Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/56/24d444-8377-49af-b3dc-d3ee790f48a4/1/fB19Q75-IfJkNDAhQetDNK9i1x4.roa (download)

Subject key identifier:   7C:1D:7D:43:BE:7E:21:F2:64:34:30:21:41:EB:43:34:AF:62:D7:1E 
Authority key identifier: F7:AA:24:FD:EC:47:AE:24:2B:C4:F9:7D:B4:DA:58:8A:8E:BB:C5:F7
asID:                     AS6939
Prefixes:
    1: 45.132.68.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/56/24d444-8377-49af-b3dc-d3ee790f48a4/1/fB19Q75-IfJkNDAhQetDNK9i1x4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176763 (0x2b27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa24fdec47ae242bc4f97db4da588a8ebbc5f7
        Validity
            Not Before: May 14 17:30:48 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=7c1d7d43be7e21f26434302141eb4334af62d71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a4:70:f4:32:6a:c5:44:28:6f:07:27:b2:e7:
                    07:e5:f6:21:39:bd:58:a8:b0:28:5d:de:2b:9f:dc:
                    85:85:fe:5b:ec:5c:9d:34:19:b6:f7:df:be:23:f1:
                    e3:7c:f5:f3:81:4d:aa:57:fa:e5:3f:bc:54:32:2e:
                    92:b7:a4:4b:ac:78:94:db:84:8f:9a:87:aa:1a:ef:
                    33:59:9b:57:57:5f:86:d9:b3:02:35:66:97:6b:67:
                    dd:ae:ec:95:76:be:d2:8b:7d:39:a5:d2:66:40:9f:
                    ae:68:31:38:ec:d8:db:42:c1:1a:07:63:b9:05:a4:
                    23:07:1f:fc:4b:67:82:db:5f:f7:65:1f:57:7f:ef:
                    65:67:2b:d6:48:b8:63:81:0a:aa:fe:1f:0c:07:03:
                    f5:94:ed:02:76:8f:c4:ec:f7:b9:73:92:67:53:29:
                    ce:1f:a7:91:b4:34:76:69:21:d9:cd:0e:40:e8:54:
                    9f:e7:db:f4:10:9f:63:84:6c:bb:28:a9:c1:68:7d:
                    c2:8e:d9:68:b2:a7:5f:8b:a1:1c:7f:b5:f2:a6:57:
                    86:75:24:aa:44:b6:19:18:ff:87:b9:01:8c:e5:6c:
                    1c:e6:16:11:e5:97:3c:cd:a3:2d:d2:d2:d4:1e:0e:
                    e6:ad:13:ca:3c:84:08:d2:ef:b0:f1:96:a0:11:ec:
                    18:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7C:1D:7D:43:BE:7E:21:F2:64:34:30:21:41:EB:43:34:AF:62:D7:1E
            X509v3 Authority Key Identifier: 
                keyid:F7:AA:24:FD:EC:47:AE:24:2B:C4:F9:7D:B4:DA:58:8A:8E:BB:C5:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96ok_exHriQrxPl9tNpYio67xfc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/24d444-8377-49af-b3dc-d3ee790f48a4/1/fB19Q75-IfJkNDAhQetDNK9i1x4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/24d444-8377-49af-b3dc-d3ee790f48a4/1/96ok_exHriQrxPl9tNpYio67xfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:43:83:75:0a:d8:ea:d7:ce:e2:d4:9c:46:92:36:89:a6:2a:
         ac:70:db:ed:bc:e8:97:a1:07:dc:c3:50:2a:00:06:39:a0:a4:
         b5:84:7a:7d:4a:96:7f:86:f6:78:1a:69:21:54:0d:44:bf:06:
         3f:ab:69:22:75:66:3f:fa:90:69:12:00:f0:0d:8d:62:d9:9f:
         97:63:55:4d:05:81:39:3c:08:63:02:ec:0a:d2:18:4b:cc:2d:
         d9:d2:fa:4f:cc:29:62:0f:1d:85:c9:62:25:72:9a:e7:ab:c0:
         2a:71:53:60:6d:9d:cc:d4:20:d2:1f:e6:78:ef:79:d4:62:a4:
         0e:19:90:0a:93:61:44:f7:3b:cf:9b:18:72:29:08:84:77:a9:
         15:aa:66:0e:fb:3d:e2:f1:97:0f:21:69:59:f5:dd:3c:a6:e0:
         9e:05:95:d4:4e:3e:b1:93:be:91:08:de:96:c1:f4:f3:65:69:
         d8:c2:54:0a:a2:81:cf:c0:ea:5a:00:61:bd:a6:44:21:e3:03:
         06:d2:cd:ba:66:4e:c1:6e:b8:73:9c:5b:2c:df:ed:6c:3f:8f:
         90:99:85:0a:b3:25:ef:c0:2a:ae:00:81:61:87:35:6d:06:68:
         81:ea:e5:db:31:92:cf:c0:70:26:77:70:5a:cd:c1:7e:7a:ad:
         07:63:14:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:15:51 2021 by LibreSSL & rpki-client.