Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/KLHZNyXvMF6GWNinEH0NdRdBYhE.roa (download)

Subject key identifier:   28:B1:D9:37:25:EF:30:5E:86:58:D8:A7:10:7D:0D:75:17:41:62:11 
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
asID:                     AS49434
Prefixes:
    1: 45.152.71.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/KLHZNyXvMF6GWNinEH0NdRdBYhE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244102 (0x3b986)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
        Validity
            Not Before: Mar  9 18:03:34 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=28b1d93725ef305e8658d8a7107d0d7517416211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:ac:b2:fa:46:ac:ac:a8:f4:87:e3:ac:e0:
                    b3:ed:48:bf:3a:46:ac:72:22:de:3a:14:45:64:00:
                    0f:cf:3f:1a:c3:5a:26:a0:93:62:f4:91:ac:88:8d:
                    e6:63:8a:a7:ea:00:fe:3d:20:b9:c5:71:14:19:5c:
                    3e:0f:07:e8:81:b7:ad:0f:2c:6d:a6:da:08:80:85:
                    6d:0a:35:6a:ac:cb:da:b9:9f:b0:59:09:df:b8:ce:
                    17:cc:29:23:5e:44:c4:06:5f:12:55:b9:32:16:d9:
                    08:2a:fc:69:f7:1c:cf:47:f5:ea:9f:41:42:37:e1:
                    c5:6b:6a:61:6f:8b:79:94:7a:9a:19:13:a0:94:0f:
                    a9:f2:ad:17:0c:86:30:87:fc:bc:d3:9c:78:e9:2b:
                    a5:db:08:bf:8a:40:f2:59:06:57:3a:5e:95:57:c4:
                    84:3f:d2:26:6e:2c:21:c2:0f:8d:29:f5:9d:c4:fb:
                    90:3c:fe:20:2c:a4:15:a7:25:87:22:8c:ff:2f:ed:
                    de:1b:b0:77:58:f5:39:37:46:26:76:c4:5e:3d:17:
                    fa:58:b6:bd:07:98:34:f5:fc:ea:fe:90:e1:2c:56:
                    e1:a5:33:f8:9f:d2:a4:65:f9:ae:c3:9c:e0:e0:02:
                    fc:04:1c:0b:13:2c:7d:74:52:73:d9:d9:7c:e6:16:
                    12:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                28:B1:D9:37:25:EF:30:5E:86:58:D8:A7:10:7D:0D:75:17:41:62:11
            X509v3 Authority Key Identifier: 
                keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/KLHZNyXvMF6GWNinEH0NdRdBYhE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-.G
    Signature Algorithm: sha256WithRSAEncryption
         2c:bb:88:50:01:98:ad:96:d2:9f:75:b5:ef:43:d0:43:6a:03:
         c8:98:3d:3c:93:2d:79:8f:e5:a5:ce:58:6b:1b:a2:b7:a0:c4:
         97:13:08:24:97:b4:fd:89:95:05:fb:bd:f0:2c:09:e0:c0:d9:
         ec:bd:4c:e2:a4:5e:66:cb:ea:f6:23:d9:be:02:3a:42:1b:b4:
         51:9f:66:23:b4:8c:30:0b:63:c3:a1:eb:a8:33:fb:29:a5:1c:
         2c:a3:c4:fc:25:83:4a:bd:25:a6:7f:32:01:4a:8b:f5:67:2b:
         f9:ae:37:52:48:b5:73:58:e1:ed:7f:fa:a3:f2:4c:7d:84:12:
         9c:fb:1e:a5:ad:92:e1:4c:d4:84:bc:cc:97:47:42:3e:fd:a4:
         cb:fa:f4:05:88:35:27:c4:7e:b3:3a:ca:73:af:fb:d3:62:c6:
         8e:8b:7b:d3:21:77:b6:91:31:f4:0e:cb:93:56:9a:9f:49:c6:
         e9:8e:43:70:0b:23:ec:bb:0e:07:e9:79:8e:f0:54:94:64:ca:
         cc:e5:e4:c0:ec:66:3d:12:ce:35:32:1b:d1:e6:c2:0c:0e:f4:
         92:c2:11:f5:4c:27:59:38:e5:f3:d3:9f:d7:26:07:94:5f:8f:
         a7:1f:6f:66:11:43:eb:47:54:5c:07:a3:7a:7c:77:e1:80:57:
         9d:e5:8c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Aug 1 21:45:07 2021 by LibreSSL & rpki-client.