Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/TTQUDOb6OAW5Do9Srx5Q9lf6J3o.roa (download)

Subject key identifier:   4D:34:14:0C:E6:FA:38:05:B9:0E:8F:52:AF:1E:50:F6:57:FA:27:7A 
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
asID:                     AS399641
Prefixes:
    1: 45.154.157.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/TTQUDOb6OAW5Do9Srx5Q9lf6J3o.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86580607 (0x5291d7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
        Validity
            Not Before: Aug 21 05:47:26 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=4d34140ce6fa3805b90e8f52af1e50f657fa277a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6f:be:e1:1d:80:8a:70:bc:c0:84:5d:f6:53:
                    b0:70:ed:f7:d6:99:65:6e:ac:4b:62:d9:2b:a4:f2:
                    5b:a3:40:6f:47:e7:73:c3:ed:82:a4:cd:69:c6:51:
                    74:33:69:b4:45:cf:fd:62:0d:df:08:f8:ea:e1:4e:
                    6a:89:42:bb:be:79:38:3a:b2:87:55:54:c5:e1:4b:
                    3b:f5:8f:7d:d5:71:a9:91:07:8e:84:f1:f7:cb:ea:
                    f0:5f:c5:f8:e8:ab:19:74:fd:84:0a:b8:c4:cd:47:
                    ed:ad:65:00:09:b3:68:6d:8c:55:fc:11:dd:56:a7:
                    b9:2f:c0:f1:97:5f:dc:d4:30:aa:d0:7c:9d:1c:a8:
                    27:c7:9f:3c:c9:c7:98:bb:79:26:c4:76:b7:93:b5:
                    20:eb:e4:d7:fd:13:1e:55:83:5b:12:fc:f2:bb:90:
                    8d:6c:f2:8c:30:68:8f:3f:26:ab:5f:5c:bc:ab:bc:
                    a3:14:b6:e8:db:81:59:d7:81:0d:81:f9:73:cc:3e:
                    f4:6e:66:86:07:4f:dd:6a:46:e3:69:55:ff:18:01:
                    ae:7a:03:68:08:0d:2c:4d:5e:68:fa:8f:ad:0b:4f:
                    98:b6:2e:03:bc:a9:ba:6b:5d:70:05:1a:f9:38:38:
                    c6:1e:aa:bf:45:3a:60:1a:69:27:20:35:17:aa:b8:
                    3e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4D:34:14:0C:E6:FA:38:05:B9:0E:8F:52:AF:1E:50:F6:57:FA:27:7A
            X509v3 Authority Key Identifier: 
                keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/TTQUDOb6OAW5Do9Srx5Q9lf6J3o.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:f2:5f:12:69:06:28:e1:04:cc:34:fc:da:d5:95:cd:ec:8d:
         b0:1a:aa:44:6b:73:55:cc:81:b6:93:af:cf:b4:08:0b:1e:d6:
         18:7a:c2:b2:fd:ad:31:87:d9:cc:f7:f0:fa:47:79:cf:f3:34:
         e9:00:20:76:3d:ba:ad:32:ba:f9:39:00:e2:66:92:ee:5d:74:
         b5:7e:78:5d:2b:62:a0:19:47:98:de:b5:f6:19:55:87:e1:c0:
         10:b3:02:b2:b9:a4:3c:7f:46:f6:0f:4b:2c:31:78:d4:a9:5e:
         2f:1a:5b:7a:8a:0c:28:b9:d6:30:8a:b4:d6:5b:9b:97:76:54:
         3d:0c:43:14:70:c9:a1:00:e1:e8:61:7e:1e:80:fe:8f:84:25:
         16:91:b3:4f:61:69:89:7e:7d:ef:44:68:d8:f7:59:93:86:63:
         37:9c:4a:7f:c3:f7:89:35:c6:b1:a7:57:f6:4a:1e:6a:c2:8c:
         9c:00:be:29:7e:31:eb:8b:2c:25:69:0b:c8:dd:57:47:e9:b4:
         1d:df:64:bc:a5:9e:a9:31:8b:da:14:4b:6d:ed:70:b1:7f:94:
         59:60:71:d2:33:7f:28:ff:48:11:17:64:cd:d0:b8:40:8c:d9:
         1b:e7:89:70:61:0e:f4:d2:a2:a4:1c:83:62:c6:8a:eb:b7:0e:
         38:a4:20:78
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBSkdfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OTNkYTIwMTk5MDlkOWZjMzc4MjlmZDllYzI5ZDk0OGVjZmY3YzkyMB4XDTIxMDgy
MTA1NDcyNloXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGQzNDE0MGNlNmZh
MzgwNWI5MGU4ZjUyYWYxZTUwZjY1N2ZhMjc3YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK9vvuEdgIpwvMCEXfZTsHDt99aZZW6sS2LZK6TyW6NAb0fn
c8PtgqTNacZRdDNptEXP/WIN3wj46uFOaolCu755ODqyh1VUxeFLO/WPfdVxqZEH
joTx98vq8F/F+OirGXT9hAq4xM1H7a1lAAmzaG2MVfwR3VanuS/A8Zdf3NQwqtB8
nRyoJ8efPMnHmLt5JsR2t5O1IOvk1/0THlWDWxL88ruQjWzyjDBojz8mq19cvKu8
oxS26NuBWdeBDYH5c8w+9G5mhgdP3WpG42lV/xgBrnoDaAgNLE1eaPqPrQtPmLYu
A7ypumtdcAUa+Tg4xh6qv0U6YBppJyA1F6q4Pu0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRNNBQM5vo4BbkOj1KvHlD2V/onejAfBgNVHSMEGDAWgBTZPaIBmQnZ/DeC
n9nsKdlI7P98kjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJUMmlBWmtKMmZ3M2dwX1o3Q25aU096X2ZKSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzIvNDdhZmEzLWNlMzEtNDA2MC1hMDc4LWY1YWRkZGRmMWVjNS8x
L1RUUVVET2I2T0FXNURvOVNyeDVROWxmNkozby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIv
NDdhZmEzLWNlMzEtNDA2MC1hMDc4LWY1YWRkZGRmMWVjNS8xLzJUMmlBWmtKMmZ3
M2dwX1o3Q25aU096X2ZKSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2anTANBgkqhkiG9w0BAQsFAAOC
AQEAePJfEmkGKOEEzDT82tWVzeyNsBqqRGtzVcyBtpOvz7QICx7WGHrCsv2tMYfZ
zPfw+kd5z/M06QAgdj26rTK6+TkA4maS7l10tX54XStioBlHmN619hlVh+HAELMC
srmkPH9G9g9LLDF41KleLxpbeooMKLnWMIq01lubl3ZUPQxDFHDJoQDh6GF+HoD+
j4QlFpGzT2FpiX5970Ro2PdZk4ZjN5xKf8P3iTXGsadX9koeasKMnAC+KX4x64ss
JWkLyN1XR+m0Hd9kvKWeqTGL2hRLbe1wsX+UWWBx0jN/KP9IERdkzdC4QIzZG+eJ
cGEO9NKipByDYsaK67cOOKQgeA==
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:28:00 2021 by LibreSSL & rpki-client.