Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/b6/581c00-39db-405c-9ab6-d6180f7f9c55/1/jFtR_T7jttZf0PxN7XfRoIIvXHg.roa (download)

Subject key identifier:   8C:5B:51:FD:3E:E3:B6:D6:5F:D0:FC:4D:ED:77:D1:A0:82:2F:5C:78 
Authority key identifier: 65:08:AE:DB:95:BF:FE:64:1F:7F:4C:FC:5E:5A:12:5C:B8:0F:28:5C
asID:                     AS26636
Prefixes:
    1: 45.153.4.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/b6/581c00-39db-405c-9ab6-d6180f7f9c55/1/jFtR_T7jttZf0PxN7XfRoIIvXHg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37196608 (0x2379340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6508aedb95bffe641f7f4cfc5e5a125cb80f285c
        Validity
            Not Before: Mar 23 05:09:22 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=8c5b51fd3ee3b6d65fd0fc4ded77d1a0822f5c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:5c:6a:da:74:d9:44:6b:e2:a7:7b:61:53:
                    78:61:eb:7e:02:25:81:5e:31:0f:3a:41:08:c6:9d:
                    5f:fe:ce:f9:65:30:12:eb:4e:1b:fb:2e:82:fe:df:
                    2e:cf:a8:cf:28:6f:11:bc:ef:17:b5:91:1e:63:63:
                    f8:30:c0:af:de:d6:8d:6d:41:f4:f5:40:15:ba:74:
                    3e:bb:b4:55:05:c5:89:2f:e5:6b:2f:03:fc:3b:9e:
                    f7:0a:30:35:42:11:0b:15:e9:eb:57:c8:5b:d1:f4:
                    dd:7c:bc:e6:ac:5c:2f:da:ef:b9:b3:7c:da:7c:da:
                    c9:b3:e0:a0:f2:2d:6c:f0:3d:48:88:94:a6:7f:72:
                    71:d2:02:a7:3c:1e:e9:aa:72:eb:f3:8b:17:78:9a:
                    ee:67:f5:c7:69:73:59:5d:75:32:7f:30:9c:a8:58:
                    a1:0b:6e:89:4e:ef:53:4c:d7:4f:18:47:4f:2f:7b:
                    86:29:01:b1:79:a4:84:eb:5b:c3:61:05:a6:4b:25:
                    75:d5:dc:05:d6:50:07:d6:9f:fa:38:a7:80:e9:92:
                    7f:9c:01:74:7e:50:66:4b:4c:a8:18:13:a8:d8:f5:
                    77:b6:c7:b1:1e:69:bc:cc:a2:4a:37:ce:22:36:9e:
                    a1:a4:b4:97:11:75:1c:a4:3a:e0:1a:12:52:61:27:
                    2d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8C:5B:51:FD:3E:E3:B6:D6:5F:D0:FC:4D:ED:77:D1:A0:82:2F:5C:78
            X509v3 Authority Key Identifier: 
                keyid:65:08:AE:DB:95:BF:FE:64:1F:7F:4C:FC:5E:5A:12:5C:B8:0F:28:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQiu25W__mQff0z8XloSXLgPKFw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/581c00-39db-405c-9ab6-d6180f7f9c55/1/jFtR_T7jttZf0PxN7XfRoIIvXHg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/581c00-39db-405c-9ab6-d6180f7f9c55/1/ZQiu25W__mQff0z8XloSXLgPKFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:26:dc:43:23:8b:ab:dc:a0:61:af:6d:73:df:eb:a2:ce:9d:
