Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/82/00f57b-cef9-436c-a25f-ece515f6b554/1/WewBDvackOD9d3yzCdq9TDJmI0w.roa (download)

Subject key identifier:   59:EC:01:0E:F6:9C:90:E0:FD:77:7C:B3:09:DA:BD:4C:32:66:23:4C 
Authority key identifier: 33:EE:C6:4E:79:82:17:2F:2B:45:95:AC:C4:FA:8A:16:B1:97:4A:FB
asID:                     AS0
Prefixes:
    1: 45.128.136.0/22 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/82/00f57b-cef9-436c-a25f-ece515f6b554/1/WewBDvackOD9d3yzCdq9TDJmI0w.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144270 (0x2338e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33eec64e7982172f2b4595acc4fa8a16b1974afb
        Validity
            Not Before: Apr 26 19:08:04 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=59ec010ef69c90e0fd777cb309dabd4c3266234c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2f:ef:db:29:ab:6d:18:bb:68:a5:bc:3a:8d:
                    8f:97:95:c5:8d:62:ce:c3:c1:e5:75:79:d3:25:89:
                    72:9e:17:bf:4b:26:99:2b:ff:10:29:b4:db:4b:0d:
                    51:56:bb:4d:c5:19:13:40:a1:19:32:ff:ae:1d:29:
                    59:a4:97:45:97:fd:af:73:e7:89:f1:b8:5f:ae:4c:
                    82:78:a1:1a:c0:ea:22:d9:3d:5d:50:d8:d2:d0:a5:
                    40:de:56:58:9f:49:8b:6a:9a:70:21:3b:c4:f5:ab:
                    3d:88:07:f9:4a:84:92:72:85:e6:96:b6:0e:5f:fc:
                    6f:9b:f7:7b:1f:4a:d9:68:66:0e:08:c0:2d:7d:05:
                    f1:3d:1c:1a:e5:b2:07:0d:a4:6c:10:85:e9:65:62:
                    1c:44:f8:b3:c9:88:16:17:53:b8:9b:f5:a6:38:3a:
                    ee:8d:fa:e9:60:69:b4:12:2b:2c:15:32:06:c9:93:
                    50:d1:73:7c:d1:62:72:1b:cd:bd:4f:a4:77:06:2e:
                    ee:1f:1c:87:8e:fd:9f:c1:32:ff:0c:23:4b:d9:7a:
                    0a:35:9e:b3:df:e4:f8:b2:0e:58:c1:eb:d2:13:bb:
                    45:60:70:70:a9:27:c3:3b:d6:da:a4:bb:1b:b0:3a:
                    8e:97:dc:d3:d5:16:f6:8f:fa:03:c4:c1:55:3f:c5:
                    ff:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                59:EC:01:0E:F6:9C:90:E0:FD:77:7C:B3:09:DA:BD:4C:32:66:23:4C
            X509v3 Authority Key Identifier: 
                keyid:33:EE:C6:4E:79:82:17:2F:2B:45:95:AC:C4:FA:8A:16:B1:97:4A:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-7GTnmCFy8rRZWsxPqKFrGXSvs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/00f57b-cef9-436c-a25f-ece515f6b554/1/WewBDvackOD9d3yzCdq9TDJmI0w.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/00f57b-cef9-436c-a25f-ece515f6b554/1/M-7GTnmCFy8rRZWsxPqKFrGXSvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-..
    Signature Algorithm: sha256WithRSAEncryption
         02:57:50:9c:44:48:3d:19:67:08:cf:d2:47:1a:a5:a2:db:d2:
         e5:2b:59:14:39:c2:07:c5:f1:35:f0:38:3f:4d:6d:64:05:cd:
         fe:4c:4b:fd:6f:57:36:d5:4f:c5:e9:55:54:5a:46:7b:1f:22:
         94:b4:4a:5e:85:61:28:14:c7:ab:59:0d:94:ff:a4:82:1b:58:
         ae:8d:3c:1e:e7:bd:c0:81:3c:74:20:08:29:c6:7d:02:43:3d:
         eb:1a:5f:9c:47:fe:ea:3c:b1:9a:b1:bf:f9:1a:b9:1a:af:a3:
         8f:f5:3f:a8:3d:52:1a:14:c1:7a:91:62:94:3e:81:08:31:69:
         48:d3:0f:00:d5:a3:ff:54:93:cc:82:d5:1f:66:93:f7:22:a8:
         87:38:8a:41:b9:73:20:5e:46:f5:20:8f:fc:55:ea:0b:d7:24:
         ca:87:12:3d:51:0a:3c:cb:64:6b:97:64:23:71:14:b5:ca:de:
         c6:b3:a6:64:9a:43:a9:81:bc:4d:7a:46:0b:3f:cd:9d:d6:83:
         b2:ca:8e:c1:93:84:1e:87:43:1a:c5:53:59:24:22:5c:b2:75:
         68:7e:4b:1e:20:7a:ae:b7:a3:31:c1:b3:7c:62:a0:79:03:ec:
         3c:27:66:01:4f:54:c2:2c:66:87:c9:28:91:e2:21:c5:ce:9e:
         e1:de:c3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon May 17 10:18:03 2021 by LibreSSL & rpki-client.