Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/gHBP4DCsYVbAuX2gHktKQx2XRdE.roa (download)

Subject key identifier:   80:70:4F:E0:30:AC:61:56:C0:B9:7D:A0:1E:4B:4A:43:1D:97:45:D1 
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
asID:                     AS397373
Prefixes:
    1: 45.138.14.0/23 maxlen: 23
    2: 193.135.174.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/gHBP4DCsYVbAuX2gHktKQx2XRdE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133553896 (0x7f5dee8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
        Validity
            Not Before: Jan  1 15:07:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=80704fe030ac6156c0b97da01e4b4a431d9745d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8f:76:af:ac:4f:47:b0:b5:a5:3e:5d:8b:04:
                    bb:ef:1b:d3:0b:14:e5:06:b5:29:98:97:8b:5b:92:
                    8e:51:90:3a:41:a0:51:b2:b0:26:16:7a:c0:5f:05:
                    eb:7b:9a:62:c7:61:5f:d2:98:92:cd:02:de:9f:96:
                    1e:a8:3b:45:cf:fd:f1:78:d2:36:7a:c3:f5:79:16:
                    9c:ab:df:5a:a0:08:6d:34:a8:b8:04:07:ad:fc:82:
                    94:d6:63:3b:aa:bd:dd:51:61:f0:b1:f3:06:ce:c9:
                    68:74:7b:63:54:97:6e:8b:18:04:fc:53:a3:0b:60:
                    ee:86:7b:e8:5e:ba:fa:d8:f2:34:54:a3:79:32:03:
                    b3:ed:86:74:d8:b9:1d:e9:ae:c4:1a:24:c0:9e:58:
                    86:f2:16:bc:d9:1a:61:c1:ed:20:f8:c4:24:52:5d:
                    58:a1:75:96:4f:df:ef:9c:65:9f:5d:2d:64:5b:08:
                    94:e4:2d:48:c8:15:f4:14:ac:87:26:ba:e9:1f:e9:
                    e9:69:b2:30:a2:2e:fe:ed:38:5b:64:24:14:c9:e3:
                    d9:3f:c1:fc:c6:ae:0d:84:f0:fe:f4:4d:ef:22:10:
                    f5:7f:a0:96:f3:77:ce:a6:fb:1d:0d:6a:43:e8:d8:
                    67:a9:37:7e:6f:9c:0f:ea:8d:e0:7a:bb:80:0e:3d:
                    3c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                80:70:4F:E0:30:AC:61:56:C0:B9:7D:A0:1E:4B:4A:43:1D:97:45:D1
            X509v3 Authority Key Identifier: 
                keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/gHBP4DCsYVbAuX2gHktKQx2XRdE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.14.0/23
                  193.135.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:59:79:fc:64:74:f4:f4:c1:a6:b9:e0:78:5d:24:b5:0e:c7:
         0c:8d:61:78:1c:c5:0b:b1:bf:c6:0b:18:f5:67:fa:d0:3e:59:
         4f:fe:f9:97:d5:a9:a4:29:d7:c0:7a:07:a6:c1:b2:96:17:36:
         5a:9e:74:24:ee:3b:1f:2c:8a:98:61:93:26:ea:7c:19:6f:41:
         3e:5d:64:3d:c8:0f:09:df:e7:13:4f:7f:7d:2e:63:58:f2:56:
         3e:c2:50:ce:af:73:61:5d:b3:a8:1b:92:74:c8:35:19:0e:c1:
         70:f5:2d:e5:89:3e:56:7e:4f:b7:75:ac:0f:73:4a:37:62:01:
         0d:86:92:99:e7:d7:80:7c:70:8d:cc:fe:e2:fe:f0:68:d4:b8:
         03:39:06:54:36:c4:35:87:0f:b3:d9:d3:f6:71:7e:a3:6e:68:
         3e:d6:da:ff:22:d6:e4:c2:83:89:6e:d1:3a:ae:a5:9e:b7:c2:
         62:e3:6a:da:c7:20:fd:5f:fc:df:e9:37:ea:21:f6:3a:fe:ce:
         35:e7:f3:d0:ed:2c:d9:48:e0:c4:b5:1b:1c:b8:7b:fe:07:f6:
         78:72:15:46:4c:dc:83:00:fe:16:89:46:5c:3e:10:3a:e1:db:
         b3:6b:57:4d:b4:22:1e:ed:89:c4:c7:bf:9c:f0:6d:73:97:2e:
         45:62:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 17:17:51 2022 by LibreSSL & rpki-client.