Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/XwDWG1m08wzTZG9ysqGBr1Qkc50.roa (download)

Subject key identifier:   5F:00:D6:1B:59:B4:F3:0C:D3:64:6F:72:B2:A1:81:AF:54:24:73:9D 
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
asID:                     AS396356
Prefixes:
    1: 45.132.115.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/XwDWG1m08wzTZG9ysqGBr1Qkc50.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16843612 (0x101035c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
        Validity
            Not Before: Jan  1 13:01:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5f00d61b59b4f30cd3646f72b2a181af5424739d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:21:00:c2:44:10:37:ad:b0:8b:da:10:48:
                    ec:82:d0:63:cb:36:e0:b9:0b:96:c8:1a:90:d6:40:
                    a3:fd:0d:61:1d:fb:2f:50:7c:a0:d9:b6:59:76:6c:
                    0f:2c:a4:da:26:17:3d:78:ce:a6:55:03:69:f7:df:
                    3a:96:52:b9:6b:ca:d2:39:02:cc:3c:40:12:55:62:
                    80:99:ef:48:31:8b:0d:f6:58:fd:ff:e4:98:5c:c1:
                    ae:19:71:bc:e7:05:fa:bf:88:6d:86:a8:08:e0:b3:
                    3d:7e:b6:30:bc:e2:aa:d1:4e:1e:ed:e9:ba:0e:d5:
                    94:de:c9:4e:b6:02:f9:f5:57:d4:94:44:ec:5d:be:
                    6b:cc:61:4b:da:47:50:54:62:8e:a6:c9:14:e1:c0:
                    4e:cd:45:75:ea:ee:76:e0:97:2f:a4:f6:a8:ee:30:
                    73:38:e6:2d:b9:72:73:18:8b:24:ec:8f:fd:e3:f9:
                    09:70:d3:8a:4e:c4:4d:1b:55:97:d1:3c:0a:d4:49:
                    af:47:2d:63:5d:49:8e:80:8e:78:1a:9d:0b:a9:36:
                    f0:bd:4b:33:6d:69:38:32:a7:b1:0f:48:f8:22:31:
                    b1:d7:36:61:b4:5e:f2:2f:61:aa:6a:8f:e0:68:4d:
                    f3:86:89:a0:94:d4:34:b0:fb:d4:f6:8b:c2:c8:f4:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:00:D6:1B:59:B4:F3:0C:D3:64:6F:72:B2:A1:81:AF:54:24:73:9D
            X509v3 Authority Key Identifier: 
                keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/XwDWG1m08wzTZG9ysqGBr1Qkc50.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:b7:54:06:57:20:e7:9c:ff:a5:3a:99:b7:72:28:b8:3a:55:
         8e:6f:f7:17:0d:0b:cc:10:6d:d2:f3:c6:8e:e9:36:eb:b6:b0:
         7d:00:10:c5:6b:12:66:09:83:76:d5:7a:0e:c0:59:13:bd:52:
         9b:6c:4b:82:66:52:ae:b4:c8:fe:b3:9e:35:53:42:7b:fe:6b:
         03:e7:ce:72:9f:a2:25:fd:ed:1e:60:fb:2f:89:b9:74:3d:91:
         d8:82:17:2c:b5:e0:67:a6:8a:aa:c2:d8:5f:76:04:48:88:dc:
         41:b4:cd:f7:cc:e5:cf:e7:2d:1e:90:72:6a:82:a8:8f:3b:ae:
         a0:6e:37:9b:6c:7b:63:ff:cb:11:e2:14:f2:37:0e:eb:1c:29:
         b9:05:3e:73:be:6e:7e:06:26:fa:7a:41:7e:a2:a9:f5:b6:dc:
         b8:ec:9f:17:3e:d8:74:91:b4:ab:3e:bc:e3:64:24:35:fd:01:
         3a:fa:e9:fe:36:53:93:8e:1b:86:69:7f:cc:96:3a:a1:c5:ed:
         96:ae:47:01:47:ac:a3:3e:96:e7:62:d0:c3:f2:9c:5f:7a:79:
         c5:27:0f:d0:92:d9:0f:1a:f7:6c:7d:8b:60:d9:9f:de:38:23:
         2b:b4:4d:4b:69:c4:76:a3:46:ff:1d:e6:98:20:11:75:80:0e:
         24:43:9b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 15:28:03 2022 by LibreSSL & rpki-client.