Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LpdJSa6vlug5XoHpDnBDeZTH7SI.roa (download)

Subject key identifier:   2E:97:49:49:AE:AF:96:E8:39:5E:81:E9:0E:70:43:79:94:C7:ED:22 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS35487
Prefixes:
    1: 45.136.0.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LpdJSa6vlug5XoHpDnBDeZTH7SI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351142665 (0x14ee0309)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Aug  3 09:08:36 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2e974949aeaf96e8395e81e90e70437994c7ed22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:f4:5d:38:0a:52:60:14:7e:33:76:8c:7c:
                    49:98:17:ae:4d:19:0e:f3:89:a1:8b:31:db:28:b6:
                    d6:b2:13:58:55:ca:b9:e1:7d:59:10:be:ca:24:ec:
                    da:14:90:c3:ea:cc:16:be:6a:8c:39:17:d9:0c:03:
                    e7:fe:76:fe:38:67:24:e7:ee:db:70:d2:a4:b7:92:
                    40:3a:6b:9b:d2:7e:50:f1:cb:e8:6b:cc:a4:2a:f7:
                    40:31:b1:df:f0:e6:4a:ca:f2:b4:dc:fa:e1:0c:ae:
                    89:9e:49:27:c4:10:7c:5d:8b:8d:26:b6:35:24:67:
                    15:f8:02:58:1d:35:20:26:b9:13:d1:5c:27:a8:b4:
                    a5:e7:05:12:df:3a:44:fa:88:cc:ba:62:ab:e8:f9:
                    28:fd:a1:91:f1:d7:81:87:0a:4e:28:ea:c2:38:05:
                    e4:27:ef:eb:bf:ee:ca:fe:3d:28:0c:3f:30:0a:dd:
                    3b:c5:9a:0d:07:c1:cb:a6:fb:44:f8:7d:ad:41:cb:
                    a1:6c:9b:c6:93:c5:f0:56:9c:5b:d2:0d:15:6c:74:
                    08:e0:d4:a2:22:30:c7:7d:f7:fe:ee:d6:7b:1d:9e:
                    ac:92:a1:fe:8e:4b:6f:00:fb:e3:dd:79:ff:fa:2a:
                    f8:cd:a7:e5:4e:13:95:33:a8:01:f1:b0:c9:22:9a:
                    7c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2E:97:49:49:AE:AF:96:E8:39:5E:81:E9:0E:70:43:79:94:C7:ED:22
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LpdJSa6vlug5XoHpDnBDeZTH7SI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:e5:1a:e5:17:4e:68:5b:59:6d:7f:be:8d:17:be:4d:06:45:
         fe:42:21:36:18:24:5e:1d:78:97:d7:db:94:66:9c:47:e2:19:
         6e:de:66:ba:07:a3:15:15:88:41:73:73:42:39:17:18:b4:4f:
         33:12:68:52:15:eb:e9:d5:b5:b6:2a:19:38:e3:5d:72:79:2f:
         87:4f:15:45:2a:6b:27:68:63:30:5c:1f:ef:ef:fb:be:ed:c0:
         7d:46:9a:96:64:e3:03:34:27:f8:a8:f5:8a:30:8a:41:f2:a3:
         4a:e5:d7:11:fe:2b:c1:ea:84:5a:37:19:1b:d3:37:02:7a:b0:
         88:9f:ec:a8:b9:5b:ec:99:7e:1b:8c:26:cd:f8:22:c3:ea:5a:
         f1:6b:ad:1c:31:06:a7:1a:b2:f5:91:3a:d0:e3:aa:be:93:50:
         65:15:4c:0f:6f:ed:b4:9c:33:9a:2b:a9:74:c9:98:77:a6:30:
         a8:98:a9:17:ba:1b:b8:1d:b0:87:79:65:29:82:a6:bd:3b:08:
         36:26:ce:ec:ee:f9:63:cb:96:72:b3:6a:a7:fc:78:9d:1d:b2:
         52:c6:fc:ed:bd:05:6e:33:06:ea:86:02:80:02:ff:42:8d:ef:
         6f:8d:a3:97:0b:63:62:6f:b7:85:46:64:54:17:a0:42:96:23:
         ea:f0:f3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:04:55 2021 by LibreSSL & rpki-client.