Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Fot63W0oQmxpXuJMcNVX3j4AJaQ.roa (download)

Subject key identifier:   16:8B:7A:DD:6D:28:42:6C:69:5E:E2:4C:70:D5:57:DE:3E:00:25:A4 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS209060
Prefixes:
    1: 45.12.161.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Fot63W0oQmxpXuJMcNVX3j4AJaQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316094194 (0x12d736f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: May  3 17:17:58 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=168b7add6d28426c695ee24c70d557de3e0025a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7c:62:ca:40:0a:1c:bc:29:2b:a6:61:5e:92:
                    06:d3:4c:20:dc:0f:9b:ac:fe:89:40:11:1a:b1:75:
                    4d:c7:f9:e6:6b:56:ee:fc:93:c8:26:40:6e:79:66:
                    2c:c7:5e:22:4a:6b:51:22:ad:4e:66:e5:d7:46:2e:
                    98:52:d4:de:4c:96:15:e5:b0:ec:63:de:a5:05:0e:
                    3f:24:e0:c1:b4:81:11:87:fc:59:69:89:fa:b6:11:
                    7c:85:2d:00:48:35:23:ee:97:38:02:d2:7e:68:4e:
                    04:96:72:ee:95:2a:a6:c0:ea:ed:3b:94:9e:7e:4a:
                    15:66:89:41:a3:47:8c:e5:28:00:e2:3c:3b:52:02:
                    d3:ca:1b:1d:da:15:79:21:f5:73:39:c5:a8:4d:c3:
                    c2:72:0d:6c:2d:c4:42:24:a9:66:7f:4f:2a:39:78:
                    b3:72:e2:36:1d:0c:39:78:7a:83:6e:40:41:47:15:
                    b9:38:9e:c7:81:50:c5:ff:84:02:04:ac:14:00:b5:
                    d7:e4:68:48:04:c4:3a:bc:a5:8b:7a:fa:3b:70:ee:
                    60:64:05:29:32:57:1b:cd:8f:ff:e0:56:67:47:c2:
                    2b:b0:00:5b:fc:ce:9f:8e:ab:72:6e:26:54:7b:9d:
                    d5:42:3f:c9:f5:51:65:4e:51:c4:c7:80:62:68:45:
                    b7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                16:8B:7A:DD:6D:28:42:6C:69:5E:E2:4C:70:D5:57:DE:3E:00:25:A4
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Fot63W0oQmxpXuJMcNVX3j4AJaQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:28:9d:38:05:bf:63:60:08:36:59:ba:ae:0d:0a:99:ea:d1:
         e9:12:61:e1:1c:54:0f:81:28:f8:03:19:56:ee:0c:51:17:7f:
         fd:d3:c4:2e:8b:03:02:63:d1:e7:7c:18:a2:3f:11:f3:76:29:
         ff:b6:37:ba:be:47:49:73:a0:e0:3f:68:b5:ca:31:52:52:e8:
         46:fd:6b:ed:2e:5b:7b:d3:17:2a:71:02:f4:cd:c8:db:5f:48:
         33:89:8a:97:81:fa:46:ca:d5:e8:6a:6c:ae:af:06:71:17:c6:
         45:cc:b1:57:b7:09:91:8b:32:97:d4:dd:c1:ca:26:db:71:49:
         c2:74:31:20:7f:7f:46:65:f3:e8:22:38:cf:85:f9:fe:68:23:
         d8:31:8a:a1:30:e9:52:31:85:5b:78:5e:df:43:ff:a4:85:d2:
         84:f1:ae:8b:be:ff:d5:a0:01:0b:0b:c4:16:5e:f9:eb:08:c9:
         32:97:1f:78:b2:d0:f7:4b:8c:9a:87:e2:9d:b8:a4:db:a5:8c:
         16:aa:98:ea:ae:ec:ed:b7:8d:8a:66:a0:66:3f:ff:37:d3:9e:
         60:8f:cc:e5:8e:eb:e1:e3:68:47:56:f1:0e:be:37:f4:39:f3:
         32:11:40:3c:53:32:ca:d0:bf:5c:6c:91:a8:18:d7:d1:06:75:
         6b:cd:5b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:04:54 2021 by LibreSSL & rpki-client.