Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e8/4adc7a-0c5a-4b35-93ac-7d647a4cb116/1/iqu4bT6yz0Nh0XL1cxYnKif5vrw.roa (download)

Subject key identifier:   8A:AB:B8:6D:3E:B2:CF:43:61:D1:72:F5:73:16:27:2A:27:F9:BE:BC 
Authority key identifier: 71:79:5A:59:78:FF:BD:8A:B1:EC:DF:2F:80:E6:02:1A:6C:99:BC:51
asID:                     AS398986
Prefixes:
    1: 45.144.246.0/23 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e8/4adc7a-0c5a-4b35-93ac-7d647a4cb116/1/iqu4bT6yz0Nh0XL1cxYnKif5vrw.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74316839 (0x46dfc27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71795a5978ffbd8ab1ecdf2f80e6021a6c99bc51
        Validity
            Not Before: Mar 19 17:42:16 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=8aabb86d3eb2cf4361d172f57316272a27f9bebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:97:d8:92:c1:0b:f1:43:60:6d:4c:74:e5:df:
                    8a:22:26:85:a4:74:01:a7:95:c8:42:68:ce:ab:6b:
                    b7:d0:50:96:e2:15:21:ce:53:b3:87:3d:8e:b9:b7:
                    30:88:5a:5a:57:26:56:7a:4a:88:44:24:81:e8:29:
                    11:ad:7f:0c:30:0b:92:ba:8e:75:09:4a:c5:ea:bd:
                    31:12:58:03:c3:8f:6e:da:83:40:ab:7b:03:6e:4f:
                    d8:bc:5c:7e:34:28:58:34:6c:21:aa:64:95:82:7c:
                    af:d3:4b:be:ca:f2:9a:70:d9:7a:30:d6:1f:06:a1:
                    cc:a7:53:d0:c5:bf:04:25:64:25:1a:a1:f9:9a:d4:
                    87:cb:60:3d:a7:11:3b:32:40:f1:26:85:ec:01:53:
                    64:a2:fe:43:89:eb:9a:2b:18:b4:be:a6:26:eb:00:
                    5e:76:0e:31:6e:d3:87:5d:19:d1:e8:c8:f6:a0:7c:
                    da:cb:3a:ec:4b:06:36:67:29:ea:db:99:42:6d:63:
                    f5:7d:eb:f3:e2:0a:fc:cb:01:09:65:a5:8a:38:73:
                    ba:c2:d6:fc:76:cb:88:e7:c6:dd:6a:34:00:0e:2e:
                    0f:f1:e9:88:fe:3a:9e:66:6b:5d:19:b0:af:c6:51:
                    57:63:60:e8:81:bb:63:f0:7a:3e:5f:05:eb:ba:76:
                    bc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8A:AB:B8:6D:3E:B2:CF:43:61:D1:72:F5:73:16:27:2A:27:F9:BE:BC
            X509v3 Authority Key Identifier: 
                keyid:71:79:5A:59:78:FF:BD:8A:B1:EC:DF:2F:80:E6:02:1A:6C:99:BC:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXlaWXj_vYqx7N8vgOYCGmyZvFE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4adc7a-0c5a-4b35-93ac-7d647a4cb116/1/iqu4bT6yz0Nh0XL1cxYnKif5vrw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4adc7a-0c5a-4b35-93ac-7d647a4cb116/1/cXlaWXj_vYqx7N8vgOYCGmyZvFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:9f:fd:9e:6a:28:13:1e:e2:75:9d:88:d3:76:56:41:ab:ff:
