Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/vZWHhGMr27OLaNH6pldwFVZI9as.roa (download)

Subject key identifier:   BD:95:87:84:63:2B:DB:B3:8B:68:D1:FA:A6:57:70:15:56:48:F5:AB 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS48024
Prefixes:
    1: 45.136.2.0/23 (max: 32)
    2: 45.136.2.0/24 (max: 32)
    3: 45.136.1.0/24 (max: 32)
    4: 45.136.0.0/23 (max: 32)
    5: 45.136.0.0/24 (max: 32)
    6: 45.136.0.0/22 (max: 32)
    7: 45.136.3.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/vZWHhGMr27OLaNH6pldwFVZI9as.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351195475 (0x14eed153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Aug  3 09:08:36 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=bd958784632bdbb38b68d1faa65770155648f5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:7f:46:2b:5f:d0:26:4f:be:ee:e0:19:7c:
                    0e:fb:bb:05:48:dc:a3:78:d9:97:2f:8f:22:a1:4b:
                    b2:07:ed:3e:bb:ce:2d:28:f9:a5:49:74:a6:32:17:
                    2e:55:19:c2:ae:ed:89:32:e5:32:eb:91:ea:d9:5e:
                    f8:51:de:c9:54:fe:dd:dd:17:2f:b4:7c:2e:af:a1:
                    f8:00:f9:1b:cb:2c:e6:0e:49:ca:1f:17:8a:95:a3:
                    43:95:ce:34:f4:ae:c6:35:3b:ef:fc:15:d9:f1:5d:
                    85:89:45:ca:15:0f:dc:8f:dd:b6:0c:5f:ae:71:ae:
                    5d:45:3f:11:53:b4:53:3d:f4:9e:af:39:b6:09:06:
                    af:74:06:5d:19:72:98:ea:45:fa:fe:ae:13:fc:52:
                    a4:1c:c1:46:46:cd:b3:4e:8d:2b:27:54:f6:5b:55:
                    f3:28:08:bd:13:15:99:4d:c8:5f:0f:f6:f0:d0:d3:
                    c1:bb:88:89:4a:a7:aa:fe:0a:4c:91:99:27:a6:07:
                    67:af:72:4d:cb:09:3c:c7:c3:86:34:4f:6d:26:fd:
                    72:da:24:9a:55:ad:48:ec:0a:51:2d:f6:84:12:5a:
                    82:f4:03:c8:d4:c8:32:9b:c3:cb:f5:e0:31:ee:c8:
                    5d:50:2a:98:ac:df:c8:c1:c7:89:54:3a:55:f4:97:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BD:95:87:84:63:2B:DB:B3:8B:68:D1:FA:A6:57:70:15:56:48:F5:AB
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/vZWHhGMr27OLaNH6pldwFVZI9as.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:37:19:e9:c4:1e:52:1c:e5:15:35:cf:d7:3d:6c:f2:b7:5c:
         ea:9e:a6:9c:26:5d:f6:97:21:dd:e0:70:fc:a0:d9:e1:6b:ab:
         66:f6:53:68:f7:1d:8c:ba:ed:67:93:b4:03:00:2b:6c:a0:2b:
         2a:cf:6b:78:07:56:a9:97:aa:47:dd:7e:c2:a3:f2:e5:02:2d:
         85:78:e9:d2:76:ea:33:c8:b1:6e:b5:6f:08:de:33:7e:12:aa:
         35:d6:f5:e7:28:86:39:89:dc:7b:3a:78:24:f8:35:e0:d3:ac:
         af:33:49:d7:eb:8c:c6:67:49:26:a6:ab:4c:5e:79:6f:3a:0f:
         a1:71:dd:15:6f:38:62:10:12:e9:1c:00:70:89:3e:b8:66:89:
         ae:f6:26:11:3c:f5:c1:74:20:1c:20:f5:4d:13:bb:09:04:9b:
         4f:6e:b9:21:cf:b8:21:56:94:d3:8d:6b:5c:58:16:8a:87:5f:
         9d:64:a2:aa:60:cc:f7:f4:e8:af:e9:17:ac:ab:de:65:28:d6:
         88:ff:d7:37:7b:8b:d2:97:0c:5e:9e:96:3a:74:67:f9:6b:dc:
         8b:d6:ed:10:49:c7:ac:24:4d:1b:3d:60:cd:7b:08:a9:85:94:
         ba:46:14:80:4c:7c:a3:9d:fb:9c:ed:a5:2e:92:d6:1d:50:f5:
         69:17:c5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:05:03 2021 by LibreSSL & rpki-client.