Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/KQItuzo10N-x2eOJ2gYvAuKWSAM.roa (download)

Subject key identifier:   29:02:2D:BB:3A:35:D0:DF:B1:D9:E3:89:DA:06:2F:02:E2:96:48:03 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS64021
Prefixes:
    1: 45.148.128.0/22 (max: 22)
    2: 194.156.157.0/24 (max: 24)
    3: 128.0.117.0/24 (max: 24)
    4: 128.0.119.0/24 (max: 24)
    5: 45.134.1.0/24 (max: 32)
    6: 45.131.25.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/KQItuzo10N-x2eOJ2gYvAuKWSAM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361859837 (0x15918afd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Sep  3 10:47:43 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=29022dbb3a35d0dfb1d9e389da062f02e2964803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a0:08:06:7a:90:61:57:9a:22:7e:00:55:bb:
                    77:80:c2:89:35:82:c3:68:b9:fc:c1:16:2b:5f:56:
                    07:53:e3:40:61:ac:8e:27:bf:72:5c:f5:a4:3b:66:
                    41:e4:b3:2f:97:4e:6d:d4:37:7c:9e:e9:46:02:38:
                    df:65:3d:99:f1:96:76:56:8b:50:f9:3f:60:3a:36:
                    dd:e3:eb:f2:52:11:2c:82:53:3a:9e:a8:59:02:9b:
                    d8:2a:ac:02:8c:67:db:38:f4:c0:c8:8a:1a:51:82:
                    95:1f:86:d8:d7:14:4c:f1:80:8a:ad:a0:57:a5:75:
                    ff:d5:62:89:3a:65:23:75:72:d7:7a:c7:72:79:7b:
                    49:3a:84:74:3e:31:a9:2f:6b:b9:85:5f:9e:6f:d0:
                    c8:c4:1c:94:4d:59:85:a2:f7:30:d3:41:c2:78:1f:
                    83:44:75:06:04:93:40:03:ec:8e:33:ba:ed:44:ea:
                    c1:59:7d:4d:cd:c4:bd:4a:0e:7d:bf:f9:f7:61:28:
                    5b:78:47:4b:b2:7f:1f:0f:bb:ed:5a:47:0a:ee:de:
                    ff:35:8a:88:e2:55:2a:84:dc:03:ee:4e:88:2c:fa:
                    fd:22:ca:74:bf:10:e5:1b:59:3c:3d:cf:8c:a5:a1:
                    1e:0d:a9:04:db:df:be:dd:c1:a4:5b:9a:d9:d4:d4:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                29:02:2D:BB:3A:35:D0:DF:B1:D9:E3:89:DA:06:2F:02:E2:96:48:03
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/KQItuzo10N-x2eOJ2gYvAuKWSAM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0,0*....0$...-.....-.....-.......u.....w......
    Signature Algorithm: sha256WithRSAEncryption
         bf:e6:a0:60:4f:63:80:4c:e8:ad:d0:94:49:b2:11:49:52:b4:
         4a:f8:8b:ee:5c:79:66:32:70:34:b0:52:f5:53:07:b5:57:17:
         ef:98:df:bd:0c:1b:72:d9:83:17:1f:f2:01:79:3b:40:46:3d:
         5c:93:5b:e4:94:20:f8:6c:5d:7a:41:76:bd:b5:b8:d6:35:84:
         e0:7a:85:fe:33:4d:ab:70:bf:79:ec:e8:35:9c:0c:d0:f2:0b:
         e8:4d:92:13:0d:4c:af:e5:09:94:c4:7b:2e:92:ce:d6:79:ca:
         ce:24:ba:44:c2:bd:2c:89:fb:ce:37:8f:0a:d8:3c:d8:20:d5:
         15:78:9f:da:0b:0e:84:fc:62:b3:83:25:4f:c3:0d:52:b0:da:
         12:24:d0:91:38:92:e2:22:e6:53:cd:80:00:dc:53:e0:6a:f0:
         f3:9a:b5:f4:61:57:32:2b:97:f6:e4:24:64:f3:6f:8c:10:60:
         1e:e2:c1:be:df:d6:08:b9:ad:6e:09:7a:6a:76:55:b9:6f:ad:
         3f:8b:d9:28:c5:49:3c:44:32:98:59:c0:97:d3:2d:21:d9:a0:
         85:d0:f0:8b:a7:5e:da:43:66:40:e2:5b:10:bd:2d:64:0b:10:
         1f:3b:0b:1d:e5:ad:00:ec:e4:46:4d:b8:fb:20:9d:a8:d8:15:
         a3:09:50:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Sep 7 11:15:08 2021 by LibreSSL & rpki-client.