Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/ORja91isA3qHoRgL5wcyPehKiJ4.roa (download)

Subject key identifier:   39:18:DA:F7:58:AC:03:7A:87:A1:18:0B:E7:07:32:3D:E8:4A:88:9E 
Authority key identifier: 09:48:95:A0:71:A3:AD:D9:DF:3E:C8:4E:64:54:7A:FD:CA:6B:62:A3
asID:                     AS2013333
Prefixes:
    1: 45.11.116.0/22 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/ORja91isA3qHoRgL5wcyPehKiJ4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92217706 (0x57f216a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094895a071a3add9df3ec84e64547afdca6b62a3
        Validity
            Not Before: Jan  1 06:48:38 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3918daf758ac037a87a1180be707323de84a889e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f3:5d:38:bc:35:9e:33:55:42:fe:23:ea:d0:
                    a7:c8:73:73:1d:77:42:c8:03:88:77:51:b2:06:4e:
                    5f:57:4b:71:77:ff:ce:d5:a6:9c:fc:1e:b7:16:f5:
                    fd:58:1e:f1:17:4c:62:fe:b0:53:9e:9e:b5:76:d8:
                    76:98:9f:2d:0a:f9:b3:3b:f5:0c:fb:ff:3d:46:94:
                    52:3c:ef:df:77:b4:09:00:49:28:af:8a:57:ba:c2:
                    df:1b:35:60:e1:33:78:54:0f:e4:fc:7a:8a:a8:d5:
                    9a:28:9f:9a:83:9b:f4:97:66:f7:23:be:8d:09:13:
                    cd:c2:6f:9e:47:a4:03:fc:df:aa:68:8c:73:51:ac:
                    da:cc:09:4a:3a:1d:ab:75:ca:b8:09:02:6e:c0:d3:
                    70:cb:a8:89:40:42:90:b0:62:27:0d:31:4f:ab:00:
                    86:b9:e4:02:72:5c:48:51:28:01:52:1f:5f:a3:27:
                    61:0d:6a:2a:51:fc:68:8d:1c:13:cc:14:3d:a2:a4:
                    d2:10:05:1b:f5:88:53:f2:25:3f:16:ee:31:7c:ee:
                    6e:3e:52:96:b8:7a:b8:e0:45:9b:f0:90:50:df:7e:
                    cb:96:55:2f:9e:73:11:2b:8c:ca:a6:53:83:6d:85:
                    85:bf:94:e8:a3:03:24:ac:64:19:57:8d:e4:e2:19:
                    f5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                39:18:DA:F7:58:AC:03:7A:87:A1:18:0B:E7:07:32:3D:E8:4A:88:9E
            X509v3 Authority Key Identifier: 
                keyid:09:48:95:A0:71:A3:AD:D9:DF:3E:C8:4E:64:54:7A:FD:CA:6B:62:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUiVoHGjrdnfPshOZFR6_cprYqM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/ORja91isA3qHoRgL5wcyPehKiJ4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/CUiVoHGjrdnfPshOZFR6_cprYqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:5b:3c:2c:8c:f1:d8:22:a5:03:bf:e7:c2:d0:b5:16:f8:34:
         95:91:a9:bd:e7:b4:8c:e6:a9:42:8a:69:23:3b:da:8a:f7:d3:
         c2:af:d3:35:11:85:2a:7f:96:fd:54:84:5e:b3:92:cc:2e:d8:
         81:dc:2a:fa:20:bd:cb:b9:fe:0e:c4:af:7d:c5:66:55:bc:36:
         41:78:86:49:7e:02:20:3d:57:00:42:b8:03:aa:5a:fe:9f:7d:
         3e:65:cc:18:a2:bf:43:2f:b1:16:5d:4a:b5:61:21:0c:94:d8:
         03:64:16:a2:50:25:24:75:d6:9a:08:5e:13:3a:5e:ab:4a:43:
         09:bc:d5:6f:fb:de:25:a8:60:7b:4f:f4:a0:a9:26:39:e9:0b:
         65:42:cb:29:99:3f:8f:26:f2:61:af:c4:ee:78:b6:a7:90:c1:
         5c:3d:e2:65:1f:43:63:c3:2e:06:8e:4c:ad:ef:87:b3:08:66:
         21:a3:05:47:1e:0a:bf:e6:7d:e5:97:9c:d2:01:6e:eb:ef:7d:
         35:d9:75:41:b4:38:0f:64:05:1c:c4:52:7a:8a:6b:37:8f:e3:
         1b:11:07:13:30:7a:6d:45:16:d9:48:84:ac:c8:47:d7:40:31:
         10:d3:d6:ef:0e:07:92:47:7f:6d:c4:ce:f0:e6:87:aa:b3:1a:
         f5:3a:2e:52
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBX8hajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
OTQ4OTVhMDcxYTNhZGQ5ZGYzZWM4NGU2NDU0N2FmZGNhNmI2MmEzMB4XDTIxMDEw
MTA2NDgzOFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzkxOGRhZjc1OGFj
MDM3YTg3YTExODBiZTcwNzMyM2RlODRhODg5ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJvzXTi8NZ4zVUL+I+rQp8hzcx13QsgDiHdRsgZOX1dLcXf/
ztWmnPwetxb1/Vge8RdMYv6wU56etXbYdpifLQr5szv1DPv/PUaUUjzv33e0CQBJ
KK+KV7rC3xs1YOEzeFQP5Px6iqjVmiifmoOb9Jdm9yO+jQkTzcJvnkekA/zfqmiM
c1Gs2swJSjodq3XKuAkCbsDTcMuoiUBCkLBiJw0xT6sAhrnkAnJcSFEoAVIfX6Mn
YQ1qKlH8aI0cE8wUPaKk0hAFG/WIU/IlPxbuMXzubj5Slrh6uOBFm/CQUN9+y5ZV
L55zESuMyqZTg22Fhb+U6KMDJKxkGVeN5OIZ9Z8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ5GNr3WKwDeoehGAvnBzI96EqInjAfBgNVHSMEGDAWgBQJSJWgcaOt2d8+
yE5kVHr9ymtiozAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NVaVZvSEdqcmRuZlBzaE9aRlI2X2NwcllxTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDUvNWNmMzA3LTY1MGEtNDM4NC1hNmI0LTU0NWQzMDY4YzY2Ni8x
L09SamE5MWlzQTNxSG9SZ0w1d2N5UGVoS2lKNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUv
NWNmMzA3LTY1MGEtNDM4NC1hNmI0LTU0NWQzMDY4YzY2Ni8xL0NVaVZvSEdqcmRu
ZlBzaE9aRlI2X2NwcllxTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0LdDANBgkqhkiG9w0BAQsFAAOC
AQEASFs8LIzx2CKlA7/nwtC1Fvg0lZGpvee0jOapQoppIzvaivfTwq/TNRGFKn+W
/VSEXrOSzC7Ygdwq+iC9y7n+DsSvfcVmVbw2QXiGSX4CID1XAEK4A6pa/p99PmXM
GKK/Qy+xFl1KtWEhDJTYA2QWolAlJHXWmgheEzpeq0pDCbzVb/veJahge0/0oKkm
OekLZULLKZk/jybyYa/E7ni2p5DBXD3iZR9DY8MuBo5Mre+HswhmIaMFRx4Kv+Z9
5Zec0gFu6+99Ndl1QbQ4D2QFHMRSeoprN4/jGxEHEzB6bUUW2UiErMhH10AxENPW
7w4Hkkd/bcTO8OaHqrMa9TouUg==
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:04:00 2021 by LibreSSL & rpki-client.