Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/si5vONuHu9X2zCvm356zoAWVu5c.roa (download)

Subject key identifier:   B2:2E:6F:38:DB:87:BB:D5:F6:CC:2B:E6:DF:9E:B3:A0:05:95:BB:97 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS209484
Prefixes:
    1: 45.142.60.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/si5vONuHu9X2zCvm356zoAWVu5c.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355794357 (0x1534fdb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Aug 17 15:24:24 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b22e6f38db87bbd5f6cc2be6df9eb3a00595bb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:37:0b:47:a3:3a:89:4e:35:4e:6e:c0:12:
                    2e:49:e8:f3:a9:e5:31:9c:e0:00:89:0a:5f:2d:03:
                    8d:fd:18:c3:d3:b4:61:8a:76:7a:ee:41:53:4e:70:
                    df:ef:f7:05:09:be:b8:87:86:48:76:36:30:4c:10:
                    25:a1:0c:fc:08:e4:85:16:4d:80:46:b8:ea:d3:7f:
                    19:54:7e:ca:8c:ad:f3:b0:ea:b9:57:97:d8:20:e2:
                    68:78:1d:02:3f:7d:d0:51:4d:7b:e0:e9:f0:95:46:
                    4d:85:1b:2d:c4:ef:47:b4:cc:26:d4:2a:a7:20:47:
                    fc:fe:81:30:12:4d:7b:43:74:62:a9:6c:6c:09:97:
                    22:79:bf:ec:ff:f6:48:e6:c9:97:ce:db:0b:a3:ce:
                    d8:1e:4a:76:f5:9f:79:3e:e5:c1:35:d4:f7:d6:19:
                    31:a0:26:22:24:cd:25:5c:e5:9e:3f:bc:06:7f:32:
                    f8:15:69:88:c5:76:a1:ad:57:ba:d6:19:f4:49:7c:
                    92:38:98:35:51:63:30:2d:93:c0:b5:2f:3f:09:46:
                    ad:8c:92:51:ba:55:e9:6e:c4:6e:de:ee:41:00:7f:
                    69:3f:cb:87:d6:04:e4:d7:61:12:c6:8c:af:1f:8c:
                    c5:b3:f7:91:0f:63:d5:f0:05:65:a9:8e:d7:ef:35:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B2:2E:6F:38:DB:87:BB:D5:F6:CC:2B:E6:DF:9E:B3:A0:05:95:BB:97
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/si5vONuHu9X2zCvm356zoAWVu5c.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:ed:e9:e2:b3:79:bf:37:62:e7:b4:c4:f8:f3:8a:f7:d9:0f:
         7a:b8:30:41:39:1e:a4:2f:6d:23:cb:12:e3:05:b1:89:a9:94:
         9d:39:5a:7c:46:1c:e9:85:22:ba:54:7e:5e:84:93:6f:f1:63:
         44:d1:09:14:45:14:8f:c4:7e:68:94:e0:e1:9d:15:43:b2:fc:
         76:3a:31:5e:93:57:11:79:6a:af:58:77:ac:d9:f7:85:63:93:
         d8:dc:b9:55:7c:4b:b4:6d:ae:4e:3f:52:d9:51:66:40:9f:72:
         62:49:d9:d7:9e:9a:ab:b6:48:b0:d6:15:d5:4f:12:4f:11:40:
         10:cb:54:08:96:35:8a:11:e0:ee:27:04:59:82:0c:e7:3b:4e:
         88:21:11:20:47:f1:c4:a0:4e:98:09:f0:da:ec:13:10:e4:11:
         76:87:d5:b0:25:7c:2a:d3:fa:53:f6:ac:bc:43:49:cf:17:3d:
         f2:44:1b:3b:06:3b:8c:90:85:a3:9f:bd:f1:ef:f5:9c:a4:27:
         cd:e6:64:30:29:89:c0:8e:c7:18:3a:17:15:2c:f8:c2:72:87:
         49:a2:44:62:c3:ce:9f:e3:f1:32:c2:46:bd:5e:24:f9:f7:c0:
         4d:ed:aa:17:cc:48:63:93:53:be:ba:bb:ef:6c:9f:7c:ad:ad:
         89:ac:6b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:05:02 2021 by LibreSSL & rpki-client.