Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/6ZjarXPNnbCskiTVt6Uhs1RT3UI.roa (download)

Subject key identifier:   E9:98:DA:AD:73:CD:9D:B0:AC:92:24:D5:B7:A5:21:B3:54:53:DD:42 
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
asID:                     AS3356
Prefixes:
    1: 45.148.132.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/6ZjarXPNnbCskiTVt6Uhs1RT3UI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5051297 (0x4d13a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
        Validity
            Not Before: Jan  1 05:48:17 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e998daad73cd9db0ac9224d5b7a521b35453dd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:5c:fa:65:18:cb:2b:33:4b:a8:29:8b:04:
                    e0:cb:54:d8:8f:a2:d2:e9:b0:54:10:cf:5c:1b:2d:
                    3e:ff:d5:1b:aa:59:db:13:26:ac:af:09:d4:d4:38:
                    15:b8:38:ff:e4:54:27:0e:ee:80:2e:39:8a:a5:70:
                    48:bf:3c:1d:37:ac:52:56:aa:18:73:bd:b2:f2:9b:
                    c6:ce:f2:e3:64:f9:04:ca:ec:fb:f5:4b:39:7b:fe:
                    d2:c1:d2:18:8f:a1:e0:f2:e3:76:61:d7:42:c6:ae:
                    6b:fd:b6:97:f5:1d:ea:aa:b3:17:79:22:12:4a:84:
                    eb:cd:b4:9a:05:15:64:96:eb:a0:ca:1d:51:fb:73:
                    f7:07:05:bd:0d:22:b1:3a:78:6c:56:b3:cc:95:cc:
                    5b:7a:c5:27:95:1c:af:2e:65:2a:e4:cf:af:c7:34:
                    1e:e4:ed:b8:af:fb:99:6b:ef:96:e4:92:8a:6d:6a:
                    8f:00:95:ec:47:e0:9b:31:61:c8:f5:80:06:34:1b:
                    ba:f8:fa:c9:30:c8:65:ad:cb:b6:27:4f:d2:81:6f:
                    a9:f4:a4:17:24:1e:0e:24:54:9b:9c:55:ad:81:4e:
                    ba:d4:84:84:5d:17:b0:99:e2:ba:01:17:a7:89:7f:
                    43:1b:b5:38:74:83:74:bb:3d:c5:9b:c0:43:21:84:
                    da:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E9:98:DA:AD:73:CD:9D:B0:AC:92:24:D5:B7:A5:21:B3:54:53:DD:42
            X509v3 Authority Key Identifier: 
                keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/6ZjarXPNnbCskiTVt6Uhs1RT3UI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-..
    Signature Algorithm: sha256WithRSAEncryption
         72:12:5a:60:e7:88:9d:e4:03:67:46:93:0a:f5:7b:4a:94:6d:
         c9:11:4b:fb:3f:ed:c6:d3:ef:42:ea:2e:c1:6e:23:51:ba:b0:
         3c:62:32:e8:70:45:2b:60:8c:75:9d:59:b8:52:19:24:21:b9:
         61:e1:fc:a0:e3:eb:5f:de:fd:f7:dd:85:68:52:82:9d:d3:96:
         11:80:27:af:1a:20:9b:15:66:11:5b:75:a9:60:5d:ce:70:de:
         c6:cc:97:31:2f:06:89:0d:35:39:36:1d:7f:d1:e8:03:39:24:
         38:e0:af:82:e6:04:ea:f1:b8:36:7b:62:58:29:32:23:5d:82:
         89:97:41:38:ee:57:b2:11:3c:55:10:d4:08:87:df:8e:c9:00:
         dd:09:69:74:44:7c:43:cf:2a:09:9c:36:82:c4:7e:45:e2:3d:
         c4:6b:19:e0:da:ea:e3:ce:22:af:18:95:9f:38:9a:7f:69:6c:
         89:ae:c8:af:d7:1b:3c:f5:3c:45:f7:cf:f7:94:5c:8d:69:69:
         1b:b4:dc:16:39:65:e4:a5:9a:fa:d2:2e:24:a5:20:4d:77:54:
         aa:76:a5:25:4c:08:7d:e6:fb:98:ed:09:b8:b7:c0:75:ab:b5:
         a3:cb:5f:e0:49:2e:37:3a:d3:10:5c:96:3b:61:88:52:aa:35:
         c0:9b:1f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jun 13 10:21:04 2021 by LibreSSL & rpki-client.