Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5ChQmEofaaFDYSKpPcs-vHDhKAA.roa (download)

Subject key identifier:   E4:28:50:98:4A:1F:69:A1:43:61:22:A9:3D:CB:3E:BC:70:E1:28:00 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS2914
Prefixes:
    1: 45.138.210.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5ChQmEofaaFDYSKpPcs-vHDhKAA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353777334 (0x151636b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Aug 10 14:24:07 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e42850984a1f69a1436122a93dcb3ebc70e12800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:c2:d3:69:f1:fc:ac:52:7e:7e:4e:6f:0f:
                    73:f0:b4:40:18:2d:a7:12:97:7a:8c:97:95:3c:d1:
                    4a:e5:57:b7:83:0f:79:98:08:c7:d7:41:9f:12:e1:
                    f6:6e:58:29:bd:24:d6:e7:32:a3:3f:c5:0a:51:26:
                    3b:ac:1f:e5:14:a5:5b:c0:d7:dd:13:3a:32:53:e0:
                    93:ef:f0:2a:3e:95:20:69:08:15:c1:e3:1c:87:aa:
                    e6:38:75:d3:5a:10:54:b2:aa:4f:a9:18:78:3e:b1:
                    5c:03:cf:cb:92:94:a6:e8:9a:cd:00:98:b6:6f:66:
                    91:6f:9a:9d:4f:62:a4:9b:d8:b7:9c:48:af:c2:51:
                    0d:54:24:98:f8:ae:c4:25:99:db:12:2f:50:35:e8:
                    50:f6:3c:73:f2:8f:59:a9:af:30:74:da:95:7d:b9:
                    05:ff:ab:f7:33:9b:14:db:26:c6:14:b5:29:7c:7c:
                    ba:65:1a:fd:ef:b1:16:50:f6:f4:c1:bd:40:be:91:
                    07:0a:17:fc:ee:62:f5:3f:01:76:8a:fa:f4:93:9d:
                    7b:22:a6:ab:08:2d:76:bf:ce:c4:5c:0a:4e:ff:f5:
                    5f:69:e7:30:69:08:dc:24:e5:2d:5f:a4:d1:82:4d:
                    17:08:d8:9e:87:b3:c8:9c:e2:6e:a9:53:3a:4c:f0:
                    fb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E4:28:50:98:4A:1F:69:A1:43:61:22:A9:3D:CB:3E:BC:70:E1:28:00
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5ChQmEofaaFDYSKpPcs-vHDhKAA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:f7:93:86:57:12:e5:4f:b5:72:3f:10:48:37:92:f3:5d:9d:
         6d:4f:bc:49:be:c8:79:b9:a1:99:e9:ba:80:9b:41:02:81:ff:
         9e:6e:ce:fd:cf:4c:80:2d:31:4e:5a:36:b5:dd:f3:d2:76:a9:
         97:37:d8:7b:58:26:a6:fa:87:0e:95:91:54:4f:61:70:4f:d7:
         1f:94:1a:fe:11:ba:9f:02:ab:c4:a1:ed:b2:2f:71:18:73:32:
         22:98:92:35:fa:6b:5d:0c:a6:49:9c:d9:36:d7:09:ce:51:42:
         29:6b:fd:e4:2e:b3:08:5a:d9:38:c6:ca:c3:d4:68:0a:eb:df:
         a8:6a:57:d1:2f:dd:f9:99:5f:3b:fc:d8:3f:c3:19:11:df:a8:
         25:25:cd:62:92:43:c5:4d:83:48:69:b5:32:ed:76:5e:19:fe:
         ee:82:99:0c:ce:2d:7f:9d:51:20:bb:9b:77:2d:93:8b:62:4e:
         7c:e0:00:93:bd:27:4e:51:a7:b8:70:71:57:44:50:c1:e6:de:
         89:fe:c2:9e:ca:a6:ac:92:27:4b:6f:86:04:af:67:84:fc:a5:
         dd:5b:74:53:23:1a:d4:05:54:13:bd:2d:fe:df:b2:c0:54:4e:
         4e:1e:69:20:0f:03:c1:67:78:56:f4:5a:3e:73:50:42:31:19:
         16:d0:ff:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:04:50 2021 by LibreSSL & rpki-client.