Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/On_bJXjXIYvsXRH-XMZ46ZWwxT8.roa (download)

Subject key identifier:   3A:7F:DB:25:78:D7:21:8B:EC:5D:11:FE:5C:C6:78:E9:95:B0:C5:3F 
Authority key identifier: B7:EC:F9:D3:74:CC:0F:73:96:71:EE:55:05:5B:D5:8C:5F:B7:67:A8
asID:                     AS399587
Prefixes:
    1: 45.150.223.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/On_bJXjXIYvsXRH-XMZ46ZWwxT8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103397912 (0x629ba18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ecf9d374cc0f739671ee55055bd58c5fb767a8
        Validity
            Not Before: Aug  1 17:07:10 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3a7fdb2578d7218bec5d11fe5cc678e995b0c53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:a9:0d:4c:95:f3:ef:7d:2c:1c:34:2d:4f:
                    51:c3:81:4e:4f:49:60:c8:30:bb:d0:c0:4e:88:aa:
                    a4:e2:b4:4b:17:0b:08:12:e6:d1:a9:93:9a:b1:16:
                    c3:08:b4:07:af:23:7d:82:ce:36:d7:48:e3:1e:fd:
                    1a:3d:df:43:18:ae:08:0a:52:e4:fd:af:97:06:14:
                    fd:60:58:c6:04:38:35:f7:f2:24:25:1b:cb:11:04:
                    8a:df:8b:fd:91:84:83:af:e7:84:35:e6:cb:82:18:
                    5f:6d:92:8d:5d:61:e6:32:c3:87:d6:98:b7:34:05:
                    78:2a:22:97:e5:8c:31:7e:9a:3f:ee:71:9a:bc:ba:
                    98:65:a1:29:8d:fb:ba:d0:c9:77:26:bc:8c:8c:c1:
                    3b:4e:04:fc:18:fc:b1:0c:42:26:f9:0d:9a:e7:bc:
                    6c:c7:90:7b:96:46:6e:ba:8a:45:bc:ea:06:2b:71:
                    65:13:f9:31:5f:5f:ea:ef:a6:f8:07:36:5e:60:5a:
                    6d:14:7b:2e:ed:74:9f:2c:51:96:a5:15:6d:21:4a:
                    8d:d6:82:94:25:0b:b1:d1:d3:20:dc:76:79:cd:6f:
                    07:02:2e:f8:32:5d:cb:cb:56:3b:03:93:d8:8e:dd:
                    8d:f3:52:ca:37:1f:f8:47:6b:93:c0:65:96:ad:d1:
                    48:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3A:7F:DB:25:78:D7:21:8B:EC:5D:11:FE:5C:C6:78:E9:95:B0:C5:3F
            X509v3 Authority Key Identifier: 
                keyid:B7:EC:F9:D3:74:CC:0F:73:96:71:EE:55:05:5B:D5:8C:5F:B7:67:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-z503TMD3OWce5VBVvVjF-3Z6g.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/On_bJXjXIYvsXRH-XMZ46ZWwxT8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/t-z503TMD3OWce5VBVvVjF-3Z6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:08:bb:99:78:f6:42:13:f8:ea:f7:9d:9c:60:59:bd:ef:c2:
         5d:4d:ab:55:19:b9:cb:b3:e0:c5:e7:3e:09:9f:33:3d:cf:74:
         31:a1:e5:7a:1d:29:87:9a:bf:b7:8d:81:ca:cb:33:f6:77:a9:
         a5:b5:21:ff:4c:dd:a0:92:06:41:9a:f3:bd:b8:00:1c:34:8f:
         57:fb:d6:45:7d:ff:5b:a7:a5:19:19:12:72:e1:f4:87:10:70:
         c2:3f:4c:29:3b:05:f8:92:84:f7:98:b7:ec:e0:92:d1:be:0d:
         32:e2:56:c1:fb:73:c5:81:90:b7:3a:1c:2d:5f:f0:19:95:34:
         46:71:4c:ec:6d:2c:33:34:ed:06:6a:aa:d8:dd:62:64:39:75:
         4c:2b:ae:57:b9:e2:dc:51:ad:e4:b0:61:92:2c:71:6f:aa:9d:
         2b:c4:e3:c1:26:ad:24:12:b8:3b:79:88:f6:66:af:18:9b:8e:
         c4:a3:9a:e6:76:13:0b:a8:50:31:73:9a:b7:2a:4b:7d:27:33:
         0f:02:3b:ee:95:3f:62:04:9f:f8:1e:5b:45:92:03:c4:59:ae:
         e9:a0:4c:69:f6:47:d9:c6:d2:1a:97:af:4d:6b:94:96:47:73:
         5c:8b:f1:20:d4:eb:0a:4f:23:81:ec:18:54:7b:be:ce:8e:8c:
         dc:17:d2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:10:55 2021 by LibreSSL & rpki-client.