Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/adPRzTj-91qe6dCfwpRqEelLMT8.roa (download)

Subject key identifier:   69:D3:D1:CD:38:FE:F7:5A:9E:E9:D0:9F:C2:94:6A:11:E9:4B:31:3F 
Authority key identifier: F8:F3:93:FC:27:25:D2:46:0B:6A:2B:98:17:46:D4:76:34:0B:E0:6D
asID:                     AS1239
Prefixes:
    1: 45.94.112.0/22 maxlen: 22

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/adPRzTj-91qe6dCfwpRqEelLMT8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123378861 (0x75a9cad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f393fc2725d2460b6a2b981746d476340be06d
        Validity
            Not Before: Jan  1 01:03:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=69d3d1cd38fef75a9ee9d09fc2946a11e94b313f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:4d:10:ca:7c:64:50:7b:a8:76:92:99:77:
                    45:78:46:2f:6d:f6:70:fa:77:3e:bc:dc:9d:15:50:
                    a5:a4:b5:3e:b3:4b:ba:5b:ff:77:cb:93:92:e8:4f:
                    dc:0c:7c:57:cb:5d:11:c6:73:dd:96:20:a6:b7:f0:
                    b2:bf:27:5d:b1:95:56:42:2a:a1:70:aa:ce:10:9d:
                    65:8d:30:37:54:d1:e8:bb:a6:9d:3f:31:68:75:4e:
                    e9:8b:4a:b6:fc:89:0c:7f:ff:ee:cc:08:21:bf:56:
                    59:59:43:2a:fd:77:1d:f4:32:f7:c0:0b:e5:06:be:
                    5d:40:b4:fc:71:d5:f7:b1:fd:bd:9a:93:7f:4f:9e:
                    42:7d:b8:2c:b3:6e:73:e9:e4:07:27:9c:ef:e3:2b:
                    07:09:f9:55:16:ed:eb:ac:aa:85:a0:f1:8a:5e:ea:
                    bf:79:6b:b5:8c:a7:38:02:2b:3b:39:eb:a1:7f:7c:
                    ad:9f:50:c5:24:b9:bd:6c:dd:d2:6a:cc:46:3e:58:
                    16:72:e4:45:d9:76:b0:55:9f:69:90:29:c5:05:20:
                    fe:91:3d:8c:f7:d9:50:5a:ad:49:de:60:83:7d:24:
                    14:31:40:7b:a0:93:8f:49:a5:36:e2:0d:9d:f4:df:
                    3e:65:3f:9a:51:c1:02:10:6a:1a:9d:3b:e2:61:38:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                69:D3:D1:CD:38:FE:F7:5A:9E:E9:D0:9F:C2:94:6A:11:E9:4B:31:3F
            X509v3 Authority Key Identifier: 
                keyid:F8:F3:93:FC:27:25:D2:46:0B:6A:2B:98:17:46:D4:76:34:0B:E0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/adPRzTj-91qe6dCfwpRqEelLMT8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:e4:c3:b4:30:ff:6d:99:d8:ad:d7:61:ff:6c:eb:15:61:c9:
         b5:4b:42:42:94:a9:3e:15:72:23:d9:33:2c:fb:2f:41:35:07:
         2b:23:0d:d7:45:98:5a:f8:22:e4:9c:b3:45:86:ea:5a:50:5c:
         3d:df:a1:7f:87:61:68:9a:43:f8:2a:82:94:85:75:5b:4c:83:
         9d:f2:a3:f1:03:3d:b2:45:ea:9c:37:50:87:ad:73:cd:14:6c:
         e3:9b:5e:cf:e0:8d:be:99:65:5f:47:2c:0a:39:fc:a9:03:9f:
         49:75:f0:2a:68:13:c3:6e:26:d2:53:01:fe:67:80:f4:4c:3a:
         21:2a:9b:55:99:80:14:fd:57:28:05:94:4c:03:53:84:25:21:
         fa:80:29:39:79:87:01:b1:97:39:6c:99:d2:cb:cd:34:3f:0d:
         68:0c:02:7c:6b:35:ab:fd:80:5e:2d:7d:ca:14:b2:eb:bb:d8:
         3b:e7:fa:dc:ca:a6:5a:5e:2c:21:b7:b9:33:69:c2:be:90:bc:
         a5:ae:d4:92:05:89:04:f5:ab:23:71:42:9a:d4:4d:86:df:29:
         d5:d9:91:b6:e1:fd:c9:5d:33:0b:e1:c4:15:59:79:c9:d5:39:
         06:09:5a:21:90:c2:66:37:db:d5:4e:72:26:3f:b3:ff:6b:0d:
         f3:82:95:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 13:06:16 2022 by LibreSSL & rpki-client.