Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e3/30134d-86c5-44b4-8821-8808b1dd8ddb/1/XJoIfbyFU3nQo-5Wpim7I-8Qjb0.roa (download)

Subject key identifier:   5C:9A:08:7D:BC:85:53:79:D0:A3:EE:56:A6:29:BB:23:EF:10:8D:BD 
Authority key identifier: F6:53:1A:2A:34:45:17:A0:05:D6:8B:59:0F:06:21:3E:8D:28:6E:A8
asID:                     AS26636
Prefixes:
    1: 45.91.48.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e3/30134d-86c5-44b4-8821-8808b1dd8ddb/1/XJoIfbyFU3nQo-5Wpim7I-8Qjb0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110257 (0x1aeb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6531a2a344517a005d68b590f06213e8d286ea8
        Validity
            Not Before: Apr  7 14:45:47 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5c9a087dbc855379d0a3ee56a629bb23ef108dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:f7:db:cc:55:cd:fe:ed:70:91:5c:41:6d:
                    ea:b5:1f:a4:83:a3:c5:bc:04:76:5f:0c:17:b4:69:
                    7a:e2:b5:47:25:1f:d9:e2:14:df:53:a9:72:b1:eb:
                    6c:df:13:98:03:55:19:b3:f3:b0:b1:72:df:50:23:
                    da:ee:38:2c:0b:dd:86:94:ef:98:45:ec:3f:cf:1c:
                    b2:39:7e:09:4a:17:a5:c2:7a:92:ab:10:9a:76:cc:
                    be:79:85:83:17:85:ac:0f:cc:3d:ab:be:c6:79:40:
                    6a:e7:f0:eb:90:f7:e2:7e:be:c5:f0:52:a1:77:f7:
                    0d:05:cc:ce:83:94:6f:10:3e:35:59:63:d2:41:84:
                    da:5c:b1:75:b2:07:02:37:ce:1d:72:af:b1:a4:a1:
                    e6:4f:c9:46:c6:e7:c8:4b:ac:ae:3b:97:39:b4:76:
                    3f:7b:8a:86:6e:e4:80:f4:23:24:bc:c0:3a:7e:ee:
                    6e:96:d2:58:88:bd:ae:f0:9d:9b:75:d3:25:ec:1e:
                    b5:f7:8c:b6:f6:1c:2d:c5:b7:95:53:fb:3d:b2:d4:
                    db:1c:c5:05:5e:85:9a:ae:ab:3b:77:61:07:90:a8:
                    ee:42:a7:97:d4:30:7b:1d:21:5a:5c:e0:d2:64:79:
                    2d:a5:8c:5d:41:ed:fd:01:50:b0:bc:c4:6f:9e:1b:
                    17:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5C:9A:08:7D:BC:85:53:79:D0:A3:EE:56:A6:29:BB:23:EF:10:8D:BD
            X509v3 Authority Key Identifier: 
                keyid:F6:53:1A:2A:34:45:17:A0:05:D6:8B:59:0F:06:21:3E:8D:28:6E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lMaKjRFF6AF1otZDwYhPo0obqg.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/30134d-86c5-44b4-8821-8808b1dd8ddb/1/XJoIfbyFU3nQo-5Wpim7I-8Qjb0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/30134d-86c5-44b4-8821-8808b1dd8ddb/1/9lMaKjRFF6AF1otZDwYhPo0obqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:7d:bd:0e:df:97:75:73:bf:9c:92:b1:c7:3d:97:d8:f5:9e:
         ee:d3:3d:05:fb:3b:96:d6:ae:79:6d:41:16:67:75:43:38:f8:
         7f:99:eb:4f:61:16:8f:a0:f3:31:5a:0b:6f:c3:0f:e0:91:de:
         fe:01:5a:7d:fa:e9:4a:61:a0:17:86:5d:de:99:a9:cb:0e:b7:
         01:cb:d5:10:fa:ca:cc:7f:70:35:2d:c9:b9:01:19:0d:43:43:
         f3:cb:09:f7:cb:9e:12:2d:6e:d6:7d:dd:32:06:df:31:e7:75:
         95:43:90:fe:77:ba:75:10:c8:8e:9b:5f:b1:b3:0d:5d:76:99:
         ee:cf:de:d8:e2:b5:3b:a5:fe:3a:c7:0b:fe:8e:8b:6f:06:8b:
         22:ff:0b:c4:65:e7:2a:66:fe:77:fc:be:d9:27:a7:c2:ef:a0:
         02:0d:24:54:d8:30:2f:7c:b8:64:63:37:b5:ef:0d:c0:d7:f0:
         69:45:8e:7d:79:87:49:00:eb:61:78:d2:72:89:74:7d:da:69:
         29:29:97:52:de:27:40:2f:1d:59:b4:56:14:94:a2:a4:51:a0:
         17:38:03:f8:fe:ae:59:2a:00:d9:ea:c9:54:b7:07:d7:9f:26:
         d4:d1:f3:cc:e7:ee:16:e7:24:66:ea:cd:77:27:7a:59:12:ef:
         f0:5c:1d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:10:22 2021 by LibreSSL & rpki-client.