Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/U_jlt0zGiiV_ZpZCQZBcCz0stkw.roa (download)

Subject key identifier:   53:F8:E5:B7:4C:C6:8A:25:7F:66:96:42:41:90:5C:0B:3D:2C:B6:4C 
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
asID:                     AS398343
Prefixes:
    1: 45.90.84.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/U_jlt0zGiiV_ZpZCQZBcCz0stkw.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21155273 (0x142cdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
        Validity
            Not Before: Jan  1 03:56:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=53f8e5b74cc68a257f66964241905c0b3d2cb64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:b1:2a:16:28:62:d1:08:ac:76:0c:41:6e:
                    27:22:05:1b:86:70:20:a3:95:78:ff:4a:93:dd:a4:
                    2c:e0:9a:0e:32:3f:54:7b:3f:61:57:3d:10:f6:d3:
                    19:83:67:fb:b3:f9:66:84:c0:96:d3:9f:7a:59:0a:
                    f0:c3:74:01:7d:6d:4e:65:bc:1c:fe:b1:c2:b7:ae:
                    60:a7:05:4f:4a:2c:76:b5:86:f2:49:c5:0b:da:56:
                    b4:9f:f0:2f:a1:83:be:b5:13:d3:0f:43:de:f8:54:
                    de:b2:dd:84:27:ab:bb:7c:24:3f:6e:a5:29:db:38:
                    46:5e:99:17:76:31:9d:d9:3c:66:77:f8:e1:c5:0a:
                    2f:84:ee:f0:59:28:23:93:32:55:2a:fc:dc:2a:91:
                    f9:2f:1c:4e:13:5e:4a:4e:2f:ab:5b:f6:32:92:c9:
                    d3:99:72:e9:44:12:77:1f:e7:7f:dc:e3:6f:e9:61:
                    ba:f1:5c:58:91:03:54:c6:ab:0d:66:a2:c2:79:28:
                    2c:53:83:ff:47:fc:5e:95:70:6d:83:ce:80:44:f4:
                    c5:a4:2d:fc:93:06:f2:39:c3:a3:85:cb:06:f1:37:
                    20:fd:b1:ea:69:b6:af:d4:41:ca:b1:a2:21:25:d1:
                    20:ca:50:1e:89:fe:67:a7:a5:77:d3:57:e7:f3:e8:
                    0b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                53:F8:E5:B7:4C:C6:8A:25:7F:66:96:42:41:90:5C:0B:3D:2C:B6:4C
            X509v3 Authority Key Identifier: 
                keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/U_jlt0zGiiV_ZpZCQZBcCz0stkw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:5e:b2:1c:4f:ed:68:76:0f:48:ce:b3:5f:40:a1:35:ec:27:
         2b:a5:3a:ca:ff:32:cd:c6:f6:04:14:6a:29:ff:22:91:13:e2:
         4c:31:5f:a5:1b:f4:97:f9:96:11:5e:be:8f:1f:34:ab:b3:3f:
         46:f7:67:75:c1:55:29:5e:c3:1a:a3:a5:c8:9c:63:3e:d2:6b:
         ba:c9:85:05:54:52:9f:53:65:d4:80:56:cd:cf:23:f3:c7:06:
         d2:9c:2c:ff:97:59:a3:ee:e5:64:c4:12:24:c5:e6:47:e7:be:
         72:7b:48:df:ce:0e:fa:99:f1:92:93:05:3d:93:b6:4a:a6:84:
         9a:bf:d5:30:39:a4:d3:80:71:33:f3:bd:2c:bd:8a:1f:6d:21:
         d3:a6:84:87:44:cb:7b:de:56:7d:db:96:83:c2:f2:86:a5:8f:
         5c:16:7b:4a:0e:f8:dd:bb:64:c9:a6:18:76:79:f9:b5:82:5c:
         02:c6:08:1f:08:3a:8e:7c:67:26:80:46:32:c5:42:29:a8:f2:
         27:67:41:61:07:28:5b:fb:8e:a2:1a:1f:ac:a6:82:c7:78:91:
         66:4c:85:ff:e2:d0:f5:ba:cc:ce:dd:0a:0a:ef:bd:f7:43:aa:
         33:51:38:c8:0f:74:c5:15:80:b0:99:05:4d:5f:61:78:e5:54:
         48:5f:b3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 06:23:06 2022 by LibreSSL & rpki-client.