Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3USNCwUhnj2YbtF-ITwTNz0uj_k.roa (download)

Subject key identifier:   DD:44:8D:0B:05:21:9E:3D:98:6E:D1:7E:21:3C:13:37:3D:2E:8F:F9 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS35251
Prefixes:
    1: 45.13.244.0/24 (max: 32)
    2: 45.13.245.0/24 (max: 32)
    3: 185.120.13.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3USNCwUhnj2YbtF-ITwTNz0uj_k.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319210595 (0x1306c463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: May 10 16:35:08 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dd448d0b05219e3d986ed17e213c13373d2e8ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:2b:bb:97:37:3d:8d:8a:a4:4f:fa:e2:60:
                    8a:0d:86:06:a0:a1:5f:d3:0b:43:2f:4b:56:48:14:
                    bd:ba:78:21:c8:f5:d1:f6:a9:02:4e:21:37:7e:3c:
                    85:0b:ba:2a:15:c7:79:31:ef:aa:4e:cf:7a:8b:05:
                    7d:d3:0e:71:5f:c6:d0:c3:20:0f:2c:ea:14:22:82:
                    8c:a3:c7:5a:e3:39:4e:fc:3f:6f:22:89:65:55:3d:
                    10:44:72:0a:0e:67:bb:63:77:0d:07:46:08:49:a4:
                    b3:da:5d:d2:63:c7:79:70:61:87:40:79:af:30:b4:
                    64:a3:b6:15:1f:3f:33:2d:30:e5:22:d0:f1:29:8d:
                    34:22:1d:51:76:b0:12:cb:98:1c:81:da:e3:e0:ea:
                    18:d8:7f:89:cc:09:65:9a:91:26:d8:de:4e:b9:b5:
                    e7:c8:dd:23:82:84:ca:ea:e7:7b:43:1c:2b:07:2c:
                    97:3f:c6:22:cc:2e:4b:85:c9:00:36:f1:c5:06:bf:
                    d4:f0:80:ca:82:f9:e8:c7:b2:d7:3a:56:5d:c3:db:
                    5d:2b:76:be:c0:b7:8c:a5:7f:fd:27:ed:63:70:20:
                    e4:e0:01:27:fb:8d:d5:01:a0:10:2b:be:a6:e7:f9:
                    69:9e:62:52:d3:46:05:6f:6c:9f:e7:5a:6b:e5:e1:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DD:44:8D:0B:05:21:9E:3D:98:6E:D1:7E:21:3C:13:37:3D:2E:8F:F9
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3USNCwUhnj2YbtF-ITwTNz0uj_k.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-
.....x
    Signature Algorithm: sha256WithRSAEncryption
         7b:20:b4:b7:f5:76:8f:6a:a0:10:64:a4:04:b3:9d:bb:a3:da:
         e0:96:94:5a:d3:f1:17:49:93:bd:22:e2:41:eb:9a:57:19:b8:
         d3:96:28:dd:0e:04:ca:8d:23:ef:05:f6:67:38:0b:80:05:b5:
         3f:fe:c1:d0:f2:db:44:aa:81:4b:2c:cf:15:c6:6a:7c:49:c8:
         93:dc:1e:e9:7e:22:66:b1:61:2b:60:18:3b:45:e3:31:a7:57:
         4a:85:ee:38:05:39:5f:33:d9:a9:56:23:d3:ed:29:2f:72:85:
         86:02:9c:db:aa:7b:65:56:41:9b:14:80:da:6b:9f:43:bd:c7:
         3c:79:fd:ad:32:24:c3:41:0d:86:4c:23:d9:84:3b:de:76:c1:
         c7:32:90:7a:1e:ed:5b:ec:45:60:a4:82:d8:92:3e:3e:ca:d9:
         34:53:7b:51:77:b7:e5:24:45:5c:2a:6b:a0:75:8e:db:74:b8:
         24:3e:d8:43:6f:21:63:1b:79:53:90:64:5e:d8:9f:bc:ef:68:
         6f:35:b4:93:f2:81:ee:31:50:18:98:4d:86:bb:2e:18:70:81:
         cb:3d:03:3c:da:19:0d:14:a8:ae:4d:71:74:80:68:18:ed:17:
         80:e3:c1:8d:eb:a5:08:76:a8:02:fc:8c:de:2e:45:8f:d0:72:
         3f:b4:14:1f
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEEwbEYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIxMDUx
MDE2MzUwOFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGQ0NDhkMGIwNTIx
OWUzZDk4NmVkMTdlMjEzYzEzMzczZDJlOGZmOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL4FK7uXNz2NiqRP+uJgig2GBqChX9MLQy9LVkgUvbp4Icj1
0fapAk4hN348hQu6KhXHeTHvqk7PeosFfdMOcV/G0MMgDyzqFCKCjKPHWuM5Tvw/
byKJZVU9EERyCg5nu2N3DQdGCEmks9pd0mPHeXBhh0B5rzC0ZKO2FR8/My0w5SLQ
8SmNNCIdUXawEsuYHIHa4+DqGNh/icwJZZqRJtjeTrm158jdI4KEyurne0McKwcs
lz/GIswuS4XJADbxxQa/1PCAyoL56Mey1zpWXcPbXSt2vsC3jKV//SftY3Ag5OAB
J/uN1QGgECu+puf5aZ5iUtNGBW9sn+daa+XhKBcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTdRI0LBSGePZhu0X4hPBM3PS6P+TAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
LzNVU05Dd1VobmoyWWJ0Ri1JVHdUTnowdWpfay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAS0N9AMEALl4DTANBgkqhkiG9w0B
AQsFAAOCAQEAeyC0t/V2j2qgEGSkBLOdu6Pa4JaUWtPxF0mTvSLiQeuaVxm405Yo
3Q4Eyo0j7wX2ZzgLgAW1P/7B0PLbRKqBSyzPFcZqfEnIk9we6X4iZrFhK2AYO0Xj
MadXSoXuOAU5XzPZqVYj0+0pL3KFhgKc26p7ZVZBmxSA2mufQ73HPHn9rTIkw0EN
hkwj2YQ73nbBxzKQeh7tW+xFYKSC2JI+PsrZNFN7UXe35SRFXCproHWO23S4JD7Y
Q28hYxt5U5BkXtifvO9obzW0k/KB7jFQGJhNhrsuGHCByz0DPNoZDRSork1xdIBo
GO0XgOPBjeulCHaoAvyM3i5Fj9ByP7QUHw==
-----END CERTIFICATE-----

Generated at Mon May 31 21:34:14 2021 by LibreSSL & rpki-client.