Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/4f/23d9aa-c182-438b-a2a0-172edfe07a77/1/gHOYq1VR-3_M8AwEZUksGT97kV4.roa (download)

Subject key identifier:   80:73:98:AB:55:51:FB:7F:CC:F0:0C:04:65:49:2C:19:3F:7B:91:5E 
Authority key identifier: 1A:FC:C1:8F:35:38:17:0E:B7:37:5A:63:49:2C:68:E5:04:D8:9F:0F
asID:                     AS3356
Prefixes:
    1: 45.15.38.0/24 (max: 32)
    2: 45.15.39.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/4f/23d9aa-c182-438b-a2a0-172edfe07a77/1/gHOYq1VR-3_M8AwEZUksGT97kV4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89209187 (0x5513963)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afcc18f3538170eb7375a63492c68e504d89f0f
        Validity
            Not Before: Jan  1 06:47:16 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=807398ab5551fb7fccf00c0465492c193f7b915e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e0:24:5e:5e:88:3f:a2:5c:30:a9:95:7e:42:
                    24:e4:2a:34:90:76:a1:56:46:4e:f1:ea:7f:a0:34:
                    83:eb:e6:30:5f:b6:71:72:47:83:94:67:a0:30:7d:
                    73:d4:2d:c7:f0:55:b2:8b:60:54:fd:aa:8d:00:c5:
                    4b:b2:5b:b6:84:2c:77:87:c2:a6:bb:aa:8e:69:57:
                    b8:bd:9d:fa:38:25:32:f1:79:1b:ec:8d:8d:73:d7:
                    4e:8d:86:5c:57:39:ca:ec:42:00:52:d8:d7:16:5a:
                    64:eb:9a:a5:ce:37:d1:61:7b:cd:8a:87:a2:69:f1:
                    e3:6b:5d:b1:d9:2e:01:8e:50:57:0b:9f:36:58:4f:
                    e7:af:1f:9d:ef:68:2b:0a:81:f5:3d:b6:8a:f9:44:
                    8d:ee:d5:22:3f:9b:e9:c4:b0:0b:ac:bd:4a:d3:9b:
                    59:d0:d5:8f:1a:45:e0:22:45:b8:ce:30:c6:d8:50:
                    23:94:3a:f5:2d:23:e1:d6:6e:6c:62:ee:1b:51:51:
                    39:0b:c0:21:8a:d3:a5:db:27:2d:26:a9:60:15:8f:
                    ac:9a:f1:bc:97:54:4e:b3:1e:d4:58:43:66:2c:7f:
                    d5:6c:1a:96:12:55:bd:25:e4:4b:53:ae:ab:bc:de:
                    5f:6e:92:22:d8:aa:e5:b1:e4:e5:10:75:9e:59:e3:
                    84:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                80:73:98:AB:55:51:FB:7F:CC:F0:0C:04:65:49:2C:19:3F:7B:91:5E
            X509v3 Authority Key Identifier: 
                keyid:1A:FC:C1:8F:35:38:17:0E:B7:37:5A:63:49:2C:68:E5:04:D8:9F:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzBjzU4Fw63N1pjSSxo5QTYnw8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/23d9aa-c182-438b-a2a0-172edfe07a77/1/gHOYq1VR-3_M8AwEZUksGT97kV4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/23d9aa-c182-438b-a2a0-172edfe07a77/1/GvzBjzU4Fw63N1pjSSxo5QTYnw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-.&
    Signature Algorithm: sha256WithRSAEncryption
         ae:9e:d7:5d:06:cc:72:7a:d3:95:85:49:b5:2d:ed:7b:e8:5c:
         15:ec:6d:c3:09:b8:fb:c0:8e:b3:39:47:1f:17:07:2f:31:cc:
         e8:b1:af:b1:19:05:68:98:be:a1:2a:22:e8:86:6c:fa:bc:b7:
         08:a2:2b:6d:1e:c5:69:65:99:c0:2d:0e:32:1c:41:6c:6d:6b:
         e7:8b:b1:54:6a:0e:68:89:b3:d1:96:14:14:ef:62:c5:8f:f4:
         bd:36:b4:0a:b2:e0:f5:4b:a6:7d:15:54:82:56:4b:cb:1a:be:
         05:72:b2:1b:b8:54:45:65:80:90:1e:08:12:d0:a8:26:4c:e7:
         67:46:eb:dd:12:9e:e4:56:cd:19:ee:44:ca:21:94:37:2a:b6:
         7b:71:f9:ff:17:77:e7:b4:00:72:22:66:9e:cd:c6:ca:cc:22:
         16:32:a6:e9:ff:b1:33:12:fd:fa:88:28:cf:7c:3d:b2:35:06:
         44:e3:57:0b:71:51:46:78:57:93:12:0f:df:71:53:a4:d1:2d:
         42:f5:0a:89:92:9d:3c:f7:b1:b5:0b:17:69:61:a0:3d:e5:9c:
         cd:43:9f:14:3c:e4:51:be:1c:b2:83:be:28:eb:d5:54:2b:ac:
         a9:de:12:ce:85:62:57:12:0b:9e:d1:26:88:fb:45:43:7a:2f:
         f7:9e:ab:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue May 11 07:35:52 2021 by LibreSSL & rpki-client.