         49:44:b7:bf:56:b8:d8:68:d9:98:55:3c:e9:10:30:21:57:3c:
         37:eb:8a:3a:12:fb:a1:9a:f1:97:e5:be:35:e4:ac:59:90:d9:
         bb:85:cb:a5:09:63:83:6d:3a:e0:db:b3:b3:45:7c:46:35:5c:
         49:e7:6c:6f:41:73:e8:b6:b4:f1:62:f9:6f:15:2b:b2:bb:eb:
         82:30:0a:a0:c3:b0:db:02:9f:ee:3f:38:89:d8:e3:f9:a7:b2:
         71:c1:fe:15:91:74:b2:fc:0c:93:d7:d9:f8:71:b4:e8:f0:73:
         f3:e1:b4:71:e2:64:9d:82:bf:02:5c:4c:ea:cb:50:7f:7b:2f:
         79:b6:58:0b:8a:9b:7d:5b:6a:01:54:fd:2f:16:ad:a7:d2:df:
         68:6b:cf:76:d5:b1:b4:6c:21:c9:f0:af:6a:35:5a:7f:30:8a:
         ca:f7:9a:77:f1:d7:84:3e:2f:06:9e:0c:5c:a2:f0:50:68:c8:
         d5:ad:52:15:7e:1e:4d:c3:c8:8f:fe:bb:e3:de:d1:04:82:ca:
         e2:a6:7b:af:0c:31:32:47:68:ed:cb:4d:81:56:21:00:c2:2f:
         54:eb:77:31:25:43:6a:ee:f0:cb:8a:dd:79:20:df:38:31:42:
         f6:2f:de:54
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBG38JzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MTc5NWE1OTc4ZmZiZDhhYjFlY2RmMmY4MGU2MDIxYTZjOTliYzUxMB4XDTIxMDMx
OTE3NDIxNloXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGFhYmI4NmQzZWIy
Y2Y0MzYxZDE3MmY1NzMxNjI3MmEyN2Y5YmViYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPmX2JLBC/FDYG1MdOXfiiImhaR0AaeVyEJozqtrt9BQluIV
Ic5Ts4c9jrm3MIhaWlcmVnpKiEQkgegpEa1/DDALkrqOdQlKxeq9MRJYA8OPbtqD
QKt7A25P2LxcfjQoWDRsIapklYJ8r9NLvsrymnDZejDWHwahzKdT0MW/BCVkJRqh
+ZrUh8tgPacROzJA8SaF7AFTZKL+Q4nrmisYtL6mJusAXnYOMW7Th10Z0ejI9qB8
2ss67EsGNmcp6tuZQm1j9X3r8+IK/MsBCWWlijhzusLW/HbLiOfG3Wo0AA4uD/Hp
iP46nmZrXRmwr8ZRV2Ng6IG7Y/B6Pl8F67p2vEkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSKq7htPrLPQ2HRcvVzFicqJ/m+vDAfBgNVHSMEGDAWgBRxeVpZeP+9irHs
3y+A5gIabJm8UTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NYbGFXWGpfdllxeDdOOHZnT1lDR215WnZGRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTgvNGFkYzdhLTBjNWEtNGIzNS05M2FjLTdkNjQ3YTRjYjExNi8x
L2lxdTRiVDZ5ejBOaDBYTDFjeFluS2lmNXZydy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgv
NGFkYzdhLTBjNWEtNGIzNS05M2FjLTdkNjQ3YTRjYjExNi8xL2NYbGFXWGpfdllx
eDdOOHZnT1lDR215WnZGRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2Q9jANBgkqhkiG9w0BAQsFAAOC
AQEANp/9nmooEx7idZ2I03ZWQav/SUS3v1a42GjZmFU86RAwIVc8N+uKOhL7oZrx
l+W+NeSsWZDZu4XLpQljg2064Nuzs0V8RjVcSedsb0Fz6La08WL5bxUrsrvrgjAK
oMOw2wKf7j84idjj+aeyccH+FZF0svwMk9fZ+HG06PBz8+G0ceJknYK/AlxM6stQ
f3svebZYC4qbfVtqAVT9Lxatp9LfaGvPdtWxtGwhyfCvajVafzCKyvead/HXhD4v
Bp4MXKLwUGjI1a1SFX4eTcPIj/67497RBILK4qZ7rwwxMkdo7ctNgVYhAMIvVOt3
MSVDau7wy4rdeSDfODFC9i/eVA==
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:11:54 2021 by LibreSSL & rpki-client.