Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/7BaWAPl1tUdH_l8fakwo6AeO9lI.roa (download)

Subject key identifier:   EC:16:96:00:F9:75:B5:47:47:FE:5F:1F:6A:4C:28:E8:07:8E:F6:52 
Authority key identifier: A4:12:52:8C:69:DB:5F:C5:CB:AE:D7:4C:B2:2E:44:A2:BC:E4:45:AD
asID:                     AS396982
Prefixes:
    1: 45.88.200.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/7BaWAPl1tUdH_l8fakwo6AeO9lI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125136211 (0x7756d53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a412528c69db5fc5cbaed74cb22e44a2bce445ad
        Validity
            Not Before: Jan  1 01:59:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec169600f975b54747fe5f1f6a4c28e8078ef652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:5d:af:5e:ce:82:f5:d8:ad:6f:c3:e5:71:92:
                    23:4c:09:38:fd:e9:b2:c2:18:8a:38:8b:33:a8:8e:
                    40:5a:6e:89:94:73:d4:e0:c4:b7:17:b5:cc:74:8f:
                    99:06:95:ae:f8:d8:40:ef:0a:0f:e2:32:ec:13:ef:
                    6a:44:c9:1c:a8:55:bc:b2:bf:27:f9:82:5b:4c:19:
                    32:6e:a0:71:d6:bf:74:2c:99:d4:50:82:cf:47:d1:
                    9d:55:e6:b7:aa:74:9c:8b:6d:c6:95:43:3d:b5:c5:
                    72:da:34:55:ad:53:94:c0:5a:44:9a:f9:eb:a2:9d:
                    a8:ae:bc:1a:c6:8f:4b:c4:43:19:1c:71:30:25:6e:
                    56:21:bf:2c:42:0d:39:00:ff:25:af:17:ad:a0:b2:
                    12:a3:6a:27:ae:1d:cd:6d:97:c4:23:2a:1c:f6:6e:
                    73:dd:3c:ff:bb:aa:c9:48:e3:c9:ac:98:ef:16:a7:
                    83:53:50:40:2b:de:50:02:73:af:65:27:2d:16:e2:
                    2a:54:a6:e1:b3:57:c7:61:76:7f:04:31:21:72:24:
                    24:3f:f4:b2:62:b1:c7:fb:3a:73:6c:6b:6c:48:55:
                    25:23:d0:22:93:38:66:c2:bd:19:c8:2e:44:22:bf:
                    96:e3:f2:b3:b4:c1:e4:63:02:fd:11:0e:2e:3d:29:
                    ff:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EC:16:96:00:F9:75:B5:47:47:FE:5F:1F:6A:4C:28:E8:07:8E:F6:52
            X509v3 Authority Key Identifier: 
                keyid:A4:12:52:8C:69:DB:5F:C5:CB:AE:D7:4C:B2:2E:44:A2:BC:E4:45:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBJSjGnbX8XLrtdMsi5EorzkRa0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/7BaWAPl1tUdH_l8fakwo6AeO9lI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/pBJSjGnbX8XLrtdMsi5EorzkRa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:b3:c1:41:14:46:49:d0:0a:d4:e6:76:25:c6:54:ac:09:45:
         f4:21:89:32:e4:94:84:ec:89:02:7c:d9:e4:af:ee:0c:a9:fe:
         60:49:21:72:05:7b:3f:ab:3c:7f:f5:73:78:1a:34:7b:e1:cb:
         99:20:2e:47:cf:5c:f5:9c:68:b0:f2:3d:f9:4c:4a:a9:37:e1:
         f6:da:39:85:96:84:af:16:c3:e8:2f:85:0f:0d:58:47:65:51:
         d8:37:3f:91:94:3c:4e:bb:b6:99:7e:2d:87:bd:4b:84:2b:e3:
         8d:ec:52:85:df:d2:4f:51:64:d9:eb:86:0a:13:27:8a:8a:17:
         88:fd:23:f0:af:9b:d0:88:ce:d4:ac:ac:3f:78:43:5c:30:1e:
         0c:5a:ce:6b:f1:ca:ae:c8:56:25:5c:d6:8b:76:be:dd:fe:31:
         e9:8c:db:5e:04:5f:b0:b6:fe:96:e1:5b:8e:17:ae:1f:a4:e9:
         e8:38:a5:4c:6b:4d:2d:93:c8:80:46:b3:e9:dd:29:58:e3:1f:
         b8:5f:49:d0:5a:3d:a3:9b:ec:25:97:7d:21:09:8f:83:3c:10:
         7c:6b:f4:12:f6:41:3d:52:74:99:44:ec:d6:98:c9:11:a8:4a:
         87:f9:b5:3d:82:ec:2d:ec:ab:c0:03:8d:0b:d4:37:2d:61:da:
         21:84:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 04:52:45 2022 by LibreSSL & rpki-client.