Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/CZXgwn54Jm02hlz7CgdjSEJjGKg.roa (download)

Subject key identifier:   09:95:E0:C2:7E:78:26:6D:36:86:5C:FB:0A:07:63:48:42:63:18:A8 
Authority key identifier: 32:C0:1B:1B:84:0F:38:CE:06:71:F7:1C:3B:47:27:E8:1F:69:A2:B7
asID:                     AS26636
Prefixes:
    1: 45.157.168.0/22 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/CZXgwn54Jm02hlz7CgdjSEJjGKg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13817274 (0xd2d5ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c01b1b840f38ce0671f71c3b4727e81f69a2b7
        Validity
            Not Before: Jan  1 00:29:44 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0995e0c27e78266d36865cfb0a076348426318a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ee:41:4f:fd:cf:44:ec:49:5e:14:c4:f3:22:
                    e5:1e:b7:7b:2f:bb:d2:0b:31:41:da:42:c6:b8:e3:
                    55:26:22:3e:3f:20:43:4a:0e:09:68:44:81:93:e3:
                    6a:4e:23:a4:37:ff:94:ad:da:78:10:56:63:42:89:
                    42:eb:ad:7c:5d:b6:3a:e2:20:4b:0e:1c:a3:03:9f:
                    a3:5c:b6:d0:4e:f7:36:e5:e1:0a:15:f3:9c:dc:84:
                    a4:84:41:9d:49:5a:27:0e:87:56:84:07:46:6d:6f:
                    d7:7a:d7:d6:da:c0:25:74:12:9d:d0:44:1f:d1:74:
                    e7:4e:00:b8:c4:9f:3f:aa:84:f7:c9:2b:7b:7e:2f:
                    78:19:2c:c5:68:ed:c3:fb:ca:1b:0f:eb:79:1b:5c:
                    f5:bc:95:35:b6:5f:cd:0b:cf:c7:b5:1c:50:90:0f:
                    23:f3:80:29:8a:1c:86:fc:17:35:03:60:77:90:73:
                    82:8f:0b:98:29:08:dd:91:be:8e:87:8c:35:54:d9:
                    91:c7:29:44:6a:dd:e5:09:8a:bd:8f:f2:1c:c4:6d:
                    fc:4b:a6:a8:f7:4c:cd:f1:df:44:a5:09:cc:43:e1:
                    05:07:b6:ac:fa:a6:e7:57:42:a6:2b:81:e7:84:44:
                    a1:a3:75:11:76:3a:80:14:28:31:9e:a1:e7:9d:47:
                    9e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                09:95:E0:C2:7E:78:26:6D:36:86:5C:FB:0A:07:63:48:42:63:18:A8
            X509v3 Authority Key Identifier: 
                keyid:32:C0:1B:1B:84:0F:38:CE:06:71:F7:1C:3B:47:27:E8:1F:69:A2:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAbG4QPOM4GcfccO0cn6B9porc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/CZXgwn54Jm02hlz7CgdjSEJjGKg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/MsAbG4QPOM4GcfccO0cn6B9porc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:ae:68:2d:43:0c:aa:48:06:b3:61:b9:1a:e5:9b:5c:68:64:
         6a:5d:dd:3a:ee:b0:33:4d:71:c6:9b:a7:93:8b:67:dd:28:60:
         de:bc:72:4b:39:d5:2a:56:70:66:63:4c:8a:72:8f:80:77:4b:
         2a:1f:7f:86:17:00:be:7f:f8:99:a6:bb:11:19:c0:77:d1:02:
         54:b7:3d:ac:63:30:0c:fd:92:41:63:ae:99:89:15:e8:3c:17:
         5a:8b:ae:09:60:bf:6c:e4:aa:d6:35:d9:c0:69:29:e0:34:3d:
         bd:02:cb:3e:b1:5d:c7:f2:ba:18:a0:50:98:40:9f:8b:9b:ce:
         c3:38:88:55:e8:90:f6:89:6f:e8:29:f5:55:46:12:d7:bf:b3:
         2b:20:d9:95:ee:25:25:0b:25:0a:0a:ea:3f:6d:8f:f0:cc:78:
         dc:3e:9c:82:a7:86:e8:59:43:64:13:b6:27:98:6b:9b:5d:38:
         73:a3:48:6c:dd:60:b5:46:68:82:03:3e:c5:2e:33:86:6a:16:
         04:be:5f:2a:6b:1d:0e:ac:88:1f:76:9e:61:7f:50:2e:3b:5c:
         c3:9b:4d:5a:cb:19:17:77:93:1b:f2:fc:14:f7:80:61:f2:c7:
         08:41:a3:e6:9a:f6:4f:4a:8f:49:ea:89:1e:57:fa:ae:77:3e:
         1e:e9:ef:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:37:35 2021 by LibreSSL & rpki-client.