Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/67/0e6903-7571-4bd6-a6f9-b5f410dd27fd/1/K9ZjQxdmazBYluKuWA1xXErIsX0.roa (download)

Subject key identifier:   2B:D6:63:43:17:66:6B:30:58:96:E2:AE:58:0D:71:5C:4A:C8:B1:7D 
Authority key identifier: A5:D6:5A:50:B7:9E:D3:CF:26:4E:F1:1A:91:17:A4:A3:00:31:45:64
asID:                     AS0
Prefixes:
    1: 45.136.60.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/67/0e6903-7571-4bd6-a6f9-b5f410dd27fd/1/K9ZjQxdmazBYluKuWA1xXErIsX0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9852910 (0x9657ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d65a50b79ed3cf264ef11a9117a4a300314564
        Validity
            Not Before: Jan  1 00:27:36 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2bd6634317666b305896e2ae580d715c4ac8b17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:72:c6:72:7c:4b:93:5f:d0:13:df:1e:92:
                    63:b0:82:79:39:0d:d2:85:4b:80:c8:61:f0:4a:fa:
                    0f:63:43:85:6f:b2:82:33:70:e1:43:a8:4c:5d:18:
                    ce:33:a9:3a:3f:07:e0:b8:8f:db:d9:2a:be:e9:b4:
                    d1:05:dd:a5:96:ac:0e:86:34:37:24:93:1a:28:89:
                    66:ec:1c:ae:9d:7a:68:34:ff:40:fe:58:26:fd:90:
                    d9:22:d6:9e:cd:a8:35:b1:d2:1e:f1:7e:79:bf:6e:
                    73:9f:61:a3:f1:bd:50:ab:63:41:99:2b:eb:f8:22:
                    20:55:7c:be:33:ac:a9:55:33:13:b4:78:72:58:a8:
                    8c:24:50:d3:17:60:c1:74:f9:41:e1:a5:09:10:bf:
                    7f:81:17:a1:be:cd:92:18:ab:f7:c2:5d:a8:c9:7d:
                    d7:cd:cf:e0:9b:9f:99:3b:a6:46:b3:1d:23:58:75:
                    62:b9:4d:2c:7f:3c:d5:fe:7b:c4:8b:67:43:ab:0d:
                    25:1a:78:e8:f7:47:9d:3c:be:7f:15:52:16:8d:de:
                    8d:b1:08:24:5e:e1:ba:c3:7b:e5:c7:a6:d1:1c:e8:
                    97:ac:6f:51:5b:65:2a:6c:e8:b1:8f:39:2a:35:a4:
                    cf:c0:58:e7:6f:fd:07:6a:17:87:ff:9f:84:48:b8:
                    8c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2B:D6:63:43:17:66:6B:30:58:96:E2:AE:58:0D:71:5C:4A:C8:B1:7D
            X509v3 Authority Key Identifier: 
                keyid:A5:D6:5A:50:B7:9E:D3:CF:26:4E:F1:1A:91:17:A4:A3:00:31:45:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdZaULee088mTvEakRekowAxRWQ.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0e6903-7571-4bd6-a6f9-b5f410dd27fd/1/K9ZjQxdmazBYluKuWA1xXErIsX0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0e6903-7571-4bd6-a6f9-b5f410dd27fd/1/pdZaULee088mTvEakRekowAxRWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-.<
    Signature Algorithm: sha256WithRSAEncryption
         53:34:e7:29:a7:bf:9f:a6:1e:6c:28:9b:f9:69:78:96:6f:26:
         bc:8e:d3:5a:a9:fb:8f:75:1e:82:50:8a:84:88:88:5e:e6:ef:
         5f:47:f9:65:42:d4:aa:04:8c:44:48:a5:bb:bb:7b:aa:33:5d:
         66:1f:71:1c:94:61:fe:8e:15:3c:e5:63:df:f3:e2:bc:24:20:
         a3:70:63:8b:fa:fa:a8:6d:18:5d:f2:34:11:d8:b8:d3:fa:60:
         49:2e:33:9c:5a:07:9a:e2:af:39:96:de:20:f5:cd:fd:e4:d9:
         69:29:7d:5b:db:29:03:7e:e3:ab:f6:c5:95:28:28:9b:e7:ef:
         eb:a8:2f:aa:dd:5b:30:7a:b6:ba:97:d8:09:3c:79:9d:42:d4:
         c2:1d:66:7c:5f:66:82:8b:32:62:e1:be:d1:31:28:87:db:1e:
         c4:63:50:9d:d9:73:12:66:08:78:ef:52:8b:25:e5:66:9e:5d:
         09:38:4f:2a:39:7a:8c:e7:29:65:6a:66:24:6a:ce:a6:ec:84:
         2e:87:75:93:2e:12:f9:7e:d4:5c:0a:4f:44:8b:19:71:ad:86:
         5c:1b:26:a1:13:d1:a7:39:40:3f:d2:2c:49:07:b0:7e:fd:af:
         3a:d9:89:0e:2f:86:66:46:58:69:c4:e1:9e:60:2c:55:46:5a:
         26:d3:23:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:22:54 2021 by LibreSSL & rpki-client.