Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/RXz2eCmVvfRmhrMUyAFtYfVz3W0.roa (download)

Subject key identifier:   45:7C:F6:78:29:95:BD:F4:66:86:B3:14:C8:01:6D:61:F5:73:DD:6D 
Authority key identifier: 76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
asID:                     AS0
Prefixes:
    1: 80.73.136.0/21 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/RXz2eCmVvfRmhrMUyAFtYfVz3W0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135039987 (0x80c8bf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
        Validity
            Not Before: Jan  1 03:40:26 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=457cf6782995bdf46686b314c8016d61f573dd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c0:31:75:c3:c6:da:74:f6:c1:0b:78:8e:f2:
                    30:14:30:4d:ba:c1:e9:8f:8f:99:18:82:5c:ef:c5:
                    97:a8:67:77:f2:3f:cf:a8:e7:4d:81:42:27:3a:43:
                    f9:c6:ce:88:00:be:00:b5:7a:9b:14:be:4b:9b:76:
                    59:58:eb:61:fd:8d:c5:07:1a:4f:57:31:5d:ad:c6:
                    85:0b:bc:5d:22:1e:08:ce:81:ae:67:e0:dd:b5:05:
                    92:1b:01:c9:d6:12:59:65:e8:63:dd:d2:74:e6:fb:
                    3d:11:1d:67:ac:1e:43:d3:77:3c:66:ef:bb:9c:9a:
                    79:26:95:f1:23:28:a2:07:1c:45:f6:27:33:82:7d:
                    b1:05:07:67:4f:10:c6:25:a8:8a:0b:7b:d8:c8:c6:
                    f1:d5:62:04:f2:cf:30:79:e6:e4:6e:b4:2c:39:41:
                    be:9f:28:bc:b9:a4:8b:08:81:f5:a2:d1:73:ec:e4:
                    aa:65:96:d1:17:0d:0c:15:a6:af:6d:e0:c7:b0:c9:
                    b8:63:7c:b2:e8:25:46:86:01:f7:f7:cd:7e:41:1a:
                    4a:2b:ae:2c:f8:6a:f1:e0:42:76:a8:61:9d:9d:ac:
                    88:86:1b:b5:22:f4:bf:79:3e:8f:02:7a:56:8e:01:
                    71:2a:7e:e4:91:f9:f5:d8:8c:f9:63:36:72:ed:fa:
                    51:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                45:7C:F6:78:29:95:BD:F4:66:86:B3:14:C8:01:6D:61:F5:73:DD:6D
            X509v3 Authority Key Identifier: 
                keyid:76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/RXz2eCmVvfRmhrMUyAFtYfVz3W0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....PI.
    Signature Algorithm: sha256WithRSAEncryption
         81:2d:bc:e1:02:45:59:a7:4f:e7:0c:ba:8d:40:6c:c5:65:6c:
         39:a1:78:4f:a6:7b:eb:de:51:ac:93:da:9d:f6:66:5b:4e:d3:
         f2:b4:cd:da:64:bd:df:78:cc:7e:8b:df:9c:97:78:5b:15:8c:
         92:7e:0b:7a:5f:ee:f5:83:ee:88:e1:bb:81:69:04:77:49:6a:
         9a:16:6e:34:70:d1:92:aa:4c:64:eb:2d:15:d5:40:97:8c:1e:
         55:ef:40:76:cc:3b:86:8f:1f:e7:1a:06:85:90:9c:a7:01:27:
         4a:60:42:08:89:4f:c8:fd:a1:d4:2d:fa:80:35:17:36:04:c0:
         82:56:4b:80:70:02:37:19:23:97:1d:c7:8f:27:15:2c:73:17:
         19:b1:6e:1f:a4:89:63:b6:66:f6:d2:e8:33:b1:7e:e6:1a:9a:
         63:aa:33:3c:66:52:71:47:44:55:83:7f:7b:d0:86:11:e5:79:
         89:25:27:74:20:b8:d2:31:8b:6a:a8:e8:06:d1:9e:c6:34:6a:
         20:cd:13:03:ee:4b:5c:27:5b:15:35:4c:bf:84:31:8f:1a:11:
         42:45:3f:82:b0:5a:61:b6:d1:d9:cd:af:26:b6:82:99:fc:42:
         e2:5b:d4:64:7a:5c:7e:b5:89:bb:cb:63:c0:5f:6c:b3:a7:97:
         93:f8:64:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:31:43 2021 by LibreSSL & rpki-client.