Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/4eh9IXZA8qS0p-8RgNFLZX5XulE.roa (download)

Subject key identifier:   E1:E8:7D:21:76:40:F2:A4:B4:A7:EF:11:80:D1:4B:65:7E:57:BA:51 
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
asID:                     AS397349
Prefixes:
    1: 217.145.237.0/24 maxlen: 24
    2: 79.110.171.0/24 maxlen: 24
    3: 2a06:1e87::/40 maxlen: 48

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/4eh9IXZA8qS0p-8RgNFLZX5XulE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166650298 (0x9eee1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
        Validity
            Not Before: Jan  1 04:56:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e1e87d217640f2a4b4a7ef1180d14b657e57ba51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:1e:84:c3:71:d4:58:ea:2b:b1:7a:55:e5:
                    5e:2f:09:6b:02:81:b7:2b:d7:81:08:e2:d7:7e:08:
                    6a:4c:62:e7:bd:98:d5:1b:15:4f:f4:8e:7a:9a:80:
                    4e:c3:31:c6:4c:23:75:05:42:e5:8c:15:1f:a2:6f:
                    ad:62:07:29:c9:a0:b1:66:f1:b9:75:08:a0:32:52:
                    21:d6:86:55:61:2b:d4:96:63:68:f9:bf:3f:28:af:
                    57:1f:f4:2e:ff:b3:a5:c7:58:2d:f1:3f:98:be:29:
                    88:f6:82:a2:03:0f:d3:16:19:48:0c:4a:45:2b:ff:
                    ec:fd:8f:94:34:bd:02:04:33:58:6c:f7:37:c7:ab:
                    05:2f:7c:2a:f8:4a:1d:5e:34:84:3c:fe:1d:13:96:
                    b3:87:26:2f:41:a1:41:3a:20:b9:32:66:79:31:e7:
                    b2:f5:3b:36:e5:a0:7d:d6:f2:ca:50:0b:8b:7e:b2:
                    ae:3e:15:86:a4:5b:ae:07:65:64:43:a0:35:24:e1:
                    2b:71:9b:22:21:1f:8e:ba:9b:a6:0b:fe:a1:75:6c:
                    bd:92:d8:bd:30:43:3f:42:d9:69:fa:90:78:b4:48:
                    3f:c2:b2:7a:17:da:7c:44:0e:dd:11:b2:3c:b6:55:
                    8f:c6:4c:31:4e:7d:d3:3a:f3:dd:86:a3:78:6a:3b:
                    cf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E1:E8:7D:21:76:40:F2:A4:B4:A7:EF:11:80:D1:4B:65:7E:57:BA:51
            X509v3 Authority Key Identifier: 
                keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/4eh9IXZA8qS0p-8RgNFLZX5XulE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.171.0/24
                  217.145.237.0/24
                IPv6:
                  2a06:1e87::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:f0:d3:a1:9c:b4:38:46:c3:22:5a:0f:ad:e1:99:6a:4b:89:
         2d:f9:dc:da:a2:9e:91:2d:4b:0e:03:d3:a3:fa:07:aa:e9:05:
         c3:ea:da:b6:5c:7d:80:5c:6b:e8:47:d1:cf:7c:fb:06:a1:f5:
         20:16:5f:85:d0:41:de:c0:43:73:85:80:d6:d0:cd:63:b6:8e:
         d3:dc:08:24:26:02:f3:80:e0:58:df:3e:9c:99:63:f0:22:b8:
         97:4f:ae:ab:4a:cb:17:66:ac:0d:23:8e:20:fe:03:4b:a2:e6:
         12:ca:32:d8:f8:d3:27:49:5e:66:97:00:12:01:2e:a2:2f:d3:
         7f:97:13:d1:40:be:06:27:65:6a:65:2f:82:18:97:5f:35:67:
         4f:1b:33:7a:65:e7:ac:a8:57:76:6f:7c:5f:eb:76:d7:cf:15:
         41:27:cc:dc:17:5b:2f:a4:a2:ea:9d:5e:99:4c:10:c1:7d:6a:
         3d:e4:dc:25:15:8d:be:90:9f:bb:dd:9a:7e:9a:10:22:37:0b:
         49:cc:14:4d:a4:78:1f:ce:d1:d1:ea:f7:a4:da:0c:e8:d3:13:
         61:8c:d6:93:98:9e:13:bf:b4:70:0e:a3:2b:61:90:35:db:45:
         14:fd:84:a5:69:11:d2:19:66:11:9a:b0:94:d9:6d:ee:46:16:
         a6:eb:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 08:36:30 2022 by LibreSSL & rpki-client.