Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/rQmVZdGLo88fVSCBeIJl76eheTo.roa (download)

Subject key identifier:   AD:09:95:65:D1:8B:A3:CF:1F:55:20:81:78:82:65:EF:A7:A1:79:3A 
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
asID:                     AS174
Prefixes:
    1: 45.87.68.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/rQmVZdGLo88fVSCBeIJl76eheTo.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77310065 (0x49ba871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
        Validity
            Not Before: Jul 21 00:15:42 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ad099565d18ba3cf1f552081788265efa7a1793a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d6:1e:da:50:2a:b8:04:19:8d:15:35:92:16:
                    62:aa:6c:3f:fc:5e:b3:0f:85:b0:32:77:58:41:09:
                    51:c5:59:38:83:34:b2:2a:18:66:79:1b:75:84:b4:
                    d1:e7:44:ab:3b:cc:8a:40:87:76:dd:be:02:79:ab:
                    c2:9b:1d:f9:a6:52:da:72:b5:0e:0a:09:f1:47:0d:
                    12:ba:23:ca:44:7f:03:0c:06:eb:5d:9a:05:10:f8:
                    cc:21:e8:d5:41:5a:15:68:e3:d3:3c:89:cf:2d:03:
                    87:b5:d9:7b:fe:8e:42:7f:d1:22:52:77:2b:51:46:
                    38:f8:fd:0e:b1:89:6b:2a:71:84:2f:28:c1:bc:04:
                    0d:fa:ff:3d:7d:b4:88:51:f8:d3:84:89:f4:23:c7:
                    0e:0c:db:d8:c4:d8:2c:3a:8a:72:ee:6b:d5:b1:de:
                    37:c8:59:70:fb:e9:a3:6c:a7:50:2b:07:9c:d8:26:
                    0b:b4:20:d5:17:37:66:6b:61:c0:02:c9:16:cb:0a:
                    f6:4a:32:42:fd:a9:03:ee:4c:af:b9:93:3d:e5:42:
                    a2:2e:de:e9:56:44:e2:ad:a3:0b:4c:38:62:ec:8b:
                    c6:4b:3e:1a:b1:e1:bd:d4:33:75:2a:7d:f2:be:73:
                    9c:82:eb:fa:17:03:ea:8d:de:de:4c:e0:79:c2:7e:
                    c5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AD:09:95:65:D1:8B:A3:CF:1F:55:20:81:78:82:65:EF:A7:A1:79:3A
            X509v3 Authority Key Identifier: 
                keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/rQmVZdGLo88fVSCBeIJl76eheTo.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:78:85:f0:5c:db:9e:07:31:02:ef:9a:8d:51:23:f1:89:ba:
         aa:5b:fb:8d:86:c9:c5:71:d4:ac:5f:23:9c:43:45:f6:4c:b1:
         3d:ac:29:19:bb:ed:cd:20:2d:95:fd:72:b1:10:5a:9f:64:86:
         ea:2f:7e:2b:e1:47:82:69:06:e8:10:0f:99:eb:ed:f4:3f:7a:
         30:cb:89:66:06:1e:b0:9c:04:a0:53:69:0f:e3:f2:03:4b:5d:
         28:db:cb:6a:c2:38:f8:6c:72:fe:ef:9b:46:8c:81:37:d8:66:
         9b:be:0b:17:78:d9:7a:0c:f1:57:21:ec:4a:75:85:31:19:33:
         c4:b8:53:c1:c6:d3:9a:c4:f9:56:d3:87:5c:e2:ca:b1:b1:b1:
         22:d3:2d:97:26:bc:a9:78:90:fd:66:98:17:91:c7:9c:b0:fc:
         8f:66:cc:2d:47:0c:a4:10:8c:b8:49:f7:c3:78:ed:f5:56:0d:
         ac:83:f8:69:1a:54:8a:ed:54:46:5d:ed:0a:5c:b8:48:a9:80:
         fa:c1:a0:f5:67:61:df:d3:1b:40:df:9f:7a:e3:55:7c:c5:fd:
         c4:e6:ce:b4:47:f8:c1:a9:11:8e:a6:5a:17:44:d2:6d:98:e1:
         d2:fc:ae:cf:f1:ae:cc:7a:6f:4a:d2:00:c5:be:7b:23:ad:f8:
         bd:4f:95:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 11:58:56 2021 by LibreSSL & rpki-client.