Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Nr9JPHrISlCBOktve1NRRQ782Uc.roa (download)

Subject key identifier:   36:BF:49:3C:7A:C8:4A:50:81:3A:4B:6F:7B:53:51:45:0E:FC:D9:47 
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
asID:                     AS399114
Prefixes:
    1: 5.253.87.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Nr9JPHrISlCBOktve1NRRQ782Uc.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341231302 (0x1456c6c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 10 15:23:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=36bf493c7ac84a50813a4b6f7b5351450efcd947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:56:1a:f0:82:9e:c6:c2:03:70:73:42:91:
                    fa:7b:0d:42:f1:be:60:c9:40:54:a2:31:16:79:f3:
                    0b:8a:0f:24:f6:41:ab:46:cd:11:63:b6:12:d1:89:
                    a6:b4:54:11:7b:0d:8e:4d:be:1f:48:2e:95:4b:0d:
                    64:fb:ea:58:b4:75:d6:65:70:01:a0:c6:19:62:42:
                    23:b4:32:56:b4:6b:e9:f0:28:84:4d:04:dc:e2:9d:
                    fb:89:45:1a:d6:75:fa:f1:c0:d9:e0:6b:01:c3:9f:
                    62:af:a2:ea:3e:c2:8d:eb:3a:44:a0:3f:b2:6c:3c:
                    d8:0c:07:65:1b:fc:f4:ee:6f:1a:49:d7:00:69:71:
                    18:2d:6e:12:72:f6:0d:c8:0e:0a:5a:a8:1d:ff:88:
                    7b:ee:13:65:2b:9a:28:3f:1c:cd:58:b9:04:ef:ea:
                    ee:63:c4:69:2f:9b:b8:c6:93:1c:c5:9a:e7:7a:02:
                    52:e6:5c:39:c7:89:6a:ff:ba:ed:68:18:45:49:ad:
                    5d:0d:fa:95:d2:92:cc:42:e2:26:10:7c:dc:30:b1:
                    56:b1:ff:3c:e6:d0:f2:b7:8d:96:22:f1:a9:c5:ef:
                    1e:cd:44:6c:9a:0a:0c:41:4a:19:0f:cd:f7:54:61:
                    c7:d6:8a:2d:40:61:d2:fa:ee:e9:89:8a:ea:24:25:
                    f1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                36:BF:49:3C:7A:C8:4A:50:81:3A:4B:6F:7B:53:51:45:0E:FC:D9:47
            X509v3 Authority Key Identifier: 
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Nr9JPHrISlCBOktve1NRRQ782Uc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:da:c4:b1:de:86:4b:5b:7a:24:d3:66:c7:d3:92:7c:fb:51:
         f5:ed:16:7b:03:25:04:16:8e:34:27:be:e3:9b:3b:98:43:e7:
         22:5e:e6:e7:f4:3c:ce:53:bd:a9:e7:41:a6:b5:6f:5e:c1:7d:
         fa:31:61:ea:31:b9:52:5c:1e:2a:2c:37:91:be:ce:d7:11:a7:
         24:b7:41:9d:05:6b:eb:ed:27:b0:df:28:f8:90:13:a8:cf:eb:
         42:ad:35:d8:08:07:18:3a:96:ff:af:63:93:10:73:32:66:84:
         40:cb:d9:56:d5:5c:f0:d1:d3:5e:c5:3e:4b:2f:3e:ff:37:5a:
         fd:e8:32:e2:6e:e8:20:9f:c5:82:19:24:a7:10:23:e5:28:e1:
         e7:ca:b5:5b:bb:6e:25:73:bb:3e:1e:22:97:c5:96:64:ac:2f:
         66:4a:61:c0:71:04:91:0e:7a:a6:1d:28:17:d7:ad:0a:9f:e0:
         68:3b:3a:dd:d1:9a:9e:18:96:33:65:59:c3:35:b5:eb:41:09:
         74:7a:e2:db:0d:c5:0e:0d:34:ee:c3:49:28:0b:8a:12:b5:26:
         59:3a:a5:7a:5c:56:94:d9:af:8c:df:47:72:06:e7:45:27:82:
         fe:48:cf:fd:e5:f7:87:15:a4:08:8a:43:e6:55:dc:f6:f6:25:
         34:71:11:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:12:05 2021 by LibreSSL & rpki-client.