Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/1b/dd1398-8c95-42a1-a95b-59a77329e2e1/1/GdhEUfBTVJBWjuyODDby-8GuXrU.roa (download)

Subject key identifier:   19:D8:44:51:F0:53:54:90:56:8E:EC:8E:0C:36:F2:FB:C1:AE:5E:B5 
Authority key identifier: 22:A2:41:51:7E:73:1A:A6:3D:54:B6:AF:E4:FD:56:5E:7F:C7:AB:E2
asID:                     AS26636
Prefixes:
    1: 45.9.48.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/1b/dd1398-8c95-42a1-a95b-59a77329e2e1/1/GdhEUfBTVJBWjuyODDby-8GuXrU.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40618737 (0x26bcaf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a241517e731aa63d54b6afe4fd565e7fc7abe2
        Validity
            Not Before: Apr  5 00:36:33 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=19d84451f0535490568eec8e0c36f2fbc1ae5eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e4:f3:6a:23:77:cf:e7:43:8b:d8:f1:d4:d8:
                    1e:0e:e8:b7:ef:91:42:46:b9:54:9e:8f:47:98:d7:
                    25:de:a9:49:71:e9:02:1e:9f:ef:7d:34:f0:c8:ca:
                    e4:59:0a:b8:f7:8e:17:16:25:06:97:c9:66:a4:d0:
                    e7:4a:dc:30:cc:aa:ec:09:e8:28:a2:26:97:00:ce:
                    25:2b:e0:7d:e1:62:77:62:5b:93:c8:bf:ae:8c:a6:
                    e4:3d:4a:c4:6c:fe:dd:f6:ca:20:e0:8a:6c:b1:c4:
                    a2:df:22:19:20:99:23:29:8c:7e:f0:f4:1f:3f:54:
                    e9:81:28:1d:4f:4c:8d:7a:b3:01:b0:ad:65:69:3c:
                    14:47:ac:2d:cc:8a:5d:83:20:e5:4b:75:dc:73:75:
                    12:f9:9b:9b:27:2f:50:d2:a3:84:ec:56:57:f1:10:
                    cd:73:5f:54:dd:43:18:8f:ac:d6:e1:6b:ef:44:9b:
                    82:70:c5:8b:a2:7a:bb:74:67:94:27:8a:29:fa:03:
                    2e:d7:f5:04:61:52:d4:5c:0d:ba:15:fc:e2:0b:07:
                    b1:fe:a0:49:2e:9d:03:9f:b3:88:50:53:3d:3f:10:
                    a5:56:ab:34:5f:7d:07:d1:33:69:ba:1e:46:fc:68:
                    3a:b3:30:41:68:ea:2b:e3:27:04:e3:c6:14:70:95:
                    70:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                19:D8:44:51:F0:53:54:90:56:8E:EC:8E:0C:36:F2:FB:C1:AE:5E:B5
            X509v3 Authority Key Identifier: 
                keyid:22:A2:41:51:7E:73:1A:A6:3D:54:B6:AF:E4:FD:56:5E:7F:C7:AB:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqJBUX5zGqY9VLav5P1WXn_Hq-I.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dd1398-8c95-42a1-a95b-59a77329e2e1/1/GdhEUfBTVJBWjuyODDby-8GuXrU.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dd1398-8c95-42a1-a95b-59a77329e2e1/1/IqJBUX5zGqY9VLav5P1WXn_Hq-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:91:14:e0:94:24:36:f2:62:0c:4f:77:b5:bb:9f:f7:99:6b:
         51:d2:19:fd:03:d0:0f:e4:47:88:0b:6e:ec:ed:d3:09:66:fd:
         28:ff:94:22:1e:5f:1b:6e:12:17:de:b9:47:a4:ff:74:00:b1:
         ab:a8:63:28:1c:d1:cb:82:cc:0d:07:68:49:84:38:66:62:f2:
         77:1e:99:dc:5c:26:86:65:7e:e2:ac:18:14:13:c1:cd:10:4c:
         06:b4:43:23:48:7d:56:d1:01:b5:e1:0f:70:45:8c:1f:be:d2:
         b9:4c:07:e0:20:b1:46:06:29:b4:fb:e6:eb:80:ea:d6:da:a8:
         55:bf:2c:4d:2f:24:31:a2:20:45:3c:2b:bb:59:ee:7b:40:bd:
         30:c0:8d:fe:24:16:26:cc:e4:44:87:13:54:01:6e:b5:53:02:
         d9:a2:29:ea:e9:ad:5f:70:32:3b:ce:45:1c:c4:0a:cb:3e:93:
         40:b0:80:4d:26:9e:e4:86:8d:7e:ef:40:60:b1:21:4b:45:8c:
         b4:58:c1:98:5e:fe:6d:f9:e0:ee:eb:ee:5f:28:34:3f:4c:16:
         89:3e:7b:cb:a6:79:a6:43:24:9b:16:23:f2:65:ed:f7:a5:96:
         33:dd:d9:b4:dd:67:75:75:4a:5e:d3:c5:68:ad:29:44:0f:17:
         ef:d8:46:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:21:21 2021 by LibreSSL & rpki-client.