Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/c5/19986e-19cf-4e59-86b5-5b431e8a6027/1/45gLSf_WV5Vi4vf2xgbHcg7UT5s.roa (download)

Subject key identifier:   E3:98:0B:49:FF:D6:57:95:62:E2:F7:F6:C6:06:C7:72:0E:D4:4F:9B 
Authority key identifier: 56:D9:93:44:37:14:54:7C:51:C8:3A:2D:27:44:77:5C:86:EF:FC:6E
asID:                     AS26636
Prefixes:
    1: 45.157.32.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/c5/19986e-19cf-4e59-86b5-5b431e8a6027/1/45gLSf_WV5Vi4vf2xgbHcg7UT5s.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23886354 (0x16c7a12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d993443714547c51c83a2d2744775c86effc6e
        Validity
            Not Before: Apr  7 15:42:11 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e3980b49ffd6579562e2f7f6c606c7720ed44f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:52:da:09:52:71:63:53:b6:de:89:d9:18:bd:
                    12:cb:31:cd:d0:17:bf:e3:81:95:3f:d6:a1:fd:c8:
                    25:57:c2:e4:d1:c8:04:77:2d:a4:94:3f:af:0d:ec:
                    df:39:ff:5a:2a:9d:93:73:cb:c2:a6:94:e7:b2:5e:
                    84:3a:35:e6:aa:a2:f3:7d:2b:f0:35:73:de:0d:df:
                    a7:75:f6:2e:4e:0f:6c:e0:f3:32:07:e8:3a:d1:0d:
                    9a:a1:06:8e:19:d1:df:b1:32:45:17:55:fc:b8:ae:
                    d7:bb:f8:95:d9:45:56:95:c4:29:82:0b:f1:cb:2d:
                    7f:c2:6c:61:f5:06:03:f3:32:7f:db:02:27:66:9e:
                    bd:c1:4f:b8:95:1b:b7:7d:ea:df:7c:88:fb:74:9b:
                    dd:93:c0:3c:de:c4:5d:ea:08:16:f3:be:7d:8c:c9:
                    20:22:a2:78:7f:7a:c4:22:61:24:91:03:9b:01:ff:
                    48:e2:32:f7:71:18:e7:73:31:f9:28:35:59:a1:4f:
                    cb:58:3e:84:55:0f:95:f0:a2:06:0d:cd:f2:8f:c6:
                    30:9f:1a:75:14:0b:33:59:df:ce:38:b2:82:5a:c0:
                    80:7f:6c:22:46:4d:07:70:b2:df:f5:87:4a:83:5b:
                    08:d2:0a:79:2c:57:f5:36:ce:6f:4e:1b:d3:3c:ba:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E3:98:0B:49:FF:D6:57:95:62:E2:F7:F6:C6:06:C7:72:0E:D4:4F:9B
            X509v3 Authority Key Identifier: 
                keyid:56:D9:93:44:37:14:54:7C:51:C8:3A:2D:27:44:77:5C:86:EF:FC:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtmTRDcUVHxRyDotJ0R3XIbv_G4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19986e-19cf-4e59-86b5-5b431e8a6027/1/45gLSf_WV5Vi4vf2xgbHcg7UT5s.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19986e-19cf-4e59-86b5-5b431e8a6027/1/VtmTRDcUVHxRyDotJ0R3XIbv_G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:85:f9:de:80:6f:d6:f9:8d:98:46:e9:a3:ee:89:6a:04:c2:
