79:3e:10:03:20:af:27:53:d8:
                    41:e6:21:a9:de:b2:47:08:29:a7:d7:e4:50:87:b5:
                    22:0f:51:d7:61:a1:1d:40:6d:d0:c7:e3:02:7c:8b:
                    a6:e7:78:5c:af:fb:69:9e:d7:f8:6e:a3:09:55:c0:
                    0b:14:10:ab:3c:74:5e:bb:14:27:21:55:ad:8e:42:
                    3a:0a:79:23:7f:fa:58:25:d9:00:a7:b4:eb:f8:c3:
                    49:f6:bc:b4:dc:48:95:0f:da:d6:bb:04:bd:76:8a:
                    84:1c:6b:dd:f8:d1:b8:05:4f:ec:45:e8:2e:66:08:
                    0e:78:5f:56:a1:51:1f:d7:8a:ea:c3:3b:d9:6f:1d:
                    d9:4a:10:12:f2:9f:38:b0:1c:c3:a2:d3:c5:5e:e3:
                    37:1c:04:52:02:af:a2:bf:99:1e:19:73:25:ef:b9:
                    92:5b:29:b2:e1:e6:74:ae:5c:68:90:9d:2d:65:90:
                    d8:50:9d:e0:a6:52:c7:71:ec:0b:c1:93:2c:27:03:
                    8a:c3:eb:0f:f9:47:6e:df:28:5f:a7:a9:48:39:7e:
                    d6:91:e3:a7:68:45:da:2a:44:84:e1:f5:df:ef:e8:
                    29:2b:a3:19:18:c0:f5:da:af:ec:25:ce:c4:18:c5:
                    4a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FE:DD:36:12:E7:4B:0D:33:21:73:B9:0B:4A:92:CC:22:66:2B:0A:38
            X509v3 Authority Key Identifier: 
                keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/_t02EudLDTMhc7kLSpLMImYrCjg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:98:41:27:16:bf:22:72:98:f4:9c:4d:72:98:68:79:4f:5e:
         92:5c:57:25:f2:86:f6:e8:a2:09:3e:37:b5:cb:15:45:24:30:
         cc:2f:b9:78:89:b9:16:7e:ce:8e:5e:3a:6c:db:ac:18:b5:db:
         d6:df:9f:ab:83:f7:67:49:f0:ed:41:a4:47:77:6e:ab:83:5e:
         4c:6d:b7:30:62:54:18:d2:0f:2a:09:48:f0:15:ae:c2:62:e0:
         6d:8b:6e:d5:89:f1:8e:e0:3b:7f:26:d4:d8:84:9d:d6:32:73:
         d4:13:88:6f:54:f6:c5:dc:82:74:92:43:45:de:88:1c:8c:2a:
         5f:59:8d:9b:28:8c:d4:f0:e5:42:98:ca:23:13:37:6b:30:af:
         32:f7:65:f5:0f:9a:c5:4f:8b:26:f0:68:d1:5e:07:d5:65:e8:
         28:3b:ef:72:4c:f3:03:d4:a8:90:7f:8e:09:c5:b8:0a:55:e2:
         be:b4:53:f7:1a:ac:3f:a7:f6:c6:cf:3e:af:fb:af:1e:f6:b5:
         f0:26:a3:97:18:44:52:af:25:33:54:88:0d:9a:11:80:32:d3:
         ff:af:3b:c6:5e:d9:28:ce:9b:dc:5b:ea:1e:da:f4:fb:7e:84:
         66:9d:cd:dd:48:a9:ec:b5:6d:9e:6f:4d:bf:62:ae:d6:ec:07:
         42:33:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri May 20 01:09:04 2022 by LibreSSL & rpki-client.