Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/C7ZpjcnpBC2hpoI7dkQkZG6MZ18.roa (download)

Subject key identifier:   0B:B6:69:8D:C9:E9:04:2D:A1:A6:82:3B:76:44:24:64:6E:8C:67:5F 
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
asID:                     AS397630
Prefixes:
    1: 45.137.19.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/C7ZpjcnpBC2hpoI7dkQkZG6MZ18.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109468182 (0x6865a16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Oct 12 09:07:31 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0bb6698dc9e9042da1a6823b764424646e8c675f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ad:e3:61:0d:48:6d:39:db:a6:25:b9:13:61:
                    ab:13:d7:7c:43:4f:80:9b:42:af:73:64:56:8c:4a:
                    f3:a3:e9:e8:57:23:f3:64:94:1e:55:c7:2b:65:05:
                    9d:31:1a:92:25:db:0a:37:8f:2a:82:1d:93:36:3a:
                    7c:40:01:0a:04:b3:39:ec:29:93:f2:59:2b:e9:85:
                    8c:ee:da:f1:b5:28:27:86:bd:26:b0:e6:b0:7e:f4:
                    80:e6:20:3d:db:5d:1b:72:d6:bd:21:73:79:64:2f:
                    25:25:5c:2e:85:b1:6b:02:b1:10:57:5f:a4:a0:f5:
                    5a:a4:09:54:98:28:12:46:0e:12:bd:8e:86:81:b3:
                    a2:4b:82:27:2c:02:47:b8:6a:59:93:6d:a7:30:0e:
                    c9:8c:62:d4:5a:75:e8:30:64:6c:91:81:a9:f8:63:
                    96:e6:81:3a:a9:0a:e9:0c:55:c4:b9:41:aa:d7:f6:
                    e4:3d:61:e9:2e:78:b7:21:f1:e5:30:40:bb:13:a7:
                    ee:90:26:16:f9:b2:50:bb:e7:73:2f:89:03:c7:97:
                    61:5e:db:c2:df:e4:81:e0:77:8f:5c:95:76:aa:16:
                    c5:8a:7c:64:30:60:1c:2e:b3:6f:93:8f:c4:58:c4:
                    ce:75:21:29:f6:42:69:3a:03:b5:42:50:0e:a2:dd:
                    37:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0B:B6:69:8D:C9:E9:04:2D:A1:A6:82:3B:76:44:24:64:6E:8C:67:5F
            X509v3 Authority Key Identifier: 
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/C7ZpjcnpBC2hpoI7dkQkZG6MZ18.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:d0:ff:f0:af:04:f5:51:5d:ce:16:b3:4d:bc:e5:84:62:15:
         c8:91:b2:e1:84:4e:b7:20:39:01:4e:d6:1a:79:0c:1f:2c:c8:
         a3:b6:fc:bf:89:28:9d:bc:48:08:e4:80:02:c4:83:f5:04:5c:
         55:13:05:b2:6a:07:47:52:02:c5:ce:71:9f:74:92:5a:aa:df:
         9b:7b:ca:3d:7d:06:bc:36:b2:0a:2b:94:a0:83:32:12:32:64:
         7d:6b:1c:f8:40:ec:e0:0d:ec:dd:ca:41:64:ef:fd:3c:51:d8:
         01:da:f0:ae:4f:09:79:84:3e:0e:02:37:c6:ed:0b:20:c9:7c:
         61:64:ba:80:41:8a:ab:7e:e1:33:03:37:83:ed:a8:1f:58:64:
         c3:9f:a5:3d:fe:e1:6f:46:0d:15:8b:4d:69:fd:2f:01:91:81:
         c9:fa:c0:89:65:ce:90:4f:33:a8:6d:96:98:50:53:33:59:9f:
         4e:37:5f:c6:91:c1:43:7f:b7:47:be:c4:10:9d:49:b8:83:a1:
         c1:46:ef:8a:f3:d7:48:42:33:49:48:a0:c6:c2:a7:dd:13:69:
         84:9a:c2:35:56:81:ee:20:9f:47:ff:bd:39:8f:5c:3f:31:04:
         64:3e:e3:6b:15:1a:df:0a:44:d5:d1:2c:bb:47:73:6c:8d:2f:
         01:de:11:17
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBoZaFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YjBjMGQwNDIyNTU2NmRiOTVlOWFkM2IyZWY2MDUwMTQ5NzVhYWEyMB4XDTIxMTAx
MjA5MDczMVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGJiNjY5OGRjOWU5
MDQyZGExYTY4MjNiNzY0NDI0NjQ2ZThjNjc1ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI2t42ENSG0526YluRNhqxPXfENPgJtCr3NkVoxK86Pp6Fcj
82SUHlXHK2UFnTEakiXbCjePKoIdkzY6fEABCgSzOewpk/JZK+mFjO7a8bUoJ4a9
JrDmsH70gOYgPdtdG3LWvSFzeWQvJSVcLoWxawKxEFdfpKD1WqQJVJgoEkYOEr2O
hoGzokuCJywCR7hqWZNtpzAOyYxi1Fp16DBkbJGBqfhjluaBOqkK6QxVxLlBqtf2
5D1h6S54tyHx5TBAuxOn7pAmFvmyULvncy+JA8eXYV7bwt/kgeB3j1yVdqoWxYp8
ZDBgHC6zb5OPxFjEznUhKfZCaToDtUJQDqLdN2cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQLtmmNyekELaGmgjt2RCRkboxnXzAfBgNVHSMEGDAWgBSbDA0EIlVm25Xp
rTsu9gUBSXWqojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L213d05CQ0pWWnR1VjZhMDdMdllGQVVsMXFxSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvMGVjNmQyLWYxZDctNGIwYS1hZDMzLWU4ZWYyZjA5NTk4ZS8x
L0M3WnBqY25wQkMyaHBvSTdka1FrWkc2TVoxOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
MGVjNmQyLWYxZDctNGIwYS1hZDMzLWU4ZWYyZjA5NTk4ZS8xL213d05CQ0pWWnR1
VjZhMDdMdllGQVVsMXFxSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2JEzANBgkqhkiG9w0BAQsFAAOC
AQEAKdD/8K8E9VFdzhazTbzlhGIVyJGy4YROtyA5AU7WGnkMHyzIo7b8v4konbxI
COSAAsSD9QRcVRMFsmoHR1ICxc5xn3SSWqrfm3vKPX0GvDayCiuUoIMyEjJkfWsc
+EDs4A3s3cpBZO/9PFHYAdrwrk8JeYQ+DgI3xu0LIMl8YWS6gEGKq37hMwM3g+2o
H1hkw5+lPf7hb0YNFYtNaf0vAZGByfrAiWXOkE8zqG2WmFBTM1mfTjdfxpHBQ3+3
R77EEJ1JuIOhwUbvivPXSEIzSUigxsKn3RNphJrCNVaB7iCfR/+9OY9cPzEEZD7j
axUa3wpE1dEsu0dzbI0vAd4RFw==
-----END CERTIFICATE-----

Generated at Tue Oct 12 11:34:41 2021 by LibreSSL & rpki-client.