Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/NDsgvzvWScO3IBZloum5OIxa8Ts.roa (download)

Subject key identifier:   34:3B:20:BF:3B:D6:49:C3:B7:20:16:65:A2:E9:B9:38:8C:5A:F1:3B 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS46261
Prefixes:
    1: 45.138.210.0/23 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/NDsgvzvWScO3IBZloum5OIxa8Ts.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397649566 (0x17b3a69e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=343b20bf3bd649c3b7201665a2e9b9388c5af13b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:05:4f:9d:11:3d:bb:19:3f:e4:1a:cc:57:
                    f5:5b:3e:48:f0:0b:12:87:c2:0d:a6:a8:2b:9a:9f:
                    ed:15:e7:0c:ea:72:04:e9:3d:73:89:58:49:e3:ea:
                    cf:05:10:2e:c0:81:11:c9:8d:95:14:cb:3c:f2:46:
                    94:fe:0d:c1:38:6c:90:13:7e:89:2d:e3:43:1b:53:
                    fb:b1:1e:c8:3d:54:03:a1:7f:fd:8b:38:f8:bd:e9:
                    1c:15:1e:5a:42:f1:42:03:ef:d1:c2:89:9f:c2:d4:
                    49:d3:50:9f:94:e7:e9:4f:66:4c:01:80:71:b3:53:
                    71:17:75:43:3b:15:15:ce:54:10:28:50:4b:31:c2:
                    0a:28:32:17:5d:42:de:a5:1b:e6:2d:cb:da:aa:2c:
                    43:17:9c:c4:51:8a:b7:bf:57:34:28:5e:68:6f:60:
                    f5:f4:32:85:5e:75:ff:6c:36:ca:d5:3c:d1:db:55:
                    27:af:9a:75:94:dc:58:07:90:58:1d:ee:4a:e6:c0:
                    27:9c:79:33:51:ee:f6:7e:7f:bc:ef:07:bb:08:bf:
                    79:30:42:fa:ad:c3:5a:9b:30:8d:b3:8c:fc:aa:b0:
                    56:71:73:b6:66:17:8e:31:00:34:56:1d:3b:66:fe:
                    03:92:90:6d:1c:ee:a3:a4:5c:e6:13:c3:85:0e:18:
                    84:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                34:3B:20:BF:3B:D6:49:C3:B7:20:16:65:A2:E9:B9:38:8C:5A:F1:3B
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/NDsgvzvWScO3IBZloum5OIxa8Ts.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:58:ce:a5:6a:b0:3c:f9:6a:9e:0c:7c:ed:2c:4a:5f:c0:c5:
         8a:7f:53:89:e1:70:60:34:05:21:18:47:8d:97:ce:ff:c2:11:
         25:9f:6b:e6:25:43:29:2d:40:70:b6:c2:0d:a7:f5:ca:52:10:
         20:2a:12:86:76:09:6e:b8:f7:c1:f8:e2:84:e7:8a:af:cd:21:
         b0:2c:17:3e:ce:54:8e:e4:0c:b3:ac:ce:47:98:78:7c:40:fd:
         1e:b0:d7:30:92:33:fd:78:25:f8:8b:b4:a1:1c:32:77:7d:a9:
         1e:77:21:3f:46:b8:31:b2:53:09:54:61:16:03:8a:32:d3:ac:
         0b:51:46:9c:d1:1f:b8:06:69:92:77:18:cc:69:5e:8d:f5:27:
         90:f8:1b:5d:26:f7:6f:4a:b2:34:db:e5:1a:61:36:22:75:c1:
         b9:62:c4:17:cf:1c:9c:19:4f:ec:58:2c:04:97:3e:29:61:5e:
         95:92:6b:a6:6b:6e:f9:72:8d:92:49:91:60:7a:58:5f:d8:66:
         45:ef:05:f5:6c:38:89:3f:3b:40:66:f4:c3:bf:d9:be:ab:72:
         7c:b7:a3:b2:ea:de:00:78:e5:e2:56:17:ac:c9:8e:a4:bd:cd:
         db:3e:a7:05:e8:88:20:b8:43:da:ca:fe:a3:40:0f:2f:d4:fe:
         4d:22:d1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 08:42:05 2022 by LibreSSL & rpki-client.