Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/2e/251966-db5d-4604-905f-cc7e415727b5/1/ZoiBvH8iUlfRWdGbPvQjQTeiyCA.roa (download)

Subject key identifier:   66:88:81:BC:7F:22:52:57:D1:59:D1:9B:3E:F4:23:41:37:A2:C8:20 
Authority key identifier: 0A:C1:86:D5:74:B3:A4:03:6D:3D:94:1D:1B:E1:FC:3E:B4:51:96:3C
asID:                     AS26636
Prefixes:
    1: 45.67.139.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/2e/251966-db5d-4604-905f-cc7e415727b5/1/ZoiBvH8iUlfRWdGbPvQjQTeiyCA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39087751 (0x2546e87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ac186d574b3a4036d3d941d1be1fc3eb451963c
        Validity
            Not Before: Apr  6 16:00:16 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=668881bc7f225257d159d19b3ef4234137a2c820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fc:ce:17:6b:11:b4:ba:8a:b2:70:2b:8f:2b:
                    5d:65:a7:84:a3:49:6b:f0:98:b6:78:23:34:70:cc:
                    34:d5:13:e3:73:bf:8d:15:b4:91:1f:6d:9e:fc:56:
                    0b:9e:40:ce:e0:24:a1:46:1d:be:0e:4a:c3:02:23:
                    2d:e2:1e:89:65:97:c5:ac:60:c5:20:b6:e3:66:4a:
                    7b:9a:51:d7:1f:95:8e:c1:6f:0b:75:62:d0:92:7b:
                    7b:94:60:fb:e8:51:a2:b5:e1:33:3b:dd:8b:c0:ed:
                    d1:98:58:0e:d5:4f:8b:5e:3c:c0:bc:be:49:a0:51:
                    be:ab:63:f2:46:f3:70:a9:53:05:d5:bb:22:c0:39:
                    ff:21:8c:b0:e7:01:3c:35:24:f0:69:0a:c7:c7:d6:
                    15:e3:65:a8:bd:4d:f4:d7:b4:3e:94:41:60:4c:a8:
                    0f:d0:8c:77:9d:5c:a9:da:a7:ea:1c:7c:6d:86:d7:
                    21:3d:40:ef:55:82:d5:60:a2:0e:70:41:58:25:ad:
                    73:85:2a:5f:f8:bd:ef:0f:db:9d:f0:57:72:7d:06:
                    62:9b:e6:85:9f:a2:88:92:fe:a3:a9:8d:8b:4c:02:
                    5b:5c:51:af:2e:46:4b:e7:39:df:23:c3:ba:d9:26:
                    aa:a3:01:2b:30:6b:39:ca:da:15:d4:26:30:0b:8e:
                    9d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                66:88:81:BC:7F:22:52:57:D1:59:D1:9B:3E:F4:23:41:37:A2:C8:20
            X509v3 Authority Key Identifier: 
                keyid:0A:C1:86:D5:74:B3:A4:03:6D:3D:94:1D:1B:E1:FC:3E:B4:51:96:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsGG1XSzpANtPZQdG-H8PrRRljw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/251966-db5d-4604-905f-cc7e415727b5/1/ZoiBvH8iUlfRWdGbPvQjQTeiyCA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/251966-db5d-4604-905f-cc7e415727b5/1/CsGG1XSzpANtPZQdG-H8PrRRljw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:73:2f:06:6b:18:64:df:b6:8b:31:08:e7:0e:bd:8f:67:7e:
         90:4b:39:7d:b7:41:dd:25:82:8b:e2:36:98:63:d9:91:cd:30:
         3f:79:58:60:c6:d6:b3:59:5b:ba:0a:57:51:dd:e8:2f:f0:b9:
         04:f4:3a:af:72:9e:bc:37:7a:c7:57:16:85:2a:b0:4d:17:14:
         20:f1:63:7a:0f:06:5f:46:27:d2:7f:c2:cc:96:c4:60:44:39:
         16:e9:7e:23:30:d2:2f:a4:55:bd:32:9f:08:78:72:84:3c:2b:
         30:db:a4:41:df:3e:5a:fa:5b:a4:29:eb:99:7c:c4:22:29:b0:
         9b:99:33:ee:c4:e4:00:5d:64:43:f5:db:3c:e5:e8:28:ad:ff:
         cd:1b:0c:a0:27:8a:d9:80:9a:ec:d9:88:3c:27:9b:c6:2e:b6:
         d2:38:dd:8d:75:2f:9d:77:5b:b1:38:8f:db:c9:87:0e:ab:31:
         96:68:dd:d5:6e:ac:6b:06:d5:90:74:38:a8:cc:9e:27:39:fc:
         0c:7a:a7:99:b5:5d:15:7d:01:9d:5d:44:9a:d7:04:af:91:3c:
         51:d0:14:28:bb:9e:9b:72:6c:31:63:d4:96:f8:0e:d9:c6:3f:
         f5:f6:4e:b3:b6:45:7c:06:76:6e:d2:41:a8:ac:bc:82:81:79:
         b9:35:28:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Sep 23 08:43:14 2021 by LibreSSL & rpki-client.