Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Zb34gzrWrLPMmersDl4dEK7yjxQ.roa (download)

Subject key identifier:   65:BD:F8:83:3A:D6:AC:B3:CC:99:EA:EC:0E:5E:1D:10:AE:F2:8F:14 
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
asID:                     AS397423
Prefixes:
    1: 46.37.100.0/24 maxlen: 24
    2: 46.37.116.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Zb34gzrWrLPMmersDl4dEK7yjxQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53878754 (0x3361fe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jan  1 09:57:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=65bdf8833ad6acb3cc99eaec0e5e1d10aef28f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:86:76:7f:5b:41:b8:e4:e3:ec:37:b2:95:49:
                    40:4a:60:7f:49:92:fe:c2:16:2a:b1:00:0f:99:b1:
                    2c:6f:34:58:6a:20:75:78:2a:d2:fe:49:bb:50:4e:
                    ee:67:51:f4:ed:f6:36:91:a0:fa:65:55:e3:d8:e6:
                    4c:ab:27:f9:a4:40:ef:9a:93:41:e2:b1:86:d2:1c:
                    97:2f:a1:0f:45:2f:cb:70:e7:86:5e:94:ca:f2:21:
                    e9:79:54:00:9e:17:ad:53:1d:46:f8:dd:5d:0d:a4:
                    fc:8b:71:a0:83:d9:6a:57:10:d0:09:c8:7c:58:19:
                    e0:49:09:32:eb:3d:99:5b:cd:6e:04:aa:f6:c5:25:
                    c3:44:47:98:e3:94:7c:b0:08:44:5c:ba:76:d9:e6:
                    60:8f:08:73:ff:67:d4:ea:7b:61:53:db:d1:92:47:
                    93:1e:16:96:17:b9:d2:50:55:1d:50:7b:28:fd:37:
                    47:82:c4:5b:ce:b3:4e:6b:78:f4:12:ba:be:0a:4d:
                    ce:59:cf:88:8a:67:92:b2:27:14:e0:63:bf:79:06:
                    74:b8:22:7a:59:fa:79:03:21:9f:97:6b:42:89:6d:
                    30:17:f1:03:f6:e7:81:ff:a9:56:8e:7b:f2:16:fe:
                    e2:5f:51:1c:04:63:08:b5:1d:19:8e:b1:7d:9e:50:
                    81:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                65:BD:F8:83:3A:D6:AC:B3:CC:99:EA:EC:0E:5E:1D:10:AE:F2:8F:14
            X509v3 Authority Key Identifier: 
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Zb34gzrWrLPMmersDl4dEK7yjxQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.100.0/24
                  46.37.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:e2:db:09:a7:9f:37:ec:0e:67:bc:44:9c:15:e4:24:6d:d1:
         12:fb:e8:45:d5:c0:0c:6b:3d:8b:73:f7:40:be:ca:da:b4:b2:
         2c:9f:00:d8:f5:11:69:85:f1:8b:cd:36:c4:1a:a1:4d:7e:15:
         a6:44:75:27:a7:5d:08:1b:d5:98:bf:2a:2c:a5:e1:1a:cc:c4:
         e5:83:5e:ca:64:91:99:6a:23:b3:49:0e:52:88:00:ae:23:bf:
         e9:68:84:22:2e:de:53:a7:fc:c3:2d:2c:f7:ac:6b:70:9d:0f:
         80:3f:24:e4:7f:cc:87:b8:f5:32:7f:83:18:d9:0e:02:49:da:
         2c:af:ef:9e:03:c6:7d:31:58:4f:83:be:10:68:67:38:72:8f:
         4b:44:36:ab:bc:1a:ed:df:bf:89:e8:f0:90:93:1a:05:41:66:
         97:ab:55:36:92:21:85:b5:85:8b:21:c5:83:15:1a:dd:89:4c:
         8b:63:36:7a:1b:26:cb:8c:eb:dd:d9:2e:ad:84:5a:38:f8:63:
         9f:c9:f6:7c:99:5e:da:c5:87:7b:1c:02:da:7d:a4:0e:d0:5f:
         08:66:63:ac:d6:d0:9f:dd:ca:41:ed:27:24:30:f4:7a:cf:ac:
         7f:cf:58:d0:0c:bd:bd:eb:c3:e8:ea:d6:d0:d6:94:c1:b4:5b:
         3b:1c:09:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 12:13:29 2022 by LibreSSL & rpki-client.