Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/noe1yyRSsAjJS2bdXL6u1lbTJb4.roa (download)

Subject key identifier:   9E:87:B5:CB:24:52:B0:08:C9:4B:66:DD:5C:BE:AE:D6:56:D3:25:BE 
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
asID:                     AS397423
Prefixes:
    1: 45.11.186.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/noe1yyRSsAjJS2bdXL6u1lbTJb4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4480828 (0x445f3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
        Validity
            Not Before: Jan  4 08:49:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9e87b5cb2452b008c94b66dd5cbeaed656d325be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:8b:f2:24:4e:65:f5:38:d9:f6:df:ee:35:
                    ff:1d:22:87:5f:fc:b6:2d:af:e7:15:f0:3b:e4:0e:
                    22:98:0c:fa:5c:82:63:79:bb:d2:a7:04:39:5f:90:
                    5b:ee:e0:38:7c:a3:2d:86:6b:d7:74:f4:48:26:02:
                    38:9a:e3:e8:ba:5c:e0:84:99:ca:4c:61:fb:6d:57:
                    58:9d:78:1d:d7:11:50:c5:51:65:30:04:c5:67:6a:
                    e1:df:7c:dd:28:8f:7e:b0:7c:2c:b5:b7:4b:89:ca:
                    17:12:89:43:01:56:01:a5:41:18:1d:fb:f1:26:4f:
                    0d:8c:e5:0f:d4:fc:3a:92:86:9a:65:c8:2d:7d:4d:
                    ce:7d:74:32:57:be:e6:fd:0f:77:27:e9:98:fb:13:
                    88:04:72:c3:02:b8:03:d3:75:d1:ec:c5:36:07:62:
                    ec:a8:9d:99:ac:fa:c5:97:9f:4c:e4:79:1d:a8:8e:
                    06:56:e8:13:5f:64:52:64:1f:9f:8d:1c:91:1f:60:
                    54:ef:77:fa:4e:51:26:bb:e5:90:b5:12:1a:3c:5e:
                    c4:cf:04:87:d5:0f:62:83:2d:a0:e4:1c:2b:ec:ae:
                    c0:73:fa:b7:6d:68:da:99:5a:26:e4:f9:bc:ac:f8:
                    bb:f8:ab:c2:21:c4:34:1b:1f:9b:cc:f0:48:49:0e:
                    f2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9E:87:B5:CB:24:52:B0:08:C9:4B:66:DD:5C:BE:AE:D6:56:D3:25:BE
            X509v3 Authority Key Identifier: 
                keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/noe1yyRSsAjJS2bdXL6u1lbTJb4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:43:01:c7:fb:48:23:9e:42:4e:a6:35:cf:71:63:eb:6d:98:
         1a:aa:b2:22:c7:af:44:e3:a9:ed:22:1f:88:d4:cc:f2:5e:3d:
         a4:74:02:9b:11:17:1d:be:15:0f:36:ec:11:49:2b:25:56:e5:
         dc:ba:92:be:45:87:24:78:04:07:76:54:f5:74:29:55:57:e2:
         bf:71:b8:c9:24:9d:4c:62:6d:a7:2b:a8:51:49:63:db:a7:93:
         e4:22:ad:a3:0d:0e:7b:69:a5:1c:41:8d:c4:78:46:22:b8:15:
         c4:a6:e5:b8:5e:2c:07:b8:d5:66:7c:d8:ed:70:68:6b:5d:d0:
         5a:85:9a:fe:10:7a:59:31:01:5e:2c:1a:b8:90:b7:f4:c1:d1:
         d1:b1:73:00:86:1e:34:45:81:e7:26:e1:84:34:84:68:09:3c:
         90:ef:41:cb:57:10:fe:8f:c7:5d:92:0a:c1:15:93:c0:4f:4b:
         80:dc:23:b6:9e:35:ec:1e:eb:90:a8:43:d7:5f:25:db:e6:2f:
         39:54:5b:ac:2b:65:33:7a:59:8f:1a:c4:d8:78:27:42:33:e8:
         0f:ea:a8:82:94:e0:5b:ab:b4:e2:62:2f:65:99:aa:17:89:a8:
         d4:ec:53:c5:ef:64:1a:c0:72:18:6d:21:04:f3:c9:26:a2:af:
         f0:cb:a2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 4 11:08:56 2022 by LibreSSL & rpki-client.