Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/osPyyi87YrENOKm5DsuEqm_d7XE.roa (download)

Subject key identifier:   A2:C3:F2:CA:2F:3B:62:B1:0D:38:A9:B9:0E:CB:84:AA:6F:DD:ED:71 
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
asID:                     AS397423
Prefixes:
    1: 45.153.126.0/23 (max: 23)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/osPyyi87YrENOKm5DsuEqm_d7XE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38062376 (0x244c928)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
        Validity
            Not Before: Oct 12 13:21:24 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=a2c3f2ca2f3b62b10d38a9b90ecb84aa6fdded71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b8:8a:48:a8:6a:6c:4c:aa:5e:e3:09:6b:43:
                    dd:67:1c:fc:90:10:ae:37:3c:4d:06:cd:67:ac:bb:
                    0d:a7:ba:89:e2:6b:07:f6:84:b1:e3:97:29:45:de:
                    d6:96:41:18:9c:06:8b:f3:8b:09:61:74:a3:79:f9:
                    75:8c:d7:ea:0e:fe:44:ba:23:8a:a5:1a:b3:f2:e5:
                    3d:c4:a2:27:65:30:7c:8b:2c:22:ad:1a:82:bc:46:
                    49:42:ec:f2:14:bd:0c:e7:80:79:c8:fd:fa:e5:f7:
                    b6:3c:58:c0:4e:1c:69:66:fb:f1:48:02:db:84:b7:
                    dd:d2:33:8d:83:bb:fe:33:d3:6b:42:07:90:ac:3f:
                    38:b5:51:09:3b:c5:c6:01:c1:59:87:df:d5:fe:e6:
                    2a:cb:a3:20:df:9b:cb:33:b5:5c:10:6d:e9:cc:0c:
                    37:7a:49:3e:a8:05:76:9f:de:7e:bf:f4:e1:34:8c:
                    6d:2f:72:3a:b0:46:d5:2b:b3:ca:a9:6d:b4:db:7e:
                    b3:c9:98:d4:74:87:c5:2f:25:c6:b6:d2:d1:f0:69:
                    65:71:ab:39:ed:e8:24:80:38:cf:76:35:9f:70:3c:
                    01:1f:44:48:da:ae:04:c2:8f:88:79:8a:6c:fc:42:
                    fc:8d:84:62:c2:64:70:4c:0b:85:37:6d:e9:53:c2:
                    52:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A2:C3:F2:CA:2F:3B:62:B1:0D:38:A9:B9:0E:CB:84:AA:6F:DD:ED:71
            X509v3 Authority Key Identifier: 
                keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/osPyyi87YrENOKm5DsuEqm_d7XE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:28:b0:89:e3:27:70:70:93:99:e5:f8:e3:bd:be:43:33:24:
         98:9b:8b:5a:4b:79:48:1d:d1:a7:04:77:e8:9a:2f:51:f5:df:
         1f:6c:16:0a:eb:d4:6b:69:33:55:0f:40:44:f9:1a:76:08:a1:
         62:27:21:2c:f9:9c:fc:63:50:10:68:f6:0c:6c:a6:fa:d7:a9:
         ef:73:a2:cb:c2:01:ae:64:1a:7b:53:04:9d:df:51:9e:a3:e1:
         7e:65:c0:c1:22:84:c4:c8:78:0f:e4:16:47:19:f2:24:3f:5a:
         32:3e:ee:73:ea:05:3c:00:38:06:94:62:61:ac:ea:d1:7b:07:
         23:10:3e:b1:c6:97:70:a8:43:43:23:19:0a:77:2e:b6:77:83:
         d3:a0:5d:ec:5d:f9:cf:90:be:76:33:86:91:86:d7:89:9a:ad:
         e8:37:22:50:26:c3:f1:e5:9d:99:ec:f9:c7:d1:17:0f:a3:08:
         bd:8a:4f:cf:1a:30:dc:9c:b1:8c:8e:c1:a9:38:39:0b:48:9a:
         12:19:2f:dd:dc:82:d0:a8:62:67:ae:3b:b6:8a:39:02:6a:13:
         9a:53:4f:89:31:16:79:17:94:e9:99:fc:2b:a5:d2:bb:52:61:
         10:db:d7:3b:42:43:fa:78:2f:73:23:b8:4e:95:b2:e9:9b:d3:
         fd:dd:5d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Oct 12 15:03:50 2021 by LibreSSL & rpki-client.