         e3:e8:7a:d7:75:ba:26:81:b4:dd:22:7b:da:f5:a4:6e:75:86:
         6d:92:71:4c:56:85:32:f4:e9:37:1e:b0:a4:12:19:8c:ed:34:
         98:ae:f2:88:19:b2:f3:69:ae:5c:9c:c5:10:aa:06:16:34:13:
         d4:f2:b1:eb:49:35:5e:9c:88:6c:5b:0e:1d:03:e8:d7:0a:95:
         20:0a:87:12:a0:88:19:f7:04:2d:4b:17:de:c8:ee:91:6b:a3:
         f7:3e:0c:25:4f:6a:de:61:47:04:fd:b9:2e:49:cb:55:c5:b6:
         68:ff:71:1b:4a:db:99:be:0f:0d:b1:85:a2:28:1a:a3:82:ce:
         4a:50:41:f9:5e:05:da:1a:a0:5b:da:97:43:86:e0:49:ca:4c:
         a2:0b:b2:be:c3:94:a5:dd:1e:ec:d4:a9:30:21:f5:f1:77:c2:
         b2:e6:11:fc:22:41:5e:0d:52:be:fd:86:4a:6e:c1:b5:cc:79:
         79:22:a0:63:d4:d1:66:73:e5:31:6b:27:5b:b9:17:59:41:14:
         8b:e0:27:8a:6e:19:c1:ef:a4:7c:cf:19:b6:cd:78:47:ca:4a:
         5c:84:48:d9:09:22:f9:7c:8c:1a:10:a5:26:e4:2f:8c:44:47:
         81:dd:24:b5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAjeTQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NTA4YWVkYjk1YmZmZTY0MWY3ZjRjZmM1ZTVhMTI1Y2I4MGYyODVjMB4XDTIxMDMy
MzA1MDkyMloXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGM1YjUxZmQzZWUz
YjZkNjVmZDBmYzRkZWQ3N2QxYTA4MjJmNWM3ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKfdXGradNlEa+Kne2FTeGHrfgIlgV4xDzpBCMadX/7O+WUw
EutOG/sugv7fLs+ozyhvEbzvF7WRHmNj+DDAr97WjW1B9PVAFbp0Pru0VQXFiS/l
ay8D/Due9wowNUIRCxXp61fIW9H03Xy85qxcL9rvubN82nzaybPgoPItbPA9SIiU
pn9ycdICpzwe6apy6/OLF3ia7mf1x2lzWV11Mn8wnKhYoQtuiU7vU0zXTxhHTy97
hikBsXmkhOtbw2EFpkslddXcBdZQB9af+jingOmSf5wBdH5QZktMqBgTqNj1d7bH
sR5pvMyiSjfOIjaeoaS0lxF1HKQ64BoSUmEnLU0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSMW1H9PuO21l/Q/E3td9Gggi9ceDAfBgNVHSMEGDAWgBRlCK7blb/+ZB9/
TPxeWhJcuA8oXDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pRaXUyNVdfX21RZmYwejhYbG9TWExnUEtGdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvNTgxYzAwLTM5ZGItNDA1Yy05YWI2LWQ2MTgwZjdmOWM1NS8x
L2pGdFJfVDdqdHRaZjBQeE43WGZSb0lJdlhIZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
NTgxYzAwLTM5ZGItNDA1Yy05YWI2LWQ2MTgwZjdmOWM1NS8xL1pRaXUyNVdfX21R
ZmYwejhYbG9TWExnUEtGdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2ZBDANBgkqhkiG9w0BAQsFAAOC
AQEAYCbcQyOLq9ygYa9tc9/ros6d4+h613W6JoG03SJ72vWkbnWGbZJxTFaFMvTp
Nx6wpBIZjO00mK7yiBmy82muXJzFEKoGFjQT1PKx60k1XpyIbFsOHQPo1wqVIAqH
EqCIGfcELUsX3sjukWuj9z4MJU9q3mFHBP25LknLVcW2aP9xG0rbmb4PDbGFoiga
o4LOSlBB+V4F2hqgW9qXQ4bgScpMoguyvsOUpd0e7NSpMCH18XfCsuYR/CJBXg1S
vv2GSm7Btcx5eSKgY9TRZnPlMWsnW7kXWUEUi+Anim4Zwe+kfM8Zts14R8pKXIRI
2Qki+XyMGhClJuQvjERHgd0ktQ==
-----END CERTIFICATE-----

Generated at Tue Sep 14 12:52:33 2021 by LibreSSL & rpki-client.