Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/df/5d073b-21e1-4bba-8f65-c4108367e37a/1/GbHSgc5Jj5T8_Z02QWXXnAaISz4.roa (download)

Subject key identifier:   19:B1:D2:81:CE:49:8F:94:FC:FD:9D:36:41:65:D7:9C:06:88:4B:3E 
Authority key identifier: 5C:8E:8A:4D:78:B5:63:F2:9D:82:97:AB:E2:68:71:59:49:70:8D:1B
asID:                     AS397423
Prefixes:
    1: 45.153.126.0/23 (max: 23)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/df/5d073b-21e1-4bba-8f65-c4108367e37a/1/GbHSgc5Jj5T8_Z02QWXXnAaISz4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72176702 (0x44d543e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c8e8a4d78b563f29d8297abe268715949708d1b
        Validity
            Not Before: Jun  5 09:08:10 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=19b1d281ce498f94fcfd9d364165d79c06884b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:d6:24:77:29:ee:cc:3c:fe:ab:4e:df:2b:
                    12:96:99:77:a3:8b:30:b2:e5:3e:b5:40:8e:dc:db:
                    10:54:d6:7d:9a:02:db:86:31:21:72:04:d9:ee:fb:
                    74:30:f8:83:de:9e:61:ca:61:2b:5b:c3:13:ba:e2:
                    c1:34:61:06:b1:b5:27:24:9a:d3:4e:7d:1f:a3:02:
                    8b:2c:f6:27:e0:e9:81:1d:99:a2:43:e5:a7:9f:03:
                    e7:84:14:46:1c:90:7c:29:3c:b4:ee:f7:ac:dd:34:
                    4d:bc:c2:24:c9:d9:4c:5b:c0:56:c3:b2:66:b6:fe:
                    12:ce:24:d1:4e:12:4c:46:31:ea:e3:18:f4:b7:74:
                    e1:1c:93:45:40:25:16:2f:03:99:81:64:6d:35:e7:
                    cc:2d:5a:78:99:20:6c:43:c2:5e:bb:0d:b3:87:e7:
                    ed:ff:9b:57:64:80:ba:8e:17:16:60:8c:b6:d2:c2:
                    de:7b:53:f8:0e:14:83:49:3a:e3:9d:4c:63:19:52:
                    3c:5e:7e:c0:1b:a8:e2:86:e0:c6:ca:0d:62:9c:7f:
                    16:1c:04:52:39:3c:a4:c8:a7:13:a2:f4:ac:88:de:
                    54:0d:72:09:26:78:92:c8:c6:2d:8b:7a:cf:a6:79:
                    2d:86:dd:55:dc:a5:c2:e7:f3:d1:8f:45:95:f0:f3:
                    52:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                19:B1:D2:81:CE:49:8F:94:FC:FD:9D:36:41:65:D7:9C:06:88:4B:3E
            X509v3 Authority Key Identifier: 
                keyid:5C:8E:8A:4D:78:B5:63:F2:9D:82:97:AB:E2:68:71:59:49:70:8D:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XI6KTXi1Y_Kdgper4mhxWUlwjRs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5d073b-21e1-4bba-8f65-c4108367e37a/1/GbHSgc5Jj5T8_Z02QWXXnAaISz4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5d073b-21e1-4bba-8f65-c4108367e37a/1/XI6KTXi1Y_Kdgper4mhxWUlwjRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:93:5b:7f:7c:20:65:bf:83:3b:6a:b4:25:17:21:c4:25:cc:
         b5:ef:d3:ee:70:f1:c5:d5:b3:c5:b0:3f:6d:c3:5e:fd:10:c2:
         6f:14:15:b8:57:b8:39:29:c6:c9:1f:79:f0:51:d8:88:88:1b:
         d9:9c:6c:9f:ff:43:8c:40:ce:d6:4b:5d:b3:09:62:4e:dc:73:
         59:75:bb:7f:03:35:72:05:01:17:cb:b3:82:30:d2:c4:5b:15:
         bc:c0:a1:9b:82:32:bc:be:e9:4f:d9:d0:07:12:9f:6c:32:91:
         23:10:43:00:45:5a:cc:f8:c4:d7:a3:0b:7f:03:c2:a1:34:62:
         ce:01:59:f1:24:8d:70:41:7c:6a:8b:15:04:72:e1:73:fe:e5:
         a4:75:31:24:c1:18:dd:8a:3a:74:09:58:74:a1:14:63:c1:85:
         c8:01:93:b9:00:ec:82:2d:56:50:67:5c:b3:77:98:0e:ad:e8:
         e8:17:41:4d:46:a1:d5:0f:d4:d9:df:60:7c:66:46:88:86:13:
         44:df:9c:9d:e7:ba:a6:b6:ed:85:7c:42:98:62:53:ef:e0:8e:
         a6:c6:ba:e4:f6:e0:c4:84:cd:72:b8:de:28:f8:30:a9:f4:b3:
         20:7d:4e:65:ed:bd:8a:7a:25:3d:6a:57:0f:93:49:f7:c0:e5:
         f8:71:38:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:09:11 2021 by LibreSSL & rpki-client.