Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/HFZKUjbRPUi56_XFg5hB-ve2Y6I.roa (download)

Subject key identifier:   1C:56:4A:52:36:D1:3D:48:B9:EB:F5:C5:83:98:41:FA:F7:B6:63:A2 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS59598
Prefixes:
    1: 94.199.102.0/24 (max: 32)
    2: 45.136.2.0/24 (max: 32)
    3: 45.136.1.0/24 (max: 32)
    4: 45.136.0.0/24 (max: 32)
    5: 45.136.3.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/HFZKUjbRPUi56_XFg5hB-ve2Y6I.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363668201 (0x15ad22e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Sep  9 14:41:33 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=1c564a5236d13d48b9ebf5c5839841faf7b663a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:0d:62:c9:7c:43:bc:ea:7d:20:92:04:47:
                    1b:cd:e4:fe:4c:a8:a1:9f:a0:74:00:d5:e0:12:a6:
                    59:fe:2b:6b:80:55:f3:a2:08:eb:8d:b9:97:9b:6a:
                    5a:a1:60:fc:67:44:17:05:b4:e9:9b:69:27:1c:29:
                    69:55:f9:8a:b8:79:72:07:38:7f:f1:e1:52:39:69:
                    e5:ec:46:38:76:66:fe:1f:99:3d:f7:43:44:63:ac:
                    82:17:a8:6b:d3:5c:29:1a:3d:74:a6:42:9e:96:3d:
                    d4:c9:06:ae:81:56:6a:50:21:f9:8b:dc:c0:bc:20:
                    26:92:62:59:22:3a:c7:1c:8b:7f:e3:89:1a:f2:31:
                    d3:b4:b7:e2:a3:44:9c:9c:29:09:4b:0b:e3:88:e1:
                    a2:7c:fa:6a:e4:e3:c4:40:54:2b:47:c8:d9:66:8a:
                    8f:f9:db:87:b7:72:80:9d:d8:df:e3:75:6b:15:f0:
                    72:46:89:b9:a7:c5:8a:ef:02:bb:24:5e:c0:72:a4:
                    fb:af:32:24:54:53:1e:ea:21:57:2b:7d:43:3c:ae:
                    4b:49:4f:7e:97:d1:f9:77:3a:fb:66:64:43:b3:6a:
                    22:4d:28:ad:32:f6:27:46:38:d5:e1:6c:2e:31:77:
                    61:1c:50:4e:c5:16:51:87:c9:12:f3:1c:9f:f3:14:
                    85:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1C:56:4A:52:36:D1:3D:48:B9:EB:F5:C5:83:98:41:FA:F7:B6:63:A2
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/HFZKUjbRPUi56_XFg5hB-ve2Y6I.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.0.0/22
                  94.199.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:1e:6e:77:82:31:f8:ff:27:72:2f:ab:a4:f7:cb:6a:9f:8e:
         39:66:81:c1:c2:66:be:e0:5e:44:6b:bd:9e:ce:62:47:ab:f0:
         50:eb:ae:7f:ed:14:b9:1f:03:93:19:f0:f2:3b:4d:cc:30:76:
         91:cd:6f:14:46:ee:2e:fd:78:30:cc:23:46:de:83:ee:b7:d9:
         0d:92:89:a5:8f:64:69:e7:1d:ce:6c:a3:19:cd:77:6d:e2:00:
         78:d8:1f:7e:8c:57:70:56:88:c7:d5:40:70:4c:2d:d0:67:9a:
         f1:37:e6:5b:ae:30:65:51:10:0a:7b:56:2b:e4:61:8e:59:29:
         50:13:9c:01:48:86:54:a4:65:82:b2:24:97:53:1e:92:8d:b4:
         74:d9:6f:94:50:c2:52:cb:d6:2f:97:ea:21:bb:27:92:e3:76:
         d8:80:97:87:6c:f5:0a:ec:ed:53:a9:57:4a:f4:b1:22:de:e7:
         9f:97:19:03:97:fb:39:02:52:40:a4:cf:6a:44:de:77:39:6a:
         16:81:c9:d5:16:75:4a:45:49:d7:c5:c8:9a:64:44:c6:1f:86:
         a0:7a:81:2b:11:09:08:e0:53:66:80:e7:67:08:4a:ac:6a:8a:
         fd:f6:d6:00:ee:0a:45:4a:b8:b0:e6:78:ba:f4:95:74:ce:9c:
         f3:6f:48:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 12:11:54 2021 by LibreSSL & rpki-client.