Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ON-4Dp3DaqK-MK7jNYHNRNJuGFo.roa (download)

Subject key identifier:   38:DF:B8:0E:9D:C3:6A:A2:BE:30:AE:E3:35:81:CD:44:D2:6E:18:5A 
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
asID:                     AS398986
Prefixes:
    1: 45.130.53.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ON-4Dp3DaqK-MK7jNYHNRNJuGFo.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79811544 (0x4c1d3d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Jan  1 06:33:58 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=38dfb80e9dc36aa2be30aee33581cd44d26e185a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fb:1a:6f:6b:76:43:99:e3:d4:79:6a:1b:8d:
                    2d:48:ac:60:d4:9d:c9:c1:ab:57:8d:06:98:31:4d:
                    79:5b:f0:e8:89:66:09:3a:68:d6:67:81:d8:94:49:
                    6d:44:21:5b:2b:de:94:dd:1b:e0:88:9d:86:eb:1b:
                    6b:fc:aa:2f:16:48:a3:9d:81:55:31:2e:7d:e1:72:
                    39:6c:74:3f:ff:e9:6c:f7:a7:2b:e4:f4:a9:24:85:
                    b6:5e:38:1a:51:67:39:48:5d:1e:86:71:b6:2a:38:
                    da:07:3c:a0:7c:96:04:ce:b9:ad:6e:cf:4e:dd:95:
                    1b:9c:ca:ff:2c:25:4a:70:5b:d2:c1:11:ce:f7:e0:
                    7d:da:6f:c2:e7:1c:48:e4:72:f3:84:01:03:03:3f:
                    cb:44:e0:0c:a0:c3:4f:ff:92:ea:13:a2:7f:74:52:
                    24:89:f9:b0:ea:b1:ea:11:e7:c1:50:74:b1:97:94:
                    20:f5:37:2c:0e:cc:08:30:73:c8:03:4c:cc:f7:1c:
                    ab:10:90:74:01:0b:6e:1b:db:f3:88:82:48:ef:ae:
                    ee:68:d1:6d:39:f6:7c:e3:a4:ef:28:b6:c1:2e:e9:
                    25:62:f6:65:b6:f5:a4:ed:b2:cb:e6:93:b6:5e:8e:
                    93:7a:9a:b4:4f:e0:95:dd:13:0e:b5:1a:7e:d9:9d:
                    6c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                38:DF:B8:0E:9D:C3:6A:A2:BE:30:AE:E3:35:81:CD:44:D2:6E:18:5A
            X509v3 Authority Key Identifier: 
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ON-4Dp3DaqK-MK7jNYHNRNJuGFo.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:d0:c8:7d:6c:d8:d0:bf:7c:b8:1a:22:58:12:35:56:2f:52:
         bf:84:d9:5e:29:e4:18:99:7e:87:3a:6f:29:17:14:38:1a:8e:
         d1:9e:70:fd:f5:e0:f6:24:28:bf:a4:5e:82:51:38:dd:56:79:
         99:33:51:47:bc:38:19:3a:a0:34:c8:6c:2e:86:09:50:f0:4e:
         89:d4:3a:0b:6d:10:91:00:18:dc:7c:af:cb:07:bd:6f:3e:4e:
         96:b7:32:d5:cc:ef:ed:97:ba:55:86:a7:01:11:ac:fe:e2:f5:
         ab:16:49:a9:97:d9:a5:50:26:10:97:aa:7b:75:68:ec:51:2d:
         37:27:c3:03:f3:c9:d6:57:75:b4:0f:d4:d2:2a:a5:be:3e:c6:
         ea:fa:ae:82:68:03:53:e1:e9:3e:20:50:85:5d:00:c8:16:ad:
         dd:fc:f8:2c:c0:db:40:5d:e4:71:1a:2a:d5:31:e3:5d:c0:9e:
         fa:12:e9:fc:b1:d8:e2:ae:92:81:90:6b:21:7b:18:bf:ed:f5:
         09:9f:a0:8a:3f:8b:75:14:7f:7c:9b:c5:44:b8:9c:95:cb:e4:
         21:84:6a:4e:71:49:b4:e8:21:71:d8:00:2f:2c:e5:8a:4e:35:
         93:39:ad:8f:95:ff:e2:fc:62:b5:4e:2f:75:98:82:4e:aa:62:
         e5:a6:04:ce
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBMHT2DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NTU3Y2NkNDNhZmU4MTZlNDk1MzIyOGJmMTRhNzVkYzI5MDE0YjhkMB4XDTIxMDEw
MTA2MzM1OFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzhkZmI4MGU5ZGMz
NmFhMmJlMzBhZWUzMzU4MWNkNDRkMjZlMTg1YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMr7Gm9rdkOZ49R5ahuNLUisYNSdycGrV40GmDFNeVvw6Ilm
CTpo1meB2JRJbUQhWyvelN0b4Iidhusba/yqLxZIo52BVTEufeFyOWx0P//pbPen
K+T0qSSFtl44GlFnOUhdHoZxtio42gc8oHyWBM65rW7PTt2VG5zK/ywlSnBb0sER
zvfgfdpvwuccSORy84QBAwM/y0TgDKDDT/+S6hOif3RSJIn5sOqx6hHnwVB0sZeU
IPU3LA7MCDBzyANMzPccqxCQdAELbhvb84iCSO+u7mjRbTn2fOOk7yi2wS7pJWL2
Zbb1pO2yy+aTtl6Ok3qatE/gld0TDrUaftmdbGkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ437gOncNqor4wruM1gc1E0m4YWjAfBgNVHSMEGDAWgBS1V8zUOv6BbklT
IovxSnXcKQFLjTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RWZk0xRHItZ1c1SlV5S0w4VXAxM0NrQlM0MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGIvMTkwODQzLTE4MDMtNDQ2Mi1hNzk1LTZiYzc1NTc4YjRjMy8x
L09OLTREcDNEYXFLLU1LN2pOWUhOUk5KdUdGby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIv
MTkwODQzLTE4MDMtNDQ2Mi1hNzk1LTZiYzc1NTc4YjRjMy8xL3RWZk0xRHItZ1c1
SlV5S0w4VXAxM0NrQlM0MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2CNTANBgkqhkiG9w0BAQsFAAOC
AQEAANDIfWzY0L98uBoiWBI1Vi9Sv4TZXinkGJl+hzpvKRcUOBqO0Z5w/fXg9iQo
v6ReglE43VZ5mTNRR7w4GTqgNMhsLoYJUPBOidQ6C20QkQAY3Hyvywe9bz5Olrcy
1czv7Ze6VYanARGs/uL1qxZJqZfZpVAmEJeqe3Vo7FEtNyfDA/PJ1ld1tA/U0iql
vj7G6vqugmgDU+HpPiBQhV0AyBat3fz4LMDbQF3kcRoq1THjXcCe+hLp/LHY4q6S
gZBrIXsYv+31CZ+gij+LdRR/fJvFRLiclcvkIYRqTnFJtOghcdgALyzlik41kzmt
j5X/4vxitU4vdZiCTqpi5aYEzg==
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:05:31 2021 by LibreSSL & rpki-client.