         53:f9:07:32:c0:1c:d1:c9:88:10:8b:b2:9c:61:92:03:9b:7d:
         68:e0:03:32:54:1a:45:83:21:2d:3b:e3:25:36:7e:96:d0:a5:
         0e:1e:a1:74:fb:01:86:fc:cf:78:0e:d2:3b:a4:27:b8:56:af:
         cd:6d:db:d3:cd:d0:d9:cb:ec:20:2d:2e:77:ab:4b:d7:48:66:
         d5:4c:69:9c:91:4f:6e:c2:89:a6:92:e8:04:a7:33:84:21:01:
         04:99:44:9b:e3:2c:94:15:ab:8a:10:0a:6c:d9:d8:5e:d5:5b:
         26:6b:19:12:69:bd:37:b8:2a:0c:52:28:bf:81:76:2a:e2:99:
         bc:56:b2:3d:b5:1b:84:50:32:7e:6d:6f:c7:e6:1f:99:f0:ec:
         5f:6b:38:c3:e4:40:2f:0a:89:04:09:d1:05:de:f1:6e:48:5d:
         47:7e:be:6e:c3:d0:ca:5c:69:66:ce:55:6a:f2:f8:e1:c2:8d:
         3c:5d:c9:9b:47:73:35:b9:c9:1f:91:6e:8d:b3:f8:a9:ed:f4:
         d5:52:94:99:f1:69:60:2f:18:cf:10:f1:ef:f0:61:c9:e4:f4:
         3f:6c:90:c5:1f:d5:ed:38:5f:e9:4c:52:1e:69:62:21:60:f8:
         43:d3:60:fe
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAWx6EjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NmQ5OTM0NDM3MTQ1NDdjNTFjODNhMmQyNzQ0Nzc1Yzg2ZWZmYzZlMB4XDTIxMDQw
NzE1NDIxMVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTM5ODBiNDlmZmQ2
NTc5NTYyZTJmN2Y2YzYwNmM3NzIwZWQ0NGY5YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANdS2glScWNTtt6J2Ri9EssxzdAXv+OBlT/Wof3IJVfC5NHI
BHctpJQ/rw3s3zn/Wiqdk3PLwqaU57JehDo15qqi830r8DVz3g3fp3X2Lk4PbODz
MgfoOtENmqEGjhnR37EyRRdV/Liu17v4ldlFVpXEKYIL8cstf8JsYfUGA/Myf9sC
J2aevcFPuJUbt33q33yI+3Sb3ZPAPN7EXeoIFvO+fYzJICKieH96xCJhJJEDmwH/
SOIy93EY53Mx+Sg1WaFPy1g+hFUPlfCiBg3N8o/GMJ8adRQLM1nfzjiyglrAgH9s
IkZNB3Cy3/WHSoNbCNIKeSxX9TbOb04b0zy6Uj0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTjmAtJ/9ZXlWLi9/bGBsdyDtRPmzAfBgNVHSMEGDAWgBRW2ZNENxRUfFHI
Oi0nRHdchu/8bjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Z0bVRSRGNVVkh4UnlEb3RKMFIzWElidl9HNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvMTk5ODZlLTE5Y2YtNGU1OS04NmI1LTViNDMxZThhNjAyNy8x
LzQ1Z0xTZl9XVjVWaTR2ZjJ4Z2JIY2c3VVQ1cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
MTk5ODZlLTE5Y2YtNGU1OS04NmI1LTViNDMxZThhNjAyNy8xL1Z0bVRSRGNVVkh4
UnlEb3RKMFIzWElidl9HNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2dIDANBgkqhkiG9w0BAQsFAAOC
AQEAOIX53oBv1vmNmEbpo+6JagTCU/kHMsAc0cmIEIuynGGSA5t9aOADMlQaRYMh
LTvjJTZ+ltClDh6hdPsBhvzPeA7SO6QnuFavzW3b083Q2cvsIC0ud6tL10hm1Uxp
nJFPbsKJppLoBKczhCEBBJlEm+MslBWrihAKbNnYXtVbJmsZEmm9N7gqDFIov4F2
KuKZvFayPbUbhFAyfm1vx+YfmfDsX2s4w+RALwqJBAnRBd7xbkhdR36+bsPQylxp
Zs5VavL44cKNPF3Jm0dzNbnJH5FujbP4qe301VKUmfFpYC8YzxDx7/BhyeT0P2yQ
xR/V7Thf6UxSHmliIWD4Q9Ng/g==
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:01:24 2021 by LibreSSL & rpki-client.