Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/90/17d918-6831-4d1c-aa01-f3e02a82a9de/1/zCCCY99Cz_YWIL_8x2rxlggAnhQ.roa (download)

Subject key identifier:   CC:20:82:63:DF:42:CF:F6:16:20:BF:FC:C7:6A:F1:96:08:00:9E:14 
Authority key identifier: B1:37:6D:C4:34:AB:3A:47:9D:EC:09:13:F5:2B:2F:12:57:9A:1A:C4
asID:                     AS399587
Prefixes:
    1: 45.95.0.0/22 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/90/17d918-6831-4d1c-aa01-f3e02a82a9de/1/zCCCY99Cz_YWIL_8x2rxlggAnhQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106508 (0x1a00c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1376dc434ab3a479dec0913f52b2f12579a1ac4
        Validity
            Not Before: Sep 11 06:01:19 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=cc208263df42cff61620bffcc76af19608009e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a4:b6:e9:02:46:9e:d2:2c:9a:15:ff:72:75:
                    5f:48:86:7e:5f:68:e7:81:a4:52:97:04:b2:77:c6:
                    16:0b:06:d0:0e:b4:31:02:d9:5f:b8:0d:06:2e:4b:
                    ec:7c:88:22:a7:cc:05:17:a5:b9:48:fe:02:b8:5d:
                    66:41:5c:2a:03:96:92:e2:c6:d2:82:e4:4c:fc:1a:
                    ae:f8:e3:12:54:38:8a:be:bf:2b:9a:14:5f:b5:93:
                    7e:09:3b:07:50:b6:b7:09:e1:8e:2d:4c:43:26:05:
                    e0:d2:2c:37:7f:5d:5d:28:3b:ec:ef:4e:e3:db:9c:
                    e0:7c:98:b7:da:7e:41:a7:04:60:67:a1:d1:24:5f:
                    19:3f:9f:9e:b6:ea:b7:e7:d0:fd:e7:5e:b3:a5:0f:
                    72:96:89:78:68:39:95:3c:9b:75:31:6c:ae:e8:02:
                    dd:a3:76:fd:fd:a9:cd:24:22:66:2c:a9:bb:87:ca:
                    6c:66:9c:59:65:27:7d:99:68:a8:57:7b:c5:34:97:
                    9b:92:d9:18:a3:7d:bb:48:0d:fb:a0:ba:d8:10:34:
                    45:44:6f:41:9c:37:58:33:ca:c9:70:a3:fd:4c:d2:
                    35:e6:c4:68:73:3d:fc:5f:95:8e:64:a9:14:13:ab:
                    aa:df:1e:fd:d0:27:08:0b:07:2c:4e:ed:9a:49:0d:
                    9c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CC:20:82:63:DF:42:CF:F6:16:20:BF:FC:C7:6A:F1:96:08:00:9E:14
            X509v3 Authority Key Identifier: 
                keyid:B1:37:6D:C4:34:AB:3A:47:9D:EC:09:13:F5:2B:2F:12:57:9A:1A:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTdtxDSrOked7AkT9SsvEleaGsQ.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/17d918-6831-4d1c-aa01-f3e02a82a9de/1/zCCCY99Cz_YWIL_8x2rxlggAnhQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/17d918-6831-4d1c-aa01-f3e02a82a9de/1/sTdtxDSrOked7AkT9SsvEleaGsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:8a:94:dc:f0:dd:e7:67:6e:5b:ac:63:8f:8d:65:b2:53:b5:
         9e:ab:f1:c8:a3:02:05:ff:3c:3a:21:e7:3b:a8:2a:7a:09:be:
         06:6d:06:ab:2c:51:58:fc:fc:02:5d:41:27:5d:d0:72:99:10:
         f7:42:c3:56:7f:b3:0f:da:7b:76:f6:4b:5d:cb:51:32:df:66:
         4a:d3:73:b5:d7:a3:6a:c2:9a:18:e2:99:c7:43:64:2a:86:fa:
         74:49:32:98:e8:81:b8:3d:67:4c:5e:1f:b4:75:12:28:84:12:
         03:47:90:76:1a:43:c3:8f:c3:8c:47:dc:2f:de:f9:44:4c:a1:
         16:31:ef:67:62:00:ff:fb:8d:aa:72:b3:1d:a1:87:3a:66:22:
         81:7e:aa:ad:09:04:9b:52:c6:ad:c7:26:c4:dd:fc:dd:eb:2c:
         48:25:78:cb:36:b4:31:b0:e1:25:ca:e3:30:80:0c:de:9e:f9:
         59:80:d2:cd:3e:f7:ba:ff:1e:37:09:c4:21:ab:bd:59:5a:b8:
         94:77:3a:bc:b6:e1:92:7f:ba:f4:5e:f6:7b:38:a8:1e:1e:8c:
         0b:54:35:16:04:69:3b:64:f0:4f:4c:d8:bc:91:b1:4b:d5:c7:
         45:13:9c:f1:c0:d5:68:e4:31:a0:44:76:5e:fb:69:ab:3f:7c:
         e5:d1:0c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:45:55 2021 by LibreSSL & rpki-client.