Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/HKlJx626LV4jBrcjY02vHshRD0c.roa (download)

Subject key identifier:   1C:A9:49:C7:AD:BA:2D:5E:23:06:B7:23:63:4D:AF:1E:C8:51:0F:47 
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
asID:                     AS397373
Prefixes:
    1: 45.66.150.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/HKlJx626LV4jBrcjY02vHshRD0c.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151975063 (0x90ef497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan 20 21:23:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1ca949c7adba2d5e2306b723634daf1ec8510f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:83:a7:f7:5e:79:8d:47:5c:d3:38:d1:f9:31:
                    35:6f:36:c3:b3:39:4e:9f:d5:97:bc:67:1c:cd:aa:
                    99:10:18:0d:6f:5f:4a:11:5f:d0:18:9d:89:49:9c:
                    23:74:a8:b5:06:12:02:63:14:5b:77:48:1c:b8:a4:
                    35:4a:85:da:94:54:a3:ca:55:84:ae:81:4d:dd:88:
                    74:bb:3b:98:a2:3f:36:5e:96:b3:7b:f4:61:74:a8:
                    13:54:a0:b9:9b:a5:f2:11:be:79:c6:3a:73:60:cc:
                    67:8f:58:67:d3:af:ee:ab:4b:78:b9:a5:5f:8e:76:
                    00:3c:b4:91:16:29:29:be:9d:5f:1c:8b:23:c7:32:
                    a6:96:55:91:36:76:62:7c:10:dd:2b:91:3e:73:87:
                    80:56:91:9e:2c:1d:49:34:22:