Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/5AxPPJ20klWU6Dqvfiaq9QLu64s.roa (download)

Subject key identifier:   E4:0C:4F:3C:9D:B4:92:55:94:E8:3A:AF:7E:26:AA:F5:02:EE:EB:8B 
Authority key identifier: 82:B3:DC:DF:31:AF:6E:F0:C9:34:EA:F2:48:84:AD:99:51:6E:DD:76
asID:                     AS398577
Prefixes:
    1: 144.57.40.0/21 (max: 21)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/5AxPPJ20klWU6Dqvfiaq9QLu64s.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129268179 (0x7b479d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b3dcdf31af6ef0c934eaf24884ad99516edd76
        Validity
            Not Before: Jun 30 09:44:51 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e40c4f3c9db4925594e83aaf7e26aaf502eeeb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:0c:12:48:cd:69:5f:7a:55:c4:4a:17:60:
                    f1:77:47:f9:ea:07:27:6b:8d:24:26:93:9e:e1:83:
                    d3:30:5d:9d:f0:69:5f:2a:00:ef:e7:a1:c8:a1:c5:
                    e8:31:e4:a8:40:0c:0d:da:06:87:97:98:30:29:a5:
                    e2:24:de:da:b7:f1:cb:cf:d7:64:a8:f9:7c:2d:df:
                    7d:d2:a2:49:a4:d3:a7:63:39:c7:b1:42:61:51:be:
                    be:af:62:c9:64:f3:b8:f0:fd:ca:c9:c3:00:92:cc:
                    36:45:1e:bf:d2:bd:76:02:f6:51:a5:10:bc:77:77:
                    6f:17:9f:3d:d0:9b:18:99:76:77:44:18:43:34:b8:
                    5a:38:ff:e0:5b:c8:5f:9c:9a:b4:03:95:08:8b:9a:
                    f4:b5:59:2c:02:70:fe:64:01:8e:db:17:70:27:02:
                    94:e7:02:13:e5:44:1d:df:d7:5d:e6:c5:a9:24:f4:
                    33:65:d3:96:71:a2:c2:b2:14:2b:e4:73:60:5c:d5:
                    13:cd:7f:a8:10:0a:99:e2:5d:f8:8e:3d:46:b1:86:
                    b7:00:4f:67:16:ff:99:b5:4c:16:62:74:4a:8e:40:
                    1d:b5:3e:e5:9f:69:54:6b:c9:98:a0:24:be:df:22:
                    7e:fb:ef:bd:49:c4:b6:21:e0:82:8b:31:50:02:97:
                    6c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E4:0C:4F:3C:9D:B4:92:55:94:E8:3A:AF:7E:26:AA:F5:02:EE:EB:8B
            X509v3 Authority Key Identifier: 
                keyid:82:B3:DC:DF:31:AF:6E:F0:C9:34:EA:F2:48:84:AD:99:51:6E:DD:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grPc3zGvbvDJNOrySIStmVFu3XY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/5AxPPJ20klWU6Dqvfiaq9QLu64s.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/grPc3zGvbvDJNOrySIStmVFu3XY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.57.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:87:ac:dc:92:41:c0:09:30:92:c3:2e:da:f4:cb:d6:e2:d6:
         cb:42:db:5d:9f:fa:e0:6b:71:6f:1f:3e:ee:74:cb:7d:dc:ac:
         f3:81:1b:f5:06:a7:95:66:2c:db:f9:11:69:05:e6:4b:62:d9:
         d1:86:86:76:5f:e0:ac:27:4d:8c:76:92:b5:1f:42:ca:a1:0a:
         8c:00:7c:1f:0f:e5:c2:a5:da:5e:68:c0:3b:22:5e:6b:be:a5:
         45:da:10:45:80:f8:0d:f4:08:81:83:a8:52:f3:9d:72:eb:59:
         d1:44:97:64:75:b8:c2:49:83:0e:7f:2b:c4:67:60:86:07:c5:
         c7:18:4b:52:1f:0d:e0:78:d9:c4:e8:8c:96:d6:64:02:bc:42:
         eb:a4:45:77:a6:f7:f9:13:c0:f1:61:fa:15:2f:ee:96:bf:e4:
         c9:c5:97:10:d8:56:7d:c4:fc:26:f1:b3:2b:0d:83:eb:0a:fc:
         58:e2:ea:50:4b:e1:d2:5d:a6:60:29:7f:e7:82:31:28:14:eb:
         e6:c1:04:2b:2f:ad:4d:da:71:03:ed:c2:db:96:d1:55:5c:c1:
         ff:3f:1d:fe:68:9b:1c:89:a8:3b:5f:fd:c0:57:0b:56:05:59:
         1b:b5:2e:fb:d5:42:b4:c0:a9:f5:2e:7c:5a:98:72:d2:5b:3b:
         db:cb:a9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:10:39 2021 by LibreSSL & rpki-client.