Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/XujOv6_qm_cFWTNFOsGNRoZSvNw.roa (download)

Subject key identifier:   5E:E8:CE:BF:AF:EA:9B:F7:05:59:33:45:3A:C1:8D:46:86:52:BC:DC 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS139330
Prefixes:
    1: 45.144.71.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/XujOv6_qm_cFWTNFOsGNRoZSvNw.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359165745 (0x15686f31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Aug 24 16:20:32 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5ee8cebfafea9bf7055933453ac18d468652bcdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:57:46:b7:f9:ab:de:1c:cd:93:95:94:fc:
                    6b:c4:42:5b:b3:fe:ac:a9:07:88:97:71:63:93:e3:
                    b1:83:52:91:cb:ae:56:41:b2:7e:41:ba:f3:78:83:
                    66:05:d8:58:d7:d7:58:e2:b6:b7:ad:14:f0:c5:be:
                    c2:22:ca:a2:df:fd:6b:b1:fe:a3:64:d9:ba:a0:ad:
                    c9:43:d3:79:59:b4:4e:71:f0:1d:ce:bf:93:a6:9a:
                    b0:30:0e:74:3a:dc:56:77:34:44:5c:72:14:67:92:
                    95:40:9a:b9:98:d1:c0:03:4e:cd:ae:87:e3:57:bc:
                    ef:10:33:a0:01:db:59:57:85:29:aa:eb:65:c1:13:
                    dd:71:57:68:d6:26:6f:e5:60:bb:b7:3f:1a:03:8f:
                    ec:db:6c:51:e6:10:fb:c1:ea:7c:38:8c:5c:c2:4f:
                    eb:bc:43:21:d2:49:13:55:ef:78:d5:59:c3:54:3f:
                    c4:2c:dd:1d:3f:f9:04:df:ba:d3:3d:73:c2:29:c6:
                    ce:7d:f2:7a:51:11:77:e2:62:07:aa:19:2b:4b:31:
                    b5:ff:9b:cb:75:6b:5b:47:9e:a3:be:61:c3:cb:4e:
                    e3:f6:76:9a:a0:c9:e8:0e:7d:ab:ed:8c:bc:af:96:
                    54:44:d9:24:47:f6:03:b1:9d:c9:57:12:83:b2:97:
                    d1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5E:E8:CE:BF:AF:EA:9B:F7:05:59:33:45:3A:C1:8D:46:86:52:BC:DC
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/XujOv6_qm_cFWTNFOsGNRoZSvNw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:dc:a1:33:25:be:85:db:38:1c:d2:d1:6d:9a:67:cf:31:fc:
         c3:27:37:cf:f8:d0:a6:be:00:0a:b7:76:49:19:f9:60:5c:0b:
         f3:57:71:d2:fd:76:a9:7e:a1:dc:3a:21:6b:0b:5e:7d:89:bc:
         83:09:b0:35:4b:2e:4a:19:72:54:f9:bf:c9:1e:79:9b:3f:cd:
         92:1d:0a:69:6c:bd:a5:95:06:de:03:71:2d:dd:ed:69:bd:d8:
         22:7d:52:48:ad:98:0a:1a:d3:02:b6:e0:a3:fe:fb:73:53:81:
         8d:a9:3f:38:bc:96:8e:87:d3:c4:02:52:e3:93:db:dc:a6:58:
         f9:8b:70:83:9a:9e:68:0c:24:57:61:64:10:f4:d4:e9:54:90:
         56:39:f2:fe:32:c8:47:bc:32:b9:19:1f:2a:ad:ed:e5:59:8f:
         80:e4:e1:40:73:c5:49:c0:27:83:92:3c:67:eb:46:82:c4:8e:
         08:72:93:ad:b5:94:07:14:73:30:f0:50:6e:04:9e:69:00:fc:
         9f:e8:ea:69:bf:df:5b:3c:60:9d:6e:17:85:be:40:c9:a7:3b:
         6b:33:89:4a:ec:8e:cc:da:2f:bc:cd:dc:e8:e3:4d:f5:b4:bf:
         26:41:e6:dc:97:3d:44:09:35:3a:e7:2a:86:7d:e4:07:e4:35:
         43:8b:4b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:04:57 2021 by LibreSSL & rpki-client.