Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/0f/cd701f-77ac-4e97-95b0-d5ff17635187/1/O0OHVDllcTuEN30nCRz06u_OLYg.roa (download)

Subject key identifier:   3B:43:87:54:39:65:71:3B:84:37:7D:27:09:1C:F4:EA:EF:CE:2D:88 
Authority key identifier: F1:F3:CC:F3:A7:DE:D3:B0:45:FE:40:C5:4F:0D:1A:27:C2:FA:17:83
asID:                     AS174
Prefixes:
    1: 45.159.14.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/0f/cd701f-77ac-4e97-95b0-d5ff17635187/1/O0OHVDllcTuEN30nCRz06u_OLYg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18763560 (0x11e4f28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f3ccf3a7ded3b045fe40c54f0d1a27c2fa1783
        Validity
            Not Before: Jan  1 03:40:06 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3b4387543965713b84377d27091cf4eaefce2d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:8b:5f:56:c3:6d:6f:54:05:2d:1d:a5:ba:
                    fd:7a:1b:f5:f3:6e:9e:be:91:02:30:5b:dc:1f:fe:
                    d6:b4:70:0a:71:5e:d0:44:40:d4:da:70:1d:63:96:
                    9d:4d:71:28:51:f1:b4:db:bb:fe:eb:1a:cf:57:db:
                    ba:7c:7c:f2:20:9c:45:86:e6:91:fd:5c:e0:de:f7:
                    46:41:51:91:6e:51:5b:fa:4a:5f:55:c4:b1:84:44:
                    9a:56:7e:08:53:f4:e1:a3:72:ac:52:fa:f8:6e:ae:
                    96:80:04:3a:66:94:98:0e:c1:38:5e:28:d2:ce:a0:
                    5c:b8:48:7d:a6:6b:2e:21:a1:c8:a8:99:41:17:87:
                    70:3a:60:a7:9a:be:af:00:cd:8f:c2:8a:7e:a5:ad:
                    07:1c:b4:89:8c:2f:dc:e5:7b:f6:13:bf:13:a8:88:
                    80:42:28:d4:92:8a:55:7f:0b:70:e4:eb:8f:94:30:
                    87:9b:ad:1e:89:9d:a4:86:f9:79:63:17:cf:83:e8:
                    12:b1:63:cd:3f:ed:fa:cc:87:ec:8a:b3:21:38:25:
                    40:59:7b:10:c9:65:c3:40:b5:ad:d7:dc:c4:b7:52:
                    39:af:c6:f9:f7:ec:58:3d:6d:94:81:d1:96:2d:5e:
                    ce:3c:1a:db:73:91:2f:3c:bc:1c:d3:06:31:34:df:
                    e1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3B:43:87:54:39:65:71:3B:84:37:7D:27:09:1C:F4:EA:EF:CE:2D:88
            X509v3 Authority Key Identifier: 
                keyid:F1:F3:CC:F3:A7:DE:D3:B0:45:FE:40:C5:4F:0D:1A:27:C2:FA:17:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fPM86fe07BF_kDFTw0aJ8L6F4M.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/cd701f-77ac-4e97-95b0-d5ff17635187/1/O0OHVDllcTuEN30nCRz06u_OLYg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/cd701f-77ac-4e97-95b0-d5ff17635187/1/8fPM86fe07BF_kDFTw0aJ8L6F4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:e5:46:4e:d2:33:b9:a4:1f:28:0e:28:7c:64:90:69:6c:25:
         ac:6f:1c:09:c8:be:a9:c4:7c:28:fd:64:b3:a6:10:eb:82:1d:
         a0:75:2a:c8:0a:d5:ba:1c:6c:36:4c:3a:27:cc:4e:55:95:c8:
         00:b4:f7:8d:45:3c:16:13:5e:82:9b:3f:05:ac:53:a0:5a:6f:
         b7:9c:bc:35:91:db:0e:7f:29:98:ee:d5:8a:25:7c:04:dd:7c:
         7d:57:1d:fc:4d:2a:7e:a1:a5:02:21:c7:16:ae:9f:63:f0:55:
         ad:7b:53:8b:6f:21:a2:7c:86:76:dd:50:ef:f5:a2:06:33:d6:
         31:11:db:58:76:7f:dc:5b:fe:c5:a1:c7:27:84:1e:24:86:f4:
         fc:33:4a:37:0f:76:ed:42:25:51:0b:a5:d6:68:de:7a:97:bb:
         35:e1:51:2b:55:c6:93:8e:63:68:22:d6:2a:ab:3a:cd:e0:9c:
         4a:c0:54:4d:fd:78:a4:b7:11:18:da:3d:f8:39:e5:69:66:51:
         36:31:ab:e8:c3:24:b4:0d:53:06:33:c0:65:42:1f:4a:94:7b:
         4e:b3:a2:86:45:a9:6b:30:a1:fb:42:38:50:d6:23:2b:8c:d8:
         30:a9:05:de:3e:a6:86:93:c7:c4:cb:58:2f:9f:cb:e3:7f:01:
         24:2b:2f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:07:23 2021 by LibreSSL & rpki-client.