Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/23f423-ce4c-4b3e-b558-7cb8d09b4d51/1/Oj-Rv45yRPtrLyczyY1PR8oIo5E.roa (download)

Subject key identifier:   3A:3F:91:BF:8E:72:44:FB:6B:2F:27:33:C9:8D:4F:47:CA:08:A3:91 
Authority key identifier: 00:C1:69:ED:53:3D:8E:D9:FC:67:B7:9E:8B:0E:BD:17:F1:28:1A:BC
asID:                     AS399130
Prefixes:
    1: 5.181.196.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/23f423-ce4c-4b3e-b558-7cb8d09b4d51/1/Oj-Rv45yRPtrLyczyY1PR8oIo5E.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3389 (0xd3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00c169ed533d8ed9fc67b79e8b0ebd17f1281abc
        Validity
            Not Before: Oct  3 10:49:04 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3a3f91bf8e7244fb6b2f2733c98d4f47ca08a391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cf:6c:6a:30:b6:3a:e4:eb:3b:54:34:6e:a9:
                    25:3e:88:68:4b:85:79:b6:a7:20:51:34:f9:d0:03:
                    ca:c6:57:d0:42:de:a3:64:87:07:af:64:b2:fb:20:
                    39:98:52:a4:8e:45:58:10:81:52:a1:20:83:bf:3c:
                    87:3a:4b:ce:bd:94:11:18:03:89:ec:16:35:b0:13:
                    d6:9e:70:c3:0a:43:31:87:78:f9:12:a2:43:6e:05:
                    65:27:ea:66:21:67:de:c3:26:9a:6e:ae:e6:ab:ae:
                    a3:57:76:33:f0:d9:a7:d2:24:91:1b:07:6c:8a:bb:
                    42:77:fc:3e:15:b9:bf:36:90:54:2a:bd:aa:a9:7b:
                    9e:4f:c8:0b:a4:ee:2a:47:07:1f:b0:b1:2e:21:24:
                    77:f4:7a:7f:cb:5b:c7:66:bf:6b:97:3c:ab:2c:71:
                    81:62:7b:20:e7:9f:90:c6:3e:51:9d:c4:3f:8a:91:
                    2c:2d:8b:b2:23:36:df:cf:ad:2d:1f:8d:88:cd:c1:
                    d3:d3:27:03:90:0b:94:24:dd:2f:bf:4e:21:1a:c6:
                    18:a3:c2:cc:30:04:23:73:df:22:a7:f6:63:b0:48:
                    7e:7a:30:98:46:2a:cb:08:7c:d4:22:97:6d:a1:01:
                    1a:f6:00:d4:e5:dc:23:02:1a:46:39:cf:e4:f6:ba:
                    d6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3A:3F:91:BF:8E:72:44:FB:6B:2F:27:33:C9:8D:4F:47:CA:08:A3:91
            X509v3 Authority Key Identifier: 
                keyid:00:C1:69:ED:53:3D:8E:D9:FC:67:B7:9E:8B:0E:BD:17:F1:28:1A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMFp7VM9jtn8Z7eeiw69F_EoGrw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/23f423-ce4c-4b3e-b558-7cb8d09b4d51/1/Oj-Rv45yRPtrLyczyY1PR8oIo5E.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/23f423-ce4c-4b3e-b558-7cb8d09b4d51/1/AMFp7VM9jtn8Z7eeiw69F_EoGrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:4f:1b:e5:37:27:ea:66:46:4b:99:cd:49:fa:fa:d3:96:07:
         32:92:0a:81:45:d8:f7:03:63:53:a9:f2:51:7a:9e:62:af:9f:
         82:35:f7:a6:dc:3d:95:29:19:ac:de:47:e4:e1:57:b2:7a:a8:
         4b:9a:f4:a8:f7:fd:11:db:84:14:42:b7:e2:33:73:0a:68:bf:
         b5:ca:86:55:2f:25:4f:0b:a1:25:1b:6b:15:d3:13:e4:67:c3:
         65:f1:67:9c:0d:8a:cd:5f:9d:92:80:40:2a:fc:14:d4:5a:4e:
         1b:95:2f:cd:70:2d:b3:47:3d:6a:76:5c:8a:d6:92:ce:b3:6a:
         c1:f1:ce:34:90:ec:be:87:36:90:9b:76:db:d8:ba:37:9b:0b:
         fe:c8:ca:d6:b0:d0:0f:2c:98:81:9c:5d:d2:c9:cd:5c:e8:4a:
         42:be:4f:30:ae:12:f6:5d:df:4f:7c:69:36:e2:22:18:cc:fc:
         a3:5d:f5:72:ac:bc:22:70:38:05:e3:99:8d:84:18:90:f6:73:
         9f:b5:2f:6a:b6:a5:08:62:51:be:43:b0:8e:34:25:f3:9e:dc:
         11:9e:d4:f7:4e:42:ad:69:8b:37:6e:d7:1b:9c:0a:54:67:f3:
         cb:a1:c9:30:ef:be:d7:f8:d3:51:d9:24:b6:dc:41:e0:65:f0:
         c6:33:4a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Oct 3 12:25:03 2021 by LibreSSL & rpki-client.