Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/c1/e9583a-3868-4eb7-b4d4-24eb114b4e4f/1/uGSACRwtT4rn7YJ4NCf9J0b1QLU.roa (download)

Subject key identifier:   B8:64:80:09:1C:2D:4F:8A:E7:ED:82:78:34:27:FD:27:46:F5:40:B5 
Authority key identifier: 67:5C:CE:59:C3:69:61:1E:3F:AD:1C:60:D5:15:F5:13:55:84:14:A5
asID:                     AS3356
Prefixes:
    1: 45.14.46.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/c1/e9583a-3868-4eb7-b4d4-24eb114b4e4f/1/uGSACRwtT4rn7YJ4NCf9J0b1QLU.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92030065 (0x57c4471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=675cce59c369611e3fad1c60d515f513558414a5
        Validity
            Not Before: Jan  1 02:46:15 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b86480091c2d4f8ae7ed82783427fd2746f540b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2c:4f:78:e1:0a:15:bd:35:77:dc:0b:82:bd:
                    ea:7c:8a:b5:71:e8:4b:9b:19:9a:dd:f1:9f:ad:8c:
                    2b:5e:dd:0a:8d:a9:fb:fa:79:77:3d:7d:07:f3:15:
                    a0:71:c5:a3:d2:66:7b:5e:7d:36:a4:c0:e6:5b:a4:
                    72:cb:97:fd:f3:73:ac:ed:6a:42:8b:98:cc:48:33:
                    93:3d:6d:f3:66:be:fb:dc:00:5a:e0:17:c0:61:70:
                    44:0f:27:a1:74:71:8c:06:bc:b0:6c:30:1b:9b:b5:
                    fb:70:95:fd:9b:e4:66:7e:64:38:19:a8:3a:bd:79:
                    44:46:0e:da:70:e4:57:e6:cb:56:c6:85:5c:d5:ac:
                    01:64:ea:0d:44:61:e4:7f:fa:c7:ea:b8:63:d1:3c:
                    fd:ae:64:cb:dc:c3:cb:8d:19:d5:24:d8:43:d6:67:
                    31:75:e2:d1:6e:3c:a7:76:8e:87:e1:7b:06:b1:98:
                    2a:96:ea:15:c0:56:97:10:1b:99:b0:e4:a0:6a:b4:
                    e5:3d:4a:62:68:1f:95:c9:b0:fd:41:29:96:dd:dc:
                    f0:fd:47:08:93:f4:52:73:61:04:5e:a1:a4:ae:92:
                    12:3f:21:06:68:31:ff:ff:2c:4d:47:f9:dd:b6:7f:
                    0f:da:83:68:08:84:ab:e5:5a:10:3d:1c:aa:8e:a7:
                    a5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B8:64:80:09:1C:2D:4F:8A:E7:ED:82:78:34:27:FD:27:46:F5:40:B5
            X509v3 Authority Key Identifier: 
                keyid:67:5C:CE:59:C3:69:61:1E:3F:AD:1C:60:D5:15:F5:13:55:84:14:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1zOWcNpYR4_rRxg1RX1E1WEFKU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e9583a-3868-4eb7-b4d4-24eb114b4e4f/1/uGSACRwtT4rn7YJ4NCf9J0b1QLU.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e9583a-3868-4eb7-b4d4-24eb114b4e4f/1/Z1zOWcNpYR4_rRxg1RX1E1WEFKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-..
    Signature Algorithm: sha256WithRSAEncryption
         5c:c9:82:ea:37:8e:df:40:a6:45:1f:a0:08:b2:82:43:4a:1f:
         0a:d4:eb:d0:fc:9f:87:4c:10:46:b6:eb:82:fa:25:4d:22:4a:
         4b:6a:3b:19:6a:33:42:55:0e:53:66:9e:ce:dd:91:69:3d:24:
         46:32:af:cc:81:17:5f:1f:ee:85:25:c4:67:ff:2f:0f:6d:c6:
         31:68:c6:a2:91:3f:33:a5:25:d8:32:31:53:be:8c:97:61:7a:
         ed:c3:3c:e4:83:24:58:6b:4b:c9:c9:c3:3f:17:6d:74:4f:c9:
         4b:c3:24:47:55:b0:14:1b:a9:f8:06:09:1d:f9:d9:9c:ff:4f:
         2f:e0:8c:7a:f1:57:94:cb:eb:10:01:13:cd:08:13:48:7f:2c:
         bb:4b:55:42:6b:de:16:92:16:b7:5b:8e:3d:86:2c:0b:96:b5:
         f1:7d:63:85:d7:59:90:76:24:a0:83:e8:00:d9:f4:d0:e8:91:
         7c:8f:3d:0a:65:f4:0c:e6:6f:1c:e3:45:cd:84:dd:25:dc:83:
         79:47:fa:5f:65:67:c9:36:e7:d1:be:09:a6:40:4e:b5:3c:45:
         55:27:be:6b:cd:84:ea:bc:df:2b:f3:e0:92:bb:01:32:7f:88:
         91:2c:7f:c3:7e:b4:c0:b8:74:8d:97:f9:01:1f:8f:41:88:30:
         3b:11:6d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon May 10 09:36:45 2021 by LibreSSL & rpki-client.