Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/66/7dd8c1-685c-429e-ae28-cf260545a99d/1/Ao_YqDDBlnPxwPTX5d4pU58W0lw.roa (download)

Subject key identifier:   02:8F:D8:A8:30:C1:96:73:F1:C0:F4:D7:E5:DE:29:53:9F:16:D2:5C 
Authority key identifier: 16:BA:7F:87:1B:BB:10:F3:E5:74:5B:BB:4E:66:8D:EF:A4:C6:05:A5
asID:                     AS26636
Prefixes:
    1: 45.88.20.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/66/7dd8c1-685c-429e-ae28-cf260545a99d/1/Ao_YqDDBlnPxwPTX5d4pU58W0lw.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157650 (0x267d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ba7f871bbb10f3e5745bbb4e668defa4c605a5
        Validity
            Not Before: Apr  7 14:46:51 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=028fd8a830c19673f1c0f4d7e5de29539f16d25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:86:5b:56:eb:cd:96:0c:83:88:ee:61:74:
                    99:08:c9:43:9d:0f:26:3c:e8:d3:70:df:2c:4f:af:
                    dc:e6:d1:2d:89:5a:f1:43:12:54:21:a0:44:fc:f2:
                    5d:6c:31:75:5b:19:93:11:5c:a6:ee:a2:30:c6:26:
                    46:59:e3:f6:35:8d:20:c9:96:a8:eb:de:fb:d0:98:
                    b3:5f:3e:d2:09:9c:e9:64:e9:56:76:51:6a:b4:0a:
                    ed:da:b0:01:21:8b:3e:ac:d0:ee:70:8c:cb:52:e9:
                    11:cd:0f:b7:d8:00:6f:40:20:91:58:8b:1c:86:f5:
                    83:c8:a0:e6:94:05:ea:35:1a:79:0f:ef:27:68:d5:
                    46:c3:60:60:60:c9:9e:2e:86:3d:ea:84:a2:9e:90:
                    1b:52:b1:1d:5e:62:01:a9:f5:09:f5:11:fc:27:90:
                    99:9b:76:97:4d:56:d7:60:12:a7:e7:63:de:48:91:
                    87:5c:4d:37:06:b6:7f:ab:ea:3c:cc:8a:95:e5:7d:
                    c8:89:43:b6:34:cc:54:6e:52:af:d0:33:91:28:fc:
                    32:f5:4b:f1:12:7e:f9:04:d8:ed:e1:0b:4b:ac:91:
                    c9:a2:24:dd:e9:9a:66:79:31:79:56:8c:4f:e2:5d:
                    27:9a:10:47:eb:de:a6:b0:bd:db:7c:3b:ad:ee:15:
                    1a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                02:8F:D8:A8:30:C1:96:73:F1:C0:F4:D7:E5:DE:29:53:9F:16:D2:5C
            X509v3 Authority Key Identifier: 
                keyid:16:BA:7F:87:1B:BB:10:F3:E5:74:5B:BB:4E:66:8D:EF:A4:C6:05:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frp_hxu7EPPldFu7TmaN76TGBaU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7dd8c1-685c-429e-ae28-cf260545a99d/1/Ao_YqDDBlnPxwPTX5d4pU58W0lw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7dd8c1-685c-429e-ae28-cf260545a99d/1/Frp_hxu7EPPldFu7TmaN76TGBaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:1b:32:f5:f7:2a:08:4c:39:58:2b:9a:23:c1:86:a3:5e:da:
         d2:36:45:87:b5:c1:8a:72:b5:16:99:c0:73:32:f8:a9:93:52:
         f0:49:47:9e:f3:af:1e:1e:0c:7f:cb:ab:9e:f6:ca:0d:ed:93:
         f8:69:1e:1b:21:37:72:ea:99:6f:81:b1:d0:a5:c5:00:bd:4d:
         47:10:f2:93:02:91:53:e0:f0:b3:e0:2c:50:dd:8f:aa:88:84:
         24:82:8a:cd:d9:d4:f8:1e:93:d2:ab:30:6c:c2:f4:d8:40:da:
         a6:8d:1d:2a:bd:13:c7:90:0c:58:d7:b7:e3:6c:22:63:1d:ce:
         1d:16:3c:25:b9:37:4e:3e:8f:34:d4:a4:a2:97:30:76:01:b3:
         61:7b:23:d2:f1:2f:3d:c2:cb:f6:c2:40:7c:d8:eb:dc:72:f9:
         65:1e:d0:b6:fb:32:af:4c:4d:8c:4f:9e:62:25:4e:81:20:6c:
         06:b3:20:05:2a:84:c1:5a:2c:5c:f2:85:29:39:ac:ea:e4:b6:
         7e:54:8c:bc:59:b1:22:83:9d:d6:b6:5b:b3:cb:1d:bf:0f:05:
         a0:bf:ab:46:eb:cb:33:12:e1:5a:19:24:a8:83:d0:3d:3d:54:
         3d:1d:c3:07:e8:45:e6:10:3e:1c:fd:37:29:df:bb:c9:41:2e:
         26:4f:12:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:33:18 2021 by LibreSSL & rpki-client.