Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/94/f2ca19-7e00-4c9f-96e7-c8b60c75dd55/1/QLQmUcnwb1wctimz1ey6FPZfPDk.roa (download)

Subject key identifier:   40:B4:26:51:C9:F0:6F:5C:1C:B6:29:B3:D5:EC:BA:14:F6:5F:3C:39 
Authority key identifier: 13:7B:0A:6D:B7:2B:E5:72:1B:15:92:1A:B1:C8:7F:B7:90:55:4F:E0
asID:                     AS3356
Prefixes:
    1: 45.92.165.0/24 (max: 24)
    2: 45.92.164.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/94/f2ca19-7e00-4c9f-96e7-c8b60c75dd55/1/QLQmUcnwb1wctimz1ey6FPZfPDk.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185826 (0x121822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137b0a6db72be5721b15921ab1c87fb790554fe0
        Validity
            Not Before: Apr 12 17:57:07 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=40b42651c9f06f5c1cb629b3d5ecba14f65f3c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f5:63:01:8e:8f:63:fc:d2:38:4f:4b:17:3b:
                    70:44:36:e3:cf:d7:43:df:a7:1a:60:70:62:97:e4:
                    b6:e6:4d:c2:91:1c:ca:46:c5:74:c8:c8:d5:26:b0:
                    39:b4:1b:a2:54:7f:d9:a7:b2:15:5e:fe:1c:d8:c1:
                    26:a4:3c:42:d2:d7:04:5b:42:7b:f6:1c:37:f6:84:
                    70:d6:16:b4:13:d5:ee:69:55:e4:1e:6b:28:94:4f:
                    60:f0:2f:fc:eb:e5:02:2b:4a:28:d0:08:de:38:db:
                    cb:3c:54:8b:fd:b2:41:37:a2:7e:7d:20:0c:89:63:
                    ab:8e:65:09:ab:da:8e:bd:7b:fd:57:ba:18:09:6e:
                    20:ed:35:9e:69:5f:7f:44:4f:27:06:f8:b7:6b:71:
                    ac:a2:75:03:2d:99:a0:7d:b2:9c:64:a0:6b:ca:28:
                    35:31:47:5f:0b:df:44:70:b4:ee:6b:f1:04:91:93:
                    96:eb:20:11:52:78:6b:7f:0d:48:bd:ea:9e:60:5d:
                    52:42:18:84:a2:b8:42:d0:96:0a:a4:fa:60:c1:a8:
                    09:e6:73:c0:fc:46:a2:e6:11:fd:79:25:b0:34:b0:
                    9c:d0:b3:b2:a8:e0:58:96:4f:f8:13:9e:26:c8:17:
                    e1:c9:cc:27:e9:64:47:4a:9f:e8:5e:c3:13:c1:20:
                    db:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                40:B4:26:51:C9:F0:6F:5C:1C:B6:29:B3:D5:EC:BA:14:F6:5F:3C:39
            X509v3 Authority Key Identifier: 
                keyid:13:7B:0A:6D:B7:2B:E5:72:1B:15:92:1A:B1:C8:7F:B7:90:55:4F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3sKbbcr5XIbFZIasch_t5BVT-A.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f2ca19-7e00-4c9f-96e7-c8b60c75dd55/1/QLQmUcnwb1wctimz1ey6FPZfPDk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f2ca19-7e00-4c9f-96e7-c8b60c75dd55/1/E3sKbbcr5XIbFZIasch_t5BVT-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-\.
    Signature Algorithm: sha256WithRSAEncryption
         20:d0:d9:c7:b3:d4:6d:a1:a9:b5:cf:c1:6e:6c:ed:46:1d:df:
         3f:bd:98:0d:af:c9:b5:77:c7:1c:b6:b1:61:bf:31:ab:13:ed:
         47:f0:84:85:8e:12:95:ae:0d:a3:90:10:8c:62:b7:aa:d7:d4:
         25:53:9f:5e:58:cc:1f:bd:96:f8:86:90:d1:49:ed:12:e4:9c:
         ce:58:27:49:55:b3:f9:23:ad:f0:8e:75:15:1c:10:26:71:97:
         65:9d:a8:de:34:16:04:04:0b:0c:d3:18:34:a1:ea:98:70:b2:
         58:56:15:85:74:ff:ee:c6:af:a5:dd:92:44:e9:f6:7e:81:ff:
         5b:52:9b:b7:02:1d:09:6a:ec:17:fb:b7:ba:35:4a:eb:d9:78:
         5d:1a:6e:6d:44:fb:c3:72:05:cb:b4:6f:5e:ae:cc:6d:23:03:
         c7:c8:f7:ce:e5:63:3f:92:d2:2a:c0:fb:0e:a2:a2:60:ca:fe:
         31:da:b2:cf:4e:94:ee:6b:be:6d:45:38:71:ac:d7:4d:15:12:
         56:01:a1:34:9b:31:71:0d:de:bb:33:5e:22:e7:13:79:e2:aa:
         f3:fe:aa:9f:71:1d:9e:dd:51:bf:d0:2b:3d:16:52:d0:73:bd:
         84:08:28:e0:92:ca:3b:02:9d:70:e0:7b:8b:e1:b8:f1:da:f3:
         98:2c:b2:8d
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDEhgiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEz
N2IwYTZkYjcyYmU1NzIxYjE1OTIxYWIxYzg3ZmI3OTA1NTRmZTAwHhcNMjEwNDEy
MTc1NzA3WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0MGI0MjY1MWM5ZjA2
ZjVjMWNiNjI5YjNkNWVjYmExNGY2NWYzYzM5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAovVjAY6PY/zSOE9LFztwRDbjz9dD36caYHBil+S25k3CkRzK
RsV0yMjVJrA5tBuiVH/Zp7IVXv4c2MEmpDxC0tcEW0J79hw39oRw1ha0E9XuaVXk
HmsolE9g8C/86+UCK0oo0AjeONvLPFSL/bJBN6J+fSAMiWOrjmUJq9qOvXv9V7oY
CW4g7TWeaV9/RE8nBvi3a3GsonUDLZmgfbKcZKBryig1MUdfC99EcLTua/EEkZOW
6yARUnhrfw1IveqeYF1SQhiEorhC0JYKpPpgwagJ5nPA/Eai5hH9eSWwNLCc0LOy
qOBYlk/4E54myBfhycwn6WRHSp/oXsMTwSDbrQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFEC0JlHJ8G9cHLYps9XsuhT2Xzw5MB8GA1UdIwQYMBaAFBN7Cm23K+VyGxWS
GrHIf7eQVU/gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RTNzS2JiY3I1WEliRlpJYXNjaF90NUJWVC1BLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85NC9mMmNhMTktN2UwMC00YzlmLTk2ZTctYzhiNjBjNzVkZDU1LzEv
UUxRbVVjbndiMXdjdGltejFleTZGUFpmUERrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9m
MmNhMTktN2UwMC00YzlmLTk2ZTctYzhiNjBjNzVkZDU1LzEvRTNzS2JiY3I1WEli
RlpJYXNjaF90NUJWVC1BLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVykMA0GCSqGSIb3DQEBCwUAA4IB
AQAg0NnHs9Rtoam1z8FubO1GHd8/vZgNr8m1d8cctrFhvzGrE+1H8ISFjhKVrg2j
kBCMYreq19QlU59eWMwfvZb4hpDRSe0S5JzOWCdJVbP5I63wjnUVHBAmcZdlnaje
NBYEBAsM0xg0oeqYcLJYVhWFdP/uxq+l3ZJE6fZ+gf9bUpu3Ah0JauwX+7e6NUrr
2XhdGm5tRPvDcgXLtG9ersxtIwPHyPfO5WM/ktIqwPsOoqJgyv4x2rLPTpTua75t
RThxrNdNFRJWAaE0mzFxDd67M14i5xN54qrz/qqfcR2e3VG/0Cs9FlLQc72ECCjg
kso7Ap1w4HuL4bjx2vOYLLKN
-----END CERTIFICATE-----

Generated at Sun Jun 13 12:35:23 2021 by LibreSSL & rpki-client.