Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/2fBIuF1r08OAQlLnFN1mBvExYqE.roa (download)

Subject key identifier:   D9:F0:48:B8:5D:6B:D3:C3:80:42:52:E7:14:DD:66:06:F1:31:62:A1 
Authority key identifier: 6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
asID:                     AS61317
Prefixes:
    1: 45.145.120.0/22 (max: 24)
    2: 45.145.123.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/2fBIuF1r08OAQlLnFN1mBvExYqE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74368124 (0x46ec47c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
        Validity
            Not Before: Jan  1 06:02:55 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d9f048b85d6bd3c3804252e714dd6606f13162a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:09:cd:8b:f9:c7:1b:7c:cd:ae:1b:1a:e4:db:
                    03:45:4e:0e:8e:18:b3:20:28:de:c0:03:d1:9f:63:
                    76:0f:d1:75:e9:90:a7:de:b5:46:2c:6f:41:4d:fc:
                    d6:2e:51:dc:70:99:8a:cc:ea:37:26:10:84:f0:1a:
                    5c:0c:9e:03:fd:ff:06:75:61:d1:f1:11:1e:d2:80:
                    80:4f:81:9b:54:d9:5c:0d:0b:1d:c5:a2:b6:54:e4:
                    ee:bf:e7:c7:1a:d4:0f:42:5f:2a:c0:ab:8f:ff:60:
                    de:a4:ae:0e:81:55:1b:c0:73:0b:fa:06:f1:7b:ae:
                    ee:f2:e3:97:94:d6:7a:19:c9:87:43:d8:ad:8f:38:
                    dd:99:12:d9:e2:3b:f3:b3:cf:84:5a:f9:f2:20:e8:
                    3d:6d:1f:f6:ed:a9:dc:a0:74:14:5f:92:bc:30:1d:
                    ee:ed:8c:07:5b:2d:6c:f5:21:63:b1:83:b8:f2:99:
                    f3:4f:44:40:c8:4b:d5:aa:ee:56:d8:36:cd:ae:ac:
                    91:59:db:4e:b7:79:69:64:75:11:18:a5:31:d5:3e:
                    22:4d:f0:03:c4:66:d3:38:54:7a:e2:65:a7:9d:bc:
                    a6:e5:7c:49:68:9c:83:95:63:20:01:11:d1:4d:4a:
                    70:24:82:29:6b:ae:c0:e6:df:68:ea:4a:45:8f:d0:
                    76:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D9:F0:48:B8:5D:6B:D3:C3:80:42:52:E7:14:DD:66:06:F1:31:62:A1
            X509v3 Authority Key Identifier: 
                keyid:6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/2fBIuF1r08OAQlLnFN1mBvExYqE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/ag9YMNvEu6u2gnd-vThD11BInsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-.x
    Signature Algorithm: sha256WithRSAEncryption
         2e:88:bd:aa:5f:65:a7:dd:78:49:59:53:48:63:49:87:85:4f:
         80:58:34:cc:cc:5b:8b:3e:f7:8f:a5:17:f6:9c:c7:fb:3d:91:
         34:f5:7c:41:5e:9a:e4:fc:08:5f:65:97:bc:7b:46:1b:b3:67:
         af:ae:90:4c:e2:ac:14:41:6f:aa:3c:10:33:79:5a:ff:75:42:
         79:aa:b5:c3:28:99:4c:fa:a4:1d:92:30:a6:66:a7:3e:9a:0d:
         c9:68:a1:08:96:a3:9d:9a:81:8d:f2:29:32:97:0d:53:74:ad:
         7b:74:b8:dd:35:d5:ca:a9:4e:61:1d:2b:a2:18:9b:8f:3b:ae:
         70:97:53:6f:e4:36:ca:2a:4c:8e:ef:4d:94:99:12:e5:25:03:
         01:6d:1f:7a:91:13:77:e4:a9:f1:97:cd:18:ec:0e:ee:cc:ed:
         94:f7:20:e1:dc:c1:37:eb:c6:70:92:38:bd:d0:9a:33:55:26:
         7a:4f:98:a3:d6:19:6e:aa:96:56:9c:97:99:fb:1b:bc:b8:46:
         5e:94:3a:a9:2a:b1:00:87:54:7c:e9:c4:84:e3:2d:bd:c6:b3:
         32:3a:16:52:45:f0:31:aa:84:f4:c7:f0:ca:d9:2e:01:10:d4:
         c8:24:b5:3a:a6:4f:2d:b1:58:7f:fa:f0:a5:e0:50:9c:54:d9:
         4d:cd:88:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu May 20 18:24:39 2021 by LibreSSL & rpki-client.