Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/05/a38552-d76d-4924-97a6-5a81e6a08ddd/1/02odm7s3B-VcLkI9FV76i_0ge30.roa (download)

Subject key identifier:   D3:6A:1D:9B:BB:37:07:E5:5C:2E:42:3D:15:5E:FA:8B:FD:20:7B:7D 
Authority key identifier: 23:26:3B:CF:9F:F7:2A:AA:AA:2B:ED:90:DB:92:AC:6B:8A:1C:14:A1
asID:                     AS0
Prefixes:
    1: 45.15.52.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/05/a38552-d76d-4924-97a6-5a81e6a08ddd/1/02odm7s3B-VcLkI9FV76i_0ge30.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9459898 (0x9058ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23263bcf9ff72aaaaa2bed90db92ac6b8a1c14a1
        Validity
            Not Before: Jan  1 02:33:36 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d36a1d9bbb3707e55c2e423d155efa8bfd207b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:3c:f0:df:4f:51:e2:1b:2b:73:db:52:3b:
                    01:17:83:f8:be:ec:ac:f9:92:93:f2:0e:71:82:29:
                    ba:32:67:09:66:7f:41:20:ee:00:fe:22:74:34:f3:
                    27:31:f3:f3:67:94:06:db:16:f3:f2:e2:d6:39:e3:
                    c3:8e:9a:ec:a9:b0:03:69:ee:9c:59:a9:dc:ea:f6:
                    86:07:f0:0b:90:67:56:72:69:d0:cc:0d:55:06:18:
                    23:f2:38:97:ef:2a:99:2b:ac:dd:10:70:e0:e1:74:
                    51:0c:57:1a:20:30:d7:09:37:2d:25:1d:4c:13:b4:
                    54:8c:dc:2e:e6:88:fb:bb:55:60:05:06:6f:21:e5:
                    85:d3:15:92:ec:f0:36:98:05:68:bc:a9:52:d9:1c:
                    2a:a7:ba:56:51:dc:95:e8:be:b6:89:33:9e:af:40:
                    02:9d:be:64:ec:f2:4b:91:1d:de:a9:69:ad:2a:c6:
                    8e:75:f9:50:ba:a3:59:62:b6:96:c1:9b:83:9c:2c:
                    40:1b:bc:b4:57:dd:11:2f:74:42:f8:8e:0e:28:04:
                    09:0f:8c:55:7a:f9:62:26:28:8b:8e:58:21:52:fb:
                    a5:d1:b8:3e:92:34:f4:25:8e:d1:18:08:91:52:e6:
                    42:4e:86:93:24:52:ae:69:8b:43:cb:fc:b4:c0:68:
                    b8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D3:6A:1D:9B:BB:37:07:E5:5C:2E:42:3D:15:5E:FA:8B:FD:20:7B:7D
            X509v3 Authority Key Identifier: 
                keyid:23:26:3B:CF:9F:F7:2A:AA:AA:2B:ED:90:DB:92:AC:6B:8A:1C:14:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyY7z5_3KqqqK-2Q25Ksa4ocFKE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a38552-d76d-4924-97a6-5a81e6a08ddd/1/02odm7s3B-VcLkI9FV76i_0ge30.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a38552-d76d-4924-97a6-5a81e6a08ddd/1/IyY7z5_3KqqqK-2Q25Ksa4ocFKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-.4
    Signature Algorithm: sha256WithRSAEncryption
         2d:1b:ce:a3:70:be:99:8f:94:2b:8b:73:9d:15:bf:2a:03:05:
         a9:40:78:cd:17:6e:08:aa:bb:93:58:8f:2e:52:5b:d4:d4:ad:
         f2:89:df:f0:72:c2:3f:ab:e4:97:7b:3b:99:64:3f:9f:60:36:
         3c:10:30:c2:cf:11:03:94:fa:05:4f:c6:60:42:e6:a2:12:88:
         61:ca:af:c4:f9:7d:b4:42:c6:b7:fd:09:ea:18:f0:84:5d:3d:
         0c:9f:4e:64:a6:da:4b:6c:c9:0a:94:71:af:83:a5:b3:20:ba:
         13:4a:7f:07:f2:7e:da:dc:dc:bf:ce:b6:3d:5a:fa:8c:38:e2:
         b5:23:f9:8e:ea:79:78:cc:04:0e:b3:e3:a8:25:83:5a:94:ae:
         b5:b3:b8:40:bb:f3:21:22:94:ff:65:c6:4c:20:73:97:8e:00:
         5b:89:21:c4:3d:1a:20:3b:99:41:98:06:f4:d9:67:b3:37:1a:
         c0:f6:1e:30:30:5e:e1:86:d3:38:0d:34:e9:e2:13:23:f9:fe:
         8e:a8:2f:63:ef:86:79:68:32:6d:0a:0e:66:94:da:25:91:9b:
         67:14:ce:d2:d1:99:61:40:84:d8:59:51:17:55:f1:24:e8:11:
         12:de:77:09:65:a0:4e:a2:a1:83:7e:a4:84:04:ac:91:01:93:
         43:a8:a8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Jun 16 07:52:23 2021 by LibreSSL & rpki-client.