Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/CtM1Jg9CJBQua388sGOf8-_ZdPQ.roa (download)

Subject key identifier:   0A:D3:35:26:0F:42:24:14:2E:6B:7F:3C:B0:63:9F:F3:EF:D9:74:F4 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS30058
Prefixes:
    1: 45.138.210.0/24 maxlen: 32

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/CtM1Jg9CJBQua388sGOf8-_ZdPQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388693973 (0x172affd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Dec  1 06:35:11 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0ad335260f4224142e6b7f3cb0639ff3efd974f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:fe:f6:36:57:b0:17:f3:2c:b4:31:8e:92:
                    e0:d6:7f:a3:fb:73:13:8d:6f:09:d1:57:54:e3:aa:
                    d4:b8:ba:53:ed:83:19:fd:30:a9:a4:34:42:3d:59:
                    2b:1e:48:f6:fd:2f:38:aa:54:e6:7e:e4:bd:9c:b6:
                    33:08:b7:fc:18:65:ef:d9:a6:f3:c5:57:83:5a:4f:
                    79:d0:02:66:96:eb:b6:8d:a9:47:3d:26:3f:9f:18:
                    ca:e7:9f:59:59:9f:72:cc:52:b6:f7:57:f3:81:8b:
                    d5:b9:6b:ab:63:d5:3b:95:9b:08:ef:32:da:cf:49:
                    7c:42:86:b4:b1:95:0f:c8:6f:e0:50:5f:cb:bb:e2:
                    89:24:47:ea:1f:97:65:1a:ae:7f:1a:ae:f1:1f:ff:
                    20:cc:e3:cf:dc:70:5d:1b:dc:47:07:24:6c:7c:b1:
                    70:a2:80:6a:b0:86:f4:d4:93:e6:b4:5c:3e:3d:3f:
                    97:eb:68:b6:2d:fc:19:54:6c:74:19:1b:d5:93:96:
                    83:62:1c:8c:68:42:24:cf:5b:f3:2c:88:92:e0:b8:
                    ec:d7:03:95:eb:f2:52:16:50:25:cb:3f:34:6b:81:
                    f2:23:21:73:9e:64:71:b5:b2:b9:9e:83:39:32:1f:
                    27:84:63:fa:3b:33:dd:79:1e:d3:52:4e:bf:25:f9:
                    03:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0A:D3:35:26:0F:42:24:14:2E:6B:7F:3C:B0:63:9F:F3:EF:D9:74:F4
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/CtM1Jg9CJBQua388sGOf8-_ZdPQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:f4:b1:64:34:19:26:39:b5:ec:5c:27:cc:fd:95:a0:ee:e6:
         97:47:73:94:54:f1:66:3b:1a:44:9d:89:d9:e7:74:2b:39:5c:
         2f:19:9a:49:54:10:cf:03:96:94:fb:b1:3c:43:83:12:cb:20:
         c5:6f:72:05:ef:0f:7a:4b:27:71:1f:f3:02:f5:1b:e2:45:07:
         e6:db:e8:51:db:95:38:96:fc:cf:98:6b:20:b5:45:61:5b:f7:
         a3:39:5a:01:2a:45:8d:c5:84:d0:2b:10:08:8a:0c:27:94:5e:
         f5:00:72:cd:7b:bb:19:4d:6a:ec:8a:05:b8:b9:4b:e5:21:6f:
         13:a0:b2:0c:8d:e4:f2:8b:ec:64:bd:34:66:c2:73:bd:11:3e:
         ec:ea:13:05:3e:7f:52:43:c5:ea:99:03:d6:d3:ab:92:76:01:
         73:ea:33:67:5b:8d:5f:f9:ee:77:5f:50:36:d0:69:1c:37:df:
         b3:9b:7a:cf:a5:76:42:8a:18:19:be:55:b7:d4:53:88:05:8a:
         c0:fc:90:09:17:fa:fe:4f:a0:b0:52:a4:29:2d:72:ff:ab:c6:
         4f:f3:b5:11:d5:74:b8:a9:53:52:fa:5f:f1:4a:f6:19:c3:05:
         e8:f3:75:69:77:e8:30:ae:80:78:3a:af:b9:b0:f8:2c:97:6a:
         a7:63:b1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----