Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lxDVCNwz4h5keoGifBqzPd26jVk.roa (download)

Subject key identifier:   97:10:D5:08:DC:33:E2:1E:64:7A:81:A2:7C:1A:B3:3D:DD:BA:8D:59 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS2914
Prefixes:
    1: 45.138.210.0/24 maxlen: 32

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lxDVCNwz4h5keoGifBqzPd26jVk.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388623233 (0x1729eb81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Dec  1 06:35:10 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9710d508dc33e21e647a81a27c1ab33dddba8d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b5:6c:77:e9:89:6f:5e:53:a1:d3:bd:61:a9:
                    03:c9:1a:78:a5:6e:d0:71:d0:4f:63:0c:26:ce:1a:
                    7d:cf:e1:d9:2c:58:8d:99:ce:13:49:27:69:1b:81:
                    f5:df:30:e6:9c:53:22:1c:8e:dc:be:75:8d:82:f9:
                    6f:88:69:a5:5a:1f:65:30:85:dc:21:bc:e3:af:fd:
                    05:1e:59:50:a6:27:08:e9:08:6e:54:fa:6e:66:27:
                    bd:b2:1e:a5:27:3a:24:5a:76:43:76:a3:55:b7:05:
                    ac:91:26:aa:ab:8d:e6:48:b1:25:6f:ca:ca:d8:60:
                    76:48:3f:85:df:60:ce:b6:a1:33:9e:e6:1f:4a:4d:
                    5b:8f:e8:66:71:bc:89:45:16:33:9a:11:78:3f:bc:
                    9a:73:75:15:8a:33:88:e7:ed:74:99:6c:cd:5d:15:
                    e5:0b:e6:cf:c4:c1:3a:85:6b:1f:d8:24:c1:ff:92:
                    97:06:6d:e0:2c:0a:dc:ec:20:be:89:0d:df:a8:af:
                    91:28:3b:32:53:65:97:8b:50:d4:ec:90:0d:1a:25:
                    20:a2:39:85:02:83:15:90:51:67:e5:62:a3:27:c4:
                    b4:61:91:a1:ca:1c:3b:04:20:ab:a5:c7:07:b5:14:
                    a8:59:9f:b7:68:1f:2b:a5:be:5d:ae:dc:db:55:61:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                97:10:D5:08:DC:33:E2:1E:64:7A:81:A2:7C:1A:B3:3D:DD:BA:8D:59
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lxDVCNwz4h5keoGifBqzPd26jVk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:99:dd:69:fc:04:9b:de:6a:55:c2:88:df:c1:8f:44:71:36:
         77:63:b2:cf:9e:1e:e7:05:0b:09:04:6e:a3:25:b3:23:79:0c:
         1c:46:d5:80:52:5b:4d:9e:c6:28:6d:15:60:3a:09:7f:ba:ca:
         75:11:74:90:e4:25:87:d0:2b:46:00:ed:36:bf:0e:17:d1:17:
         26:3e:24:b7:22:d7:2f:fd:9c:66:7a:33:9f:33:ee:19:b5:97:
         75:46:4f:43:2c:78:86:6a:99:5c:2c:43:cc:73:c6:e1:4d:fd:
         15:ae:69:e1:ca:5c:a2:25:d7:68:0c:0f:2f:1d:3d:94:f6:da:
         fe:0c:b9:f1:a8:72:5f:87:fb:a4:3e:53:20:ae:4a:30:50:c3:
         2b:60:45:29:fb:a2:57:05:a1:58:a8:65:9b:a5:7f:de:b5:40:
         30:af:50:bb:e8:39:32:e4:5c:08:bd:f0:9d:39:83:79:b0:ed:
         00:51:fd:9e:3e:4a:cd:50:3e:f4:b1:59:46:ed:c0:72:c4:9d:
         2b:9b:0c:8b:95:9c:f5:3a:f9:3d:6f:4e:95:01:40:ed:0d:a7:
         95:47:04:30:42:10:34:f5:5f:9b:43:66:ed:8b:28:6f:3e:32:
         b2:09:66:5b:03:47:b7:3b:73:c1:08:96:60:b0:6a:bb:2d:8e:
         83:c9:7c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Dec 1 07:57:47 2021 by LibreSSL & rpki-client.