Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/3ScY4tuGJsVrtunkS_vNcyPUAM4.roa (download)

Subject key identifier:   DD:27:18:E2:DB:86:26:C5:6B:B6:E9:E4:4B:FB:CD:73:23:D4:00:CE 
Authority key identifier: 76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17
asID:                     AS399587
Prefixes:
    1: 45.8.92.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/3ScY4tuGJsVrtunkS_vNcyPUAM4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121143065 (0x7387f19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
        Validity
            Not Before: Sep 11 05:59:00 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dd2718e2db8626c56bb6e9e44bfbcd7323d400ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ee:14:6a:86:e1:58:35:25:ab:df:7e:8a:92:
                    17:17:1f:82:c6:b8:d5:59:a1:ce:83:32:00:26:0b:
                    14:e5:61:fa:32:12:fc:0e:6a:85:51:0e:2c:35:09:
                    6d:ea:eb:d0:6a:93:c9:20:54:2d:8b:34:d1:f4:21:
                    85:dd:ae:1d:7b:4d:8f:92:a6:ce:3c:7a:3d:a0:b7:
                    8a:98:7a:44:70:8d:bc:ef:84:47:db:f5:79:d2:04:
                    2e:fd:03:a7:71:29:aa:1a:28:64:71:4e:f0:5b:41:
                    f6:bb:0b:e5:6e:8b:b8:d7:3e:c5:ee:7f:20:d1:57:
                    d8:38:6f:a4:8a:a5:32:4a:66:89:a4:0b:74:08:6b:
                    95:26:25:aa:6f:d3:65:3a:96:be:63:8a:2b:f2:fb:
                    e2:b6:23:61:c6:3a:dc:9c:84:f1:f8:ed:29:4f:76:
                    11:18:b0:b5:73:1f:f4:8f:a4:32:2d:df:02:cc:2e:
                    94:3f:e0:93:7d:c1:05:69:50:06:61:43:2d:a9:62:
                    6a:0d:e5:89:49:ef:5f:03:2b:76:8f:f2:33:e7:b1:
                    15:4e:4a:64:8c:cc:64:2d:29:59:ca:0a:1f:be:01:
                    9d:1b:dc:20:4b:9f:ca:02:02:0e:da:36:49:d1:36:
                    ed:94:6c:f1:c6:ae:96:6f:f7:26:a8:8e:fc:34:bc:
                    51:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DD:27:18:E2:DB:86:26:C5:6B:B6:E9:E4:4B:FB:CD:73:23:D4:00:CE
            X509v3 Authority Key Identifier: 
                keyid:76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/3ScY4tuGJsVrtunkS_vNcyPUAM4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/dsLe_wFfo-gBWx1f27-3eaLI5hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:41:bc:eb:97:de:20:cd:90:aa:41:2e:12:ee:e1:d5:92:20:
         a3:57:31:67:b3:e5:8c:e5:d1:b5:d8:bb:3e:fc:3e:5d:45:53:
         20:00:c4:b4:d0:fd:11:d7:09:07:93:67:86:61:67:03:4f:0a:
         f5:7a:5c:9e:0c:f3:ec:44:05:7b:2e:72:2f:ab:b2:3b:a0:13:
         86:46:ba:89:07:42:a1:36:af:a6:c6:01:be:58:90:e1:82:19:
         76:fa:28:15:27:f1:9f:23:c0:45:40:f0:c1:87:02:87:e3:76:
         41:96:8c:4e:19:48:72:43:cc:39:f7:39:bc:cd:78:f7:1a:50:
         39:21:eb:42:b0:39:53:14:a0:99:1a:aa:8d:8b:9f:bb:9b:a2:
         03:7d:b4:85:db:63:7a:c0:3c:5d:1a:7d:10:14:3d:b7:f3:c0:
         c8:75:16:31:89:bf:6e:47:5d:e7:21:95:30:2b:1f:36:bb:83:
         d6:69:6c:9c:0d:35:54:75:66:72:f2:9a:ba:4d:4f:05:4f:28:
         ef:d5:b0:96:8b:7f:a4:bd:8f:e2:d9:e8:38:31:a4:69:72:e9:
         6d:6e:1b:1a:59:4e:18:3d:74:c7:6d:e4:08:8b:cd:94:d6:cd:
         cb:dc:55:33:77:ab:71:b9:63:83:97:4a:a8:87:8c:17:70:30:
         38:58:a8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:09:35 2021 by LibreSSL & rpki-client.