Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/dKyy-myeCGaDSGjpwA-3L-47gNc.roa (download)

Subject key identifier:   74:AC:B2:FA:6C:9E:08:66:83:48:68:E9:C0:0F:B7:2F:EE:3B:80:D7 
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
asID:                     AS399746
Prefixes:
    1: 45.130.204.0/22 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/dKyy-myeCGaDSGjpwA-3L-47gNc.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65142510 (0x3e1feee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
        Validity
            Not Before: Jan  1 08:59:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=74acb2fa6c9e0866834868e9c00fb72fee3b80d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1c:52:fe:fe:ab:b8:04:fd:d2:d2:ba:a4:e6:
                    e4:91:e4:25:70:d1:ff:8a:9e:93:08:5d:62:17:28:
                    81:7b:3a:f1:82:85:41:38:b5:69:1b:ee:97:04:82:
                    40:46:f1:8e:52:21:b6:dc:a8:f7:99:9a:11:eb:54:
                    c6:ed:2d:83:e9:00:e1:25:0b:9b:d1:00:eb:83:40:
                    9f:aa:7c:e7:71:e1:ac:01:e4:2f:44:a0:98:8f:f6:
                    17:18:52:1e:38:2f:c9:50:cc:8a:5c:f7:84:df:c5:
                    3d:56:9f:d4:86:41:85:9b:50:6f:55:91:5d:0b:a9:
                    24:bf:7f:0e:d6:42:e1:f9:89:53:60:77:9b:f5:6e:
                    d5:85:96:d7:c7:83:24:78:e4:00:4b:dc:8c:3f:f3:
                    75:cd:1b:1a:cd:04:62:fe:22:4b:6e:ee:aa:f1:91:
                    d2:82:f5:8b:ad:65:69:ca:11:90:f4:8e:4f:73:8a:
                    2f:14:2d:0c:b9:3f:4a:05:50:1d:25:1a:a9:73:55:
                    08:ea:f6:b3:d9:a4:b7:e8:bc:08:0e:89:43:54:cb:
                    a3:a1:2a:c6:ad:77:bc:eb:b9:b1:7b:d7:72:12:4c:
                    d6:60:d2:5c:61:fe:5a:5d:ed:14:0b:d3:80:1a:75:
                    e3:9f:5e:18:29:0a:ae:6a:de:02:97:d4:85:4a:9f:
                    0d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                74:AC:B2:FA:6C:9E:08:66:83:48:68:E9:C0:0F:B7:2F:EE:3B:80:D7
            X509v3 Authority Key Identifier: 
                keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/dKyy-myeCGaDSGjpwA-3L-47gNc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:5b:7c:e8:2c:ab:dc:9a:3a:e6:4c:41:0c:a2:1f:fd:b5:b6:
         43:d5:e4:5f:bf:11:c1:b0:94:89:81:73:16:35:3d:dd:b0:9c:
         c3:67:e6:ad:c9:f6:5c:48:9c:9f:95:a4:63:ba:f3:14:15:33:
         d0:ae:98:f2:70:11:e8:fd:a9:15:e9:6e:d5:c5:a3:86:38:05:
         6d:ff:9a:8d:d3:78:16:1c:ac:59:f0:67:b9:b0:21:f4:fb:54:
         7b:ca:c7:cf:46:c1:29:76:7d:97:17:41:ad:28:1b:97:3a:c6:
         3a:6f:1e:60:a5:f3:0e:b6:92:40:3a:fa:c8:95:f2:47:0b:df:
         2e:44:0c:8e:17:ab:36:47:f4:d1:c8:6b:3a:69:0b:8c:56:eb:
         d0:7f:7f:88:b4:15:3f:37:7f:2a:69:28:f6:38:47:63:1f:2a:
         64:6f:e5:cc:36:f0:b2:94:a2:53:b3:00:89:fa:9e:54:a1:e4:
         f1:1c:d4:14:96:b3:32:4f:de:72:aa:90:3d:ff:45:8a:d0:9f:
         cc:4a:5a:92:1c:59:ac:a0:4a:d9:66:5a:fa:39:29:20:39:50:
         69:e5:16:40:12:b5:59:c4:42:95:d1:d6:a2:1d:a8:2d:e9:e2:
         1e:1b:29:77:cd:77:9a:90:e1:51:db:d7:b5:01:c4:49:8d:a4:
         93:4c:fe:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 12:05:01 2022 by LibreSSL & rpki-client.