Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/XlcJyxUrMWcRunhn6yvGrxWGONE.roa (download)

Subject key identifier:   5E:57:09:CB:15:2B:31:67:11:BA:78:67:EB:2B:C6:AF:15:86:38:D1 
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
asID:                     AS397373
Prefixes:
    1: 45.85.108.0/22 maxlen: 22

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/XlcJyxUrMWcRunhn6yvGrxWGONE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19006661 (0x12204c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
        Validity
            Not Before: Jan  1 05:59:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5e5709cb152b316711ba7867eb2bc6af158638d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4b:2f:1a:7f:35:eb:9b:1b:1c:54:0c:fd:a5:
                    da:04:03:5c:cf:1b:fe:47:22:53:a7:04:0a:73:02:
                    1c:50:cc:0d:2b:bd:27:3f:9d:f2:ee:c4:c0:c5:84:
                    3f:50:3f:ad:ba:ea:9c:18:be:79:42:98:66:b3:39:
                    07:9d:c6:0f:7e:a9:74:3b:74:74:8a:b2:f6:5f:8a:
                    53:76:ef:36:12:71:47:03:e0:07:58:e9:84:40:7b:
                    d4:bb:ad:f4:17:bc:40:43:4b:c8:5a:58:70:80:bf:
                    1c:67:cd:be:ec:60:17:2a:c7:2c:c6:f2:11:bd:12:
                    90:cf:b1:3b:9e:97:e8:ea:d1:ab:12:e7:a8:51:3e:
                    e0:53:dc:41:80:e7:cb:84:37:c0:bc:f7:71:eb:10:
                    1d:bb:52:9b:a0:e6:8f:f8:e6:09:04:c4:27:e6:b6:
                    54:d1:b8:1b:8d:64:f2:7a:7e:14:1a:b6:d1:9c:26:
                    87:c4:9f:3c:87:20:50:bf:6b:40:b2:d0:e2:ec:fa:
                    6c:02:6f:7e:c7:a7:3f:a2:1c:ab:26:62:ee:9b:8a:
                    26:49:f7:ce:d6:14:04:e6:c0:8c:bf:05:b3:ff:0d:
                    24:cc:df:d2:52:5a:07:dc:ca:7f:2e:d2:06:77:cf:
                    f2:36:b3:68:de:56:9b:c1:e7:28:89:5b:b3:4e:a0:
                    76:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5E:57:09:CB:15:2B:31:67:11:BA:78:67:EB:2B:C6:AF:15:86:38:D1
            X509v3 Authority Key Identifier: 
                keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/XlcJyxUrMWcRunhn6yvGrxWGONE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:75:8c:ca:cf:fa:ca:cc:f9:f9:37:70:80:61:31:08:73:11:
         75:b3:19:47:36:24:72:e1:5b:85:e1:11:99:2d:75:1d:ac:dc:
         d3:ac:28:a0:84:69:60:1b:dd:9c:16:7b:5d:ab:02:fc:46:5b:
         43:c4:6b:9b:24:3b:6e:88:a1:fd:ee:ab:b5:57:df:fa:d3:b5:
         08:d0:eb:8f:28:52:52:45:fb:bf:3a:74:ff:68:d6:15:9c:cd:
         56:b9:94:19:e7:ce:19:54:45:46:e0:b2:1b:1c:e4:d5:68:cd:
         43:21:d9:00:75:df:1f:4c:fe:cd:95:67:92:15:2c:a3:35:5c:
         1e:fa:6a:5f:43:d6:0c:3e:de:c6:dd:92:7f:8a:da:34:c3:e3:
         dd:59:b1:47:b4:49:fa:0c:e1:6f:42:15:94:cd:dc:d1:e4:a2:
         c0:03:e3:3a:81:a6:7a:3b:a8:36:7d:07:5e:a4:7c:67:11:c0:
         24:9c:5b:9d:6f:76:f2:94:3d:c2:7c:e4:41:a1:cc:a2:4d:f3:
         b4:c0:a3:65:86:53:08:13:58:9d:7a:db:a9:2b:32:3a:35:98:
         68:f9:3a:5d:33:62:3f:3f:ba:b1:0d:63:92:0c:37:07:6e:7c:
         1f:59:43:4f:da:b3:b3:35:c6:28:2d:05:b4:7b:76:6f:90:8f:
         73:ff:b6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 08:38:15 2022 by LibreSSL & rpki-client.