Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VrWK3OMdDf33SlTzOB1W7Kz4obk.roa (download)

Subject key identifier:   56:B5:8A:DC:E3:1D:0D:FD:F7:4A:54:F3:38:1D:56:EC:AC:F8:A1:B9 
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
asID:                     AS400040
Prefixes:
    1: 185.194.28.0/24 maxlen: 24
    2: 45.8.20.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VrWK3OMdDf33SlTzOB1W7Kz4obk.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129719416 (0x7bb5c78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: May  2 09:40:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=56b58adce31d0dfdf74a54f3381d56ecacf8a1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7f:ce:65:7c:26:39:08:18:86:fb:66:ea:8f:
                    45:4f:a8:b7:08:e6:f9:bd:98:da:92:5d:40:4d:11:
                    4d:4b:64:77:e8:24:99:c9:f7:40:29:9a:c9:a2:3e:
                    18:1c:8c:40:3e:6e:54:dc:2e:72:71:ad:e2:1b:b6:
                    a9:4e:dc:a8:d9:11:54:ae:87:a0:2f:f1:4d:32:00:
                    44:c3:40:79:a3:46:a0:63:b1:f0:ca:37:35:39:29:
                    b2:79:2c:39:9d:96:59:99:f1:47:ba:7e:89:e1:0e:
                    25:cd:02:82:90:74:7b:e9:2a:a9:e5:7c:74:18:85:
                    f9:cf:81:c3:4d:3f:18:ab:c2:49:18:44:7c:e4:cf:
                    16:96:18:0c:cb:ef:13:6a:e8:e7:14:11:80:5a:ea:
                    cb:2a:e6:1c:1b:c4:de:47:95:4e:1e:db:f9:ee:c7:
                    10:91:10:1d:11:c6:c4:bd:fb:78:f9:97:ab:7f:27:
                    b2:7e:8b:ce:04:14:4a:57:be:68:21:81:a9:d0:fe:
                    fc:bf:b0:b8:02:3a:54:2a:e9:6d:19:68:5d:70:89:
                    53:bc:7a:43:9e:e8:57:23:70:de:be:e6:70:85:bb:
                    ed:82:ee:96:7a:bc:70:67:de:28:4e:df:d2:c3:f0:
                    39:b4:2a:f7:f2:e6:42:04:27:f8:e7:f5:2d:a8:81:
                    98:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                56:B5:8A:DC:E3:1D:0D:FD:F7:4A:54:F3:38:1D:56:EC:AC:F8:A1:B9
            X509v3 Authority Key Identifier: 
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VrWK3OMdDf33SlTzOB1W7Kz4obk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.20.0/24
                  185.194.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:a2:20:0b:aa:7d:a2:28:76:75:d4:50:1b:ea:2c:ab:08:47:
         29:77:c5:bb:82:40:b9:fd:61:39:d8:8e:58:24:fa:56:87:12:
         1e:7d:c9:a0:31:c6:76:07:7e:54:77:2b:5e:fd:ee:1c:41:b3:
         95:d7:2a:5b:60:b5:a3:da:c2:d6:98:9c:99:9b:20:c7:ba:92:
         e2:80:8e:5d:7d:08:50:2e:ab:39:f3:63:09:d3:8e:8f:e5:9e:
         aa:cf:fe:6b:b3:23:53:85:de:74:b3:9a:b4:af:cd:86:ed:e9:
         60:7d:74:0c:17:5d:9f:d8:e7:fd:be:c7:ae:13:84:8e:19:9d:
         c3:5e:bb:7d:aa:e8:c2:b1:35:b7:bb:5f:52:4c:52:cb:8f:ca:
         9e:25:53:5e:79:cd:7b:ff:6c:d9:78:01:1b:27:0d:96:6a:ab:
         c0:2f:2e:2f:2f:c7:91:a5:e0:89:09:71:08:d7:ca:ab:92:88:
         65:3d:48:bb:3a:69:38:9a:ae:53:49:66:28:2c:5c:b8:50:46:
         89:e6:fe:aa:fa:3d:29:b6:f1:c3:4c:5f:7d:03:cf:26:7d:d9:
         2d:78:b9:28:d1:69:da:d3:92:b0:43:82:c5:41:e4:7b:35:2a:
         b7:81:b6:df:62:c4:7a:d5:7e:de:85:0a:d9:7f:0b:f8:bc:1a:
         12:e6:17:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon May 2 14:29:59 2022 by LibreSSL & rpki-client.