Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/OR0Wksr2HUOj2TguVgUqMUw1B64.roa (download)

Subject key identifier:   39:1D:16:92:CA:F6:1D:43:A3:D9:38:2E:56:05:2A:31:4C:35:07:AE 
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
asID:                     AS1239
Prefixes:
    1: 45.158.60.0/22 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/OR0Wksr2HUOj2TguVgUqMUw1B64.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119179146 (0x71a878a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
        Validity
            Not Before: Jan  1 08:53:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=391d1692caf61d43a3d9382e56052a314c3507ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:92:70:13:76:a8:38:e8:28:bc:ae:dd:4e:
                    d7:a6:a2:11:d5:7a:15:25:94:ad:71:73:27:18:5e:
                    e2:b2:81:90:2d:f0:6d:c1:d1:2d:97:9a:be:09:36:
                    1d:f2:02:ec:f5:24:fb:13:75:f4:1d:69:84:f7:0b:
                    77:80:26:74:88:84:52:97:67:45:98:1d:64:93:ac:
                    91:e8:54:4c:d6:a3:7b:83:d1:6d:c3:9c:57:57:e9:
                    47:2f:96:fe:e0:19:ba:fd:09:a2:27:c0:7c:b6:fe:
                    8f:ae:fb:a6:8a:6e:c1:b1:6c:2f:fe:fc:d1:ab:0d:
                    99:6f:1e:b6:27:e2:72:5e:c1:f8:fa:ab:68:f3:ec:
                    79:1a:ca:7b:e7:dd:ef:c6:51:9f:2b:80:45:40:ce:
                    64:ee:96:3d:3c:0e:f8:97:d5:6e:33:cf:eb:ee:df:
                    ef:71:55:b3:c4:22:30:c8:18:fe:6e:fc:78:d7:ce:
                    14:84:2e:f5:cf:4e:80:b6:53:21:7f:e8:59:38:23:
                    30:10:f9:77:51:75:3a:00:b9:a0:5d:a1:24:52:c3:
                    a5:52:87:5b:59:2f:47:11:c8:36:eb:b5:bc:69:65:
                    48:8e:c7:73:b2:66:71:d7:a9:10:3c:1c:bf:2d:b4:
                    c2:b5:6f:84:f9:2d:a8:ff:a9:86:4d:bc:ed:06:e8:
                    2e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                39:1D:16:92:CA:F6:1D:43:A3:D9:38:2E:56:05:2A:31:4C:35:07:AE
            X509v3 Authority Key Identifier: 
                keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/OR0Wksr2HUOj2TguVgUqMUw1B64.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:a8:58:a2:4b:b3:e4:b2:a7:8c:b5:eb:f3:9c:26:07:67:eb:
         f5:eb:47:f8:97:2c:f8:bf:70:0b:46:27:35:ad:11:20:93:98:
         46:3c:6f:7d:2e:5a:a3:14:86:4b:6a:4b:5a:69:bb:5f:e3:d1:
         b4:b4:91:e9:45:3a:80:1d:2b:85:19:a5:a9:7f:65:cd:6a:b8:
         6d:91:84:a7:0e:7e:08:87:b5:31:00:e6:9e:f0:1a:6b:1a:24:
         4e:0a:e9:9b:92:59:a4:c7:c6:04:24:d0:b5:91:e1:80:67:4a:
         c4:63:fc:97:50:cf:ad:17:a2:4e:c1:fa:1e:b6:77:6e:47:b0:
         c8:cd:cc:3d:5e:4f:49:ef:08:9f:93:5e:80:3d:cf:81:99:00:
         01:f1:fe:1a:a3:bc:8b:23:30:97:47:22:0b:28:f3:f7:b2:ae:
         da:c1:5a:74:d0:29:64:f2:9b:0b:71:45:05:2a:31:ce:d4:b5:
         a4:62:e1:e1:61:76:0f:87:3d:60:45:96:dc:bf:3c:ed:ae:b5:
         96:c1:40:c3:7e:4f:af:50:d6:d2:28:11:41:32:36:bd:fa:2b:
         e5:4f:98:d1:3a:2e:b1:68:b7:03:05:f3:54:ae:7d:aa:3f:bc:
         b7:f8:58:9a:2b:04:10:35:44:e1:81:41:a3:72:b8:51:ac:bc:
         a4:2c:f9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 13:16:24 2022 by LibreSSL & rpki-client.