Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/NnUuNt6vg0Ve9js-DQJXttJ3Zfk.roa (download)

Subject key identifier:   36:75:2E:36:DE:AF:83:45:5E:F6:3B:3E:0D:02:57:B6:D2:77:65:F9 
Authority key identifier: 9F:73:AD:B2:A9:09:C6:81:FF:FD:6C:DB:1A:C3:72:57:39:F6:E8:68
asID:                     AS397373
Prefixes:
    1: 45.128.96.0/22 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/NnUuNt6vg0Ve9js-DQJXttJ3Zfk.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10158881 (0x9b0321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f73adb2a909c681fffd6cdb1ac3725739f6e868
        Validity
            Not Before: Jan  1 02:54:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=36752e36deaf83455ef63b3e0d0257b6d27765f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:a2:ea:44:05:a6:72:5a:1a:53:c3:fe:c8:
                    f1:3d:85:2e:89:4d:02:1a:00:d8:f9:dd:82:0a:2a:
                    4a:5d:0c:15:f2:b7:87:49:8e:11:99:fd:0b:bb:af:
                    3d:b2:b6:32:46:b9:e9:ad:7e:25:9b:e8:03:3a:f0:
                    e7:53:a3:3f:63:15:e4:0b:89:1b:73:0a:26:96:00:
                    1a:20:10:8a:97:ac:e0:75:08:4d:72:95:4f:e9:9a:
                    cc:df:de:39:45:c9:77:e9:0d:69:14:8e:fa:64:6d:
                    49:ae:ff:d0:a5:29:97:d6:f8:f9:8c:66:db:04:ee:
                    f2:7e:20:a4:e2:9b:40:ca:3a:39:1f:b7:cb:3f:16:
                    b8:7a:66:2a:d5:99:0a:cc:16:01:28:a1:cc:c2:ed:
                    3a:64:ac:54:32:ea:ff:9f:51:7f:fb:a6:bc:68:1c:
                    39:3c:b3:3d:c8:12:00:06:32:14:2c:f3:08:89:ee:
                    d8:04:e4:bf:85:2a:da:39:42:ab:f6:88:e0:56:85:
                    4c:44:37:7c:4a:06:38:d1:6c:b7:c2:25:3b:76:83:
                    fa:b8:69:5b:b0:0a:e4:65:be:d1:a9:36:12:fe:44:
                    17:24:95:1f:9e:c5:b9:00:20:e9:fb:53:fd:ba:fd:
                    fd:05:b1:e0:2b:9a:a4:6e:00:c4:96:f3:c0:2e:22:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                36:75:2E:36:DE:AF:83:45:5E:F6:3B:3E:0D:02:57:B6:D2:77:65:F9
            X509v3 Authority Key Identifier: 
                keyid:9F:73:AD:B2:A9:09:C6:81:FF:FD:6C:DB:1A:C3:72:57:39:F6:E8:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3OtsqkJxoH__WzbGsNyVzn26Gg.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/NnUuNt6vg0Ve9js-DQJXttJ3Zfk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/n3OtsqkJxoH__WzbGsNyVzn26Gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:74:46:6d:75:b6:43:6c:ae:0b:54:5f:78:0a:f2:d7:b8:23:
         a0:d4:78:5e:f6:5a:2c:da:d7:3c:ca:b5:23:de:f4:c5:7c:b9:
         d2:f6:f4:85:7f:c3:0a:fd:fd:08:92:9e:e3:50:27:d6:5e:7c:
         9f:68:68:7d:b5:54:7a:da:70:20:61:cc:9e:c7:30:f7:8d:83:
         74:c6:2b:68:f4:f4:4b:b5:34:66:da:53:cf:55:0e:a1:27:30:
         03:44:1c:33:5c:47:a0:0f:e0:1a:70:b4:1c:76:99:71:13:65:
         84:4a:b8:65:09:3a:d3:99:32:ab:2f:9f:aa:c5:d5:99:3b:7f:
         ac:cf:3a:f0:dd:a4:64:88:c7:e5:35:bd:b3:81:df:d5:64:0a:
         8b:53:87:2e:8e:12:b1:db:63:10:a0:7a:c1:56:3f:c0:e7:4c:
         68:02:17:3d:6d:d5:32:97:9e:ae:9f:12:72:90:51:3f:54:db:
         1d:7d:be:18:54:c1:be:3e:57:4b:6b:23:c8:bd:4f:ff:5f:49:
         e4:5f:6a:40:80:63:57:71:54:28:4e:bb:f9:e8:72:1d:d0:9a:
         f5:f2:79:f4:37:2f:73:77:92:3c:1e:97:a0:84:24:90:53:57:
         85:a1:8b:81:4c:b3:41:fd:44:31:05:ac:61:75:de:45:e8:1a:
         dd:7d:6d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 04:52:33 2022 by LibreSSL & rpki-client.