Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ZbV_ecQApjKEFw6vllw9pCZ1KBQ.roa (download)

Subject key identifier:   65:B5:7F:79:C4:00:A6:32:84:17:0E:AF:96:5C:3D:A4:26:75:28:14 
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
asID:                     AS26636
Prefixes:
    1: 5.181.176.0/22 (max: 22)
    2: 2.56.248.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ZbV_ecQApjKEFw6vllw9pCZ1KBQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117061989 (0x6fa3965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Apr 26 17:16:08 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=65b57f79c400a63284170eaf965c3da426752814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d7:ae:4b:68:f8:b5:23:16:90:e2:98:56:1c:
                    53:f8:84:4f:20:c0:d2:29:c6:ba:27:b0:95:67:c7:
                    df:f6:51:21:91:fe:e6:9a:74:eb:dd:8a:07:ab:b2:
                    57:55:94:cb:63:f3:b4:2c:97:7a:51:a5:fa:3a:99:
                    b5:df:71:8f:e9:2a:2a:58:44:65:a9:ce:64:6d:11:
                    56:41:34:f2:15:b7:03:bf:68:0f:8a:4a:a5:18:e5:
                    cb:d0:a7:94:9f:0d:59:d6:ec:da:18:24:af:5a:e9:
                    e7:e4:b5:93:32:b5:0b:6e:c8:c4:c3:18:96:88:37:
                    71:4d:24:12:e4:ff:03:d3:6d:40:f8:83:a5:98:14:
                    04:7c:1e:8d:5b:bc:37:57:c3:a5:91:e1:29:68:d4:
                    63:14:36:dd:72:b9:75:4b:04:ee:5f:8b:13:35:c6:
                    ed:30:9c:89:0e:50:74:6f:0c:9b:39:6f:39:1d:77:
                    21:ab:b2:61:b3:fb:0a:1d:9e:40:dc:3f:cf:e6:12:
                    94:a4:ff:13:b4:0c:0e:da:50:f5:24:cd:ec:4c:a2:
                    81:4f:69:bb:fc:87:94:85:51:d0:0f:79:ce:57:df:
                    ac:ef:51:db:ea:7f:2c:a2:7c:00:31:5e:11:a4:f7:
                    26:4b:f9:d8:11:87:0d:f9:39:2c:9e:68:6d:f7:e0:
                    31:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                65:B5:7F:79:C4:00:A6:32:84:17:0E:AF:96:5C:3D:A4:26:75:28:14
            X509v3 Authority Key Identifier: 
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ZbV_ecQApjKEFw6vllw9pCZ1KBQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.248.0/22
                  5.181.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:89:ac:19:db:ba:88:a3:54:ff:15:13:13:8f:2d:c8:79:c7:
         e1:3a:fa:cf:4f:8d:0d:00:23:6e:bb:f9:ae:81:af:d0:36:63:
         2d:a5:b9:83:9f:90:07:70:aa:ca:4c:ee:e3:83:17:ff:a2:55:
         b3:be:0a:2b:ab:8c:3c:b4:af:1d:e9:17:74:a7:0e:aa:d7:ab:
         ad:8e:05:38:22:c2:10:07:86:cd:7d:33:e6:f8:9a:b8:6d:51:
         dd:0c:a0:b8:6f:44:57:07:d3:23:48:87:7e:b1:99:7a:1d:bc:
         2d:4b:59:53:f0:a5:e2:81:da:36:79:c0:19:e3:34:e3:18:54:
         d9:52:c9:b4:ae:68:16:ea:21:91:7f:37:e9:17:92:a6:f2:a5:
         8a:31:d2:43:27:a2:cb:30:a7:6a:e9:14:56:4c:ca:23:41:4b:
         a5:5c:28:9e:ca:17:a1:f9:04:ae:14:c3:cf:59:3a:d4:0c:fb:
         a0:6e:a4:ce:fd:37:dd:ed:70:ce:e9:27:4d:73:ab:87:9b:fd:
         67:c4:ef:08:37:5d:1c:21:61:8a:94:f3:4e:37:8d:48:a8:8c:
         81:fb:c6:63:92:5a:02:15:c5:21:f7:ae:d1:42:79:40:4d:69:
         66:5d:eb:e5:94:c5:f6:aa:d7:8c:cd:07:b1:36:c5:4e:1b:d0:
         2b:a6:32:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:15:24 2021 by LibreSSL & rpki-client.