Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/baEFZSiAG8ETCKnmu3QLe57sc5U.roa (download)

Subject key identifier:   6D:A1:05:65:28:80:1B:C1:13:08:A9:E6:BB:74:0B:7B:9E:EC:73:95 
Authority key identifier: FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
asID:                     AS0
Prefixes:
    1: 45.12.200.0/22 (max: 24)
    2: 2a0e:bf00::/29 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/baEFZSiAG8ETCKnmu3QLe57sc5U.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84004958 (0x501d05e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
        Validity
            Not Before: Jan  1 07:35:35 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6da1056528801bc11308a9e6bb740b7b9eec7395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:67:0c:44:05:9f:ac:87:3a:24:70:f0:44:b4:
                    79:84:3b:5e:22:22:05:84:bc:16:eb:17:48:3d:87:
                    2e:98:3c:f9:c0:4d:d6:d5:d5:75:b5:10:02:a7:ed:
                    af:9a:5c:d9:8f:2f:80:c5:44:78:ba:69:76:39:2f:
                    45:45:af:ee:55:51:65:37:0d:08:d7:44:97:0c:be:
                    55:13:83:99:a7:32:6d:f0:c4:e0:99:77:39:92:1c:
                    cf:41:44:58:ac:6f:07:9d:e0:33:ef:4a:c8:ec:cc:
                    c6:50:90:ec:55:f8:29:0a:22:4c:3b:59:7d:af:db:
                    a7:29:03:99:c8:54:c7:01:60:22:5f:fe:9c:9a:99:
                    84:1e:ee:92:ae:a6:7d:85:2e:9f:cd:50:c2:02:0b:
                    a1:f4:cc:9c:59:20:d5:e8:5c:bd:5b:15:4f:ba:2f:
                    22:7e:72:4d:df:12:f7:22:3d:a3:44:d7:f7:6a:ed:
                    54:79:fe:db:e3:a7:76:5a:41:0a:33:69:40:57:a3:
                    ad:2d:34:4a:e1:de:4e:4d:14:d7:4f:13:b1:59:e9:
                    42:f7:eb:fd:d5:5b:a2:fc:03:84:9e:4d:01:8b:a3:
                    2e:a2:31:16:cf:89:0f:d9:e2:50:e3:a4:a6:8b:20:
                    96:e2:55:ee:1f:58:0c:bd:0e:a9:ba:de:a8:a7:c4:
                    c8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6D:A1:05:65:28:80:1B:C1:13:08:A9:E6:BB:74:0B:7B:9E:EC:73:95
            X509v3 Authority Key Identifier: 
                keyid:FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/baEFZSiAG8ETCKnmu3QLe57sc5U.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/_5TEsdM7owlOw4j3pz2NOc2VCGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-..0
....0....*...
    Signature Algorithm: sha256WithRSAEncryption
         24:3d:0c:2d:d4:23:4b:b0:9a:46:ef:4c:16:c4:1b:02:d2:b5:
         0b:61:7d:f3:24:e4:57:b0:50:9d:4d:ec:30:3b:d2:f2:74:e7:
         f5:bf:59:05:a5:68:7b:67:6c:5c:18:eb:73:01:2a:6e:bc:03:
         60:07:be:7d:0c:b3:73:4b:c4:de:a8:c5:d6:59:29:ee:79:9b:
         b6:c5:e3:a4:92:22:67:91:49:20:6d:70:1e:b8:b5:b4:aa:f7:
         56:5d:fa:e3:cb:43:cd:92:1d:54:7e:5c:8f:38:4d:2b:c1:0d:
         35:1e:d8:ce:82:6b:13:ba:0c:07:60:36:76:c7:c1:75:70:12:
         a1:e4:2e:c3:b3:41:64:14:a7:62:6c:76:a6:2a:37:c2:c4:ee:
         8c:17:4c:73:29:78:be:dd:d2:12:85:08:6f:e3:b1:41:83:a7:
         53:93:a1:65:fe:1a:ca:bb:a5:6e:b1:15:21:99:ec:f2:3c:3c:
         3c:49:66:ab:7e:1d:b3:cc:36:ce:5f:3f:57:00:4e:45:d0:b3:
         eb:dc:9c:40:31:1c:44:cc:e8:c0:09:42:f8:3e:93:8a:a3:42:
         9c:b0:29:15:be:99:d9:1c:76:41:81:11:94:8f:45:72:46:5f:
         e1:aa:64:7b:23:16:bc:60:95:06:ad:0f:d7:e7:8f:d2:e2:60:
         92:ac:f3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:35:30 2021 by LibreSSL & rpki-client.