Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ndaXEK-5VTBiZfvRWdRumqUw-HM.roa (download)

Subject key identifier:   9D:D6:97:10:AF:B9:55:30:62:65:FB:D1:59:D4:6E:9A:A5:30:F8:73 
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
asID:                     AS834
Prefixes:
    1: 45.131.2.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ndaXEK-5VTBiZfvRWdRumqUw-HM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100091887 (0x5f747ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Sep  6 08:55:51 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9dd69710afb955306265fbd159d46e9aa530f873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:3c:47:d2:48:d5:6d:83:d4:f2:79:ce:27:
                    53:25:0f:2f:37:b7:eb:af:70:5b:08:01:bd:7b:44:
                    55:cd:71:91:dc:a3:52:95:be:63:d7:b5:bf:81:4d:
                    6b:38:2e:95:f0:0b:28:df:71:ae:14:c9:6c:d8:42:
                    e7:b5:81:af:2b:e4:14:3b:39:8e:83:f2:3a:5e:8f:
                    ad:fe:be:a0:68:3b:23:f4:e8:e1:b2:18:85:b3:71:
                    df:d1:cb:8f:9d:34:06:98:4d:69:91:11:e9:01:57:
                    2f:c4:63:4b:2b:b0:d2:f8:0a:f9:a3:a9:76:ea:87:
                    f3:fa:ed:81:c7:68:c5:91:ed:d0:aa:a3:0f:44:e5:
                    2f:b2:3e:84:0f:db:42:54:4c:1b:ef:48:9f:1d:6d:
                    42:c2:64:ac:fd:7e:d6:25:49:ff:18:ed:f2:14:1c:
                    e8:cf:f4:d7:70:6d:04:36:b6:9e:c3:0a:db:5c:62:
                    c3:fa:ea:40:d6:12:28:cb:d7:c6:6b:44:f3:5f:26:
                    e7:91:47:74:36:4c:f4:ad:f1:4d:fe:e5:81:2f:cc:
                    3f:62:4a:36:90:19:68:d0:7a:4e:c8:e2:8d:be:7e:
                    0e:ae:cf:b9:18:25:96:c2:58:21:1e:d1:c4:8a:08:
                    eb:f6:a9:f7:1d:d7:2f:c5:de:40:2b:7e:2a:bc:49:
                    07:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9D:D6:97:10:AF:B9:55:30:62:65:FB:D1:59:D4:6E:9A:A5:30:F8:73
            X509v3 Authority Key Identifier: 
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ndaXEK-5VTBiZfvRWdRumqUw-HM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:4e:a2:a2:ac:68:c9:d9:61:da:9e:dc:5a:fb:79:a3:a2:1c:
         7e:7a:4e:35:5a:47:65:67:9e:a7:22:0a:3b:30:7b:91:96:5e:
         8c:bc:f2:27:44:ec:c1:f2:cb:b6:d2:66:d3:87:67:32:02:50:
         6e:20:7d:70:be:94:f7:27:ce:04:ec:62:cb:d0:60:fd:09:f9:
         75:56:d2:eb:59:4b:bb:5e:cf:be:6c:19:49:e1:09:d8:fe:48:
         c2:a4:76:d6:d0:54:07:67:09:82:61:99:ea:25:66:3b:4e:49:
         2d:4a:63:ce:d3:bb:57:02:57:46:fc:09:71:78:6a:75:a2:1f:
         0a:2d:24:40:58:57:9a:06:bd:f5:d8:47:75:92:d0:0f:32:77:
         fe:e1:8b:fa:26:85:e5:c6:bf:27:e2:04:4f:11:3c:99:96:46:
         7f:38:3a:b7:52:0b:b2:49:4e:51:14:3b:72:9a:3c:e6:aa:37:
         3d:a8:e2:44:d5:be:36:10:8d:77:fc:e5:c6:c2:e1:ed:06:4d:
         ff:06:d2:1c:f7:43:4e:42:54:56:02:67:67:03:8f:79:67:8b:
         6c:10:ad:05:db:79:75:9b:24:62:42:54:ce:b7:78:5c:93:cd:
         35:42:27:a8:62:be:dd:51:2f:f8:66:e3:12:85:a7:c0:71:3c:
         84:a5:5d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:08:11 2021 by LibreSSL & rpki-client.