Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ism_buWQLrUVMepOIlS-l0xhjDE.roa (download)

Subject key identifier:   8A:C9:BF:6E:E5:90:2E:B5:15:31:EA:4E:22:54:BE:97:4C:61:8C:31 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS140883
Prefixes:
    1: 45.138.208.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ism_buWQLrUVMepOIlS-l0xhjDE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354243185 (0x151d5271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Aug 10 14:24:11 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=8ac9bf6ee5902eb51531ea4e2254be974c618c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d3:93:6c:71:ee:74:c1:85:a3:b3:54:57:c4:
                    d9:ba:d8:f6:74:6a:83:8b:96:14:f0:68:41:ea:bc:
                    07:a6:d3:c7:9a:2f:2c:c0:d1:b1:26:89:79:80:40:
                    d1:fd:3b:03:2d:a2:18:03:67:e9:59:c2:21:65:5b:
                    06:db:af:18:1b:b6:10:cf:d9:d1:ee:22:a0:3c:e3:
                    51:35:f7:88:5e:d9:bd:e6:32:ea:43:3d:d2:77:15:
                    d9:59:53:e1:91:4c:ea:6b:07:bc:3e:af:26:31:0e:
                    36:69:c3:fb:93:73:4a:86:81:36:1a:9e:d6:e2:fa:
                    c4:91:68:5a:5d:6f:0e:4d:fb:c0:44:99:da:73:8c:
                    01:64:43:c0:9b:5c:46:ac:65:fb:e9:f5:e0:90:f5:
                    bf:aa:e7:33:34:6e:78:0f:9e:90:66:ad:91:f6:f9:
                    ed:a3:75:b4:af:51:26:df:45:ac:21:a2:24:fd:52:
                    8f:46:e6:bf:a8:95:ec:50:28:98:6a:17:f1:03:cf:
                    b8:4e:85:bb:54:84:ea:f0:30:ec:8f:60:e1:95:8f:
                    e7:81:29:df:fa:23:96:84:5e:1a:be:18:d7:72:43:
                    83:50:34:1d:99:cd:17:df:ea:a1:66:76:e4:dc:5f:
                    bf:c3:90:3a:b8:71:5c:84:80:f6:08:06:3b:a2:af:
                    a2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8A:C9:BF:6E:E5:90:2E:B5:15:31:EA:4E:22:54:BE:97:4C:61:8C:31
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ism_buWQLrUVMepOIlS-l0xhjDE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:a2:55:cf:fc:e8:7a:7f:52:e3:b9:b5:40:4e:34:b3:22:45:
         98:7c:6f:fe:be:e6:e3:f9:84:c7:85:f0:68:46:9b:33:ee:83:
         ba:97:8e:54:32:c9:d1:aa:c4:12:27:1b:bf:87:bd:93:25:f7:
         ad:83:5f:b3:d6:30:24:7d:bc:bc:9e:3e:d3:84:31:0c:c0:4c:
         3f:68:1b:c1:96:c3:31:c2:20:3c:29:64:7f:81:31:82:05:0e:
         7a:c0:3e:8b:64:01:64:79:db:2a:96:e1:02:2c:79:ec:01:32:
         51:40:79:05:f1:48:16:ae:3d:d8:0a:c8:b5:10:29:d2:48:9f:
         66:79:22:9b:ff:56:ca:47:9c:3b:c6:22:15:58:f4:39:44:4f:
         ba:8e:84:db:95:99:52:71:ff:05:df:3c:d8:be:d2:92:20:0e:
         4b:ee:b2:93:16:1c:12:c2:92:f8:ab:25:03:99:10:0c:e2:18:
         3c:7e:e4:1b:e1:8a:5c:57:ae:b6:04:72:d7:95:f2:ee:31:7b:
         fd:01:d8:d3:6a:53:ff:b0:5e:03:c0:9d:93:1b:8b:26:db:5b:
         77:fd:11:97:0d:12:8c:bb:98:20:dc:01:75:08:76:69:f6:9b:
         ae:d8:fb:1e:e2:e2:3c:33:47:2a:11:21:ad:01:c8:b3:2f:c1:
         fc:77:7e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:05:00 2021 by LibreSSL & rpki-client.