Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/3d/25d3ec-f1dc-4366-857e-499c00876e2e/1/W4VETdKQYmGyUt4fXxwczb0G6-0.roa (download)

Subject key identifier:   5B:85:44:4D:D2:90:62:61:B2:52:DE:1F:5F:1C:1C:CD:BD:06:EB:ED 
Authority key identifier: 4D:21:D2:8B:D0:85:7E:46:2C:BE:B8:D4:0C:FD:2A:D2:21:A3:78:B2
asID:                     AS26636
Prefixes:
    1: 45.82.32.0/22 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/3d/25d3ec-f1dc-4366-857e-499c00876e2e/1/W4VETdKQYmGyUt4fXxwczb0G6-0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85634057 (0x51aac09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d21d28bd0857e462cbeb8d40cfd2ad221a378b2
        Validity
            Not Before: Apr  1 11:18:11 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5b85444dd2906261b252de1f5f1c1ccdbd06ebed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:50:df:e7:76:2a:8e:d5:89:63:f2:83:62:
                    94:0e:b4:2a:eb:34:4e:6c:59:fd:55:50:5b:a4:64:
                    9a:fa:6b:d7:3c:47:4c:ee:79:29:0d:1c:fa:d0:04:
                    d1:1e:a7:55:69:cb:8f:e8:4c:a2:30:ef:66:6a:77:
                    7b:fd:47:0b:98:4c:7f:7c:6c:1c:32:94:a3:e9:4c:
                    db:f4:03:ee:9f:e0:6b:9f:77:07:ec:5e:02:57:94:
                    b2:68:96:3b:ef:d4:64:f6:60:09:09:34:9f:e3:67:
                    37:07:b2:8e:0a:4d:62:f0:ad:df:f8:fd:c2:9e:93:
                    aa:76:9d:2b:41:cf:3d:03:cd:2d:c3:1d:aa:8a:84:
                    21:30:e2:ad:d4:5e:93:f6:38:5c:d6:5b:bf:df:9e:
                    72:5c:18:26:5a:6f:84:d3:ae:c8:a7:64:a5:40:1a:
                    66:bc:09:89:b3:25:9a:83:c1:7b:36:9e:46:a7:78:
                    50:7f:30:6c:b3:f4:86:ca:fd:d1:4b:0d:a0:56:ad:
                    2a:e2:d6:bc:39:3c:c4:b4:c2:07:74:c6:c6:bb:2a:
                    79:79:6b:4d:09:d6:26:1e:33:07:11:5a:de:0c:68:
                    4c:9b:aa:f1:41:fe:b4:2c:35:da:6a:d9:12:fa:1d:
                    5b:a9:f5:e2:74:73:5b:b6:f3:1e:a1:38:22:86:45:
                    f1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5B:85:44:4D:D2:90:62:61:B2:52:DE:1F:5F:1C:1C:CD:BD:06:EB:ED
            X509v3 Authority Key Identifier: 
                keyid:4D:21:D2:8B:D0:85:7E:46:2C:BE:B8:D4:0C:FD:2A:D2:21:A3:78:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHSi9CFfkYsvrjUDP0q0iGjeLI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/25d3ec-f1dc-4366-857e-499c00876e2e/1/W4VETdKQYmGyUt4fXxwczb0G6-0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/25d3ec-f1dc-4366-857e-499c00876e2e/1/TSHSi9CFfkYsvrjUDP0q0iGjeLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:25:ff:97:58:1d:a8:1e:7c:58:db:d8:ec:90:bb:5d:99:4f:
         37:a8:43:82:14:6f:94:55:ab:35:e7:4a:87:bc:17:0f:e8:a5:
         14:19:07:bc:6d:d6:db:a1:e7:b1:b5:ad:f4:df:31:23:c6:de:
         ae:65:bf:8d:79:de:0e:24:b4:0f:19:71:cb:ef:81:14:4b:a4:
         ed:ea:a8:74:a6:28:12:75:12:9e:01:56:ee:eb:3d:b8:c3:63:
         82:96:41:1f:4b:ec:f0:62:33:58:83:80:dd:cf:ad:46:34:c7:
         c5:bf:67:b7:42:70:67:8e:f5:c4:62:11:b7:28:59:ac:2e:ba:
         e2:e8:4a:42:35:1f:e1:ec:b7:85:d3:92:16:7b:79:bf:4d:8a:
         27:fc:b3:7e:6c:13:dd:a6:d4:5f:79:af:d5:48:92:8d:6b:3a:
         b7:61:0f:16:62:b5:af:f7:96:71:fd:53:05:98:c5:bb:e1:2e:
         71:14:02:f2:cf:f0:9b:0e:a6:f9:9f:97:27:cb:55:6b:64:e2:
         81:49:23:e8:d1:55:82:8a:38:a6:d3:23:d8:69:80:2d:b6:c7:
         85:dd:d3:1d:ff:f0:b1:db:bc:cb:58:50:05:b0:db:90:56:92:
         34:5d:2d:21:57:a7:ed:6c:f9:99:b0:98:c5:e4:84:f2:45:fc:
         ef:ac:ec:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:08:22 2021 by LibreSSL & rpki-client.