Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/TKuYK3buj99I5gluU4dri5pe8LA.roa (download)

Subject key identifier:   4C:AB:98:2B:76:EE:8F:DF:48:E6:09:6E:53:87:6B:8B:9A:5E:F0:B0 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS22769
Prefixes:
    1: 45.13.245.0/24 (max: 32)
    2: 45.13.244.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/TKuYK3buj99I5gluU4dri5pe8LA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328054954 (0x138db8aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: May 31 22:31:50 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=4cab982b76ee8fdf48e6096e53876b8b9a5ef0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5a:a5:60:dc:47:4f:08:c8:d8:9e:23:f1:c3:
                    16:0d:9c:c3:0a:cb:8a:1b:00:55:d7:28:75:b0:d2:
                    cc:84:cf:cc:66:51:9e:59:a5:49:ad:9e:62:19:9f:
                    4e:5d:65:37:68:3b:3f:9e:91:b3:91:a9:ec:90:b4:
                    d1:4d:d2:90:70:a3:28:9b:b8:7b:60:2e:29:5e:fc:
                    46:e2:d8:72:c3:83:43:d3:41:78:7d:99:0e:8c:b5:
                    ae:6b:70:13:64:c7:5e:32:74:cb:37:c0:86:c1:0d:
                    ea:9d:f2:06:fb:10:db:11:4c:ce:0c:94:ee:ee:80:
                    ee:fd:94:1e:6b:7c:ad:1a:25:ac:1a:56:38:71:a0:
                    75:d3:22:fc:b6:d6:87:fc:2d:28:25:e0:42:9d:6b:
                    74:4e:d7:43:0f:2b:32:40:14:33:8e:a1:02:31:ed:
                    d8:6b:7f:c3:68:9b:5c:89:1d:a2:85:c6:02:93:78:
                    83:40:56:c4:78:06:61:b1:60:25:7e:ca:ba:51:60:
                    fc:23:bb:07:a6:76:eb:78:cc:88:5b:0b:09:81:74:
                    9c:93:2c:63:66:a8:4a:32:15:e4:3c:8e:6a:6e:a7:
                    8f:75:f7:1d:ea:71:83:71:24:04:24:7a:fc:29:7e:
                    c2:e2:f3:1a:58:aa:8e:e4:e4:31:97:3b:12:49:15:
                    fa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4C:AB:98:2B:76:EE:8F:DF:48:E6:09:6E:53:87:6B:8B:9A:5E:F0:B0
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/TKuYK3buj99I5gluU4dri5pe8LA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-
.
    Signature Algorithm: sha256WithRSAEncryption
         19:7e:9e:a0:4c:c5:4a:52:6f:3f:58:35:30:37:33:d2:21:07:
         35:c9:0a:72:7c:28:a9:1d:de:3f:d0:36:71:a7:5d:0c:8f:bb:
         ea:02:8d:af:70:51:32:eb:58:0c:de:47:e6:08:76:37:3f:1a:
         a9:ba:b8:38:d5:ec:99:f3:26:e7:25:a7:67:7f:24:d9:8d:74:
         97:57:77:6b:d1:6e:16:30:cf:68:86:cc:cb:e3:bb:16:dd:2d:
         7e:d2:45:b9:7e:15:81:5d:4b:96:d4:59:0b:6e:d4:bd:c8:f0:
         02:80:38:5f:f6:b0:2f:46:95:e1:92:a9:8d:9a:b0:7a:03:4a:
         5c:95:8e:a1:1d:7f:21:50:b3:8b:42:f7:21:c5:b1:e4:7e:65:
         68:79:fd:f8:d4:da:99:50:b8:d6:dc:e6:88:90:2c:85:72:91:
         5a:5b:69:d4:89:3a:13:c7:5d:03:55:31:0d:a2:ee:ce:18:b9:
         7a:96:6e:fa:97:fb:5c:b2:48:35:20:81:20:84:42:57:39:c2:
         6f:73:ed:ab:92:0d:ec:23:41:ef:d6:b1:27:77:fe:0a:b6:f3:
         2d:06:57:6f:19:f5:70:67:21:4c:80:e9:08:46:d1:10:7d:fc:
         75:55:af:7a:e4:90:d8:68:09:78:22:37:ae:20:21:98:64:a1:
         e8:bd:a2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jun 1 06:14:12 2021 by LibreSSL & rpki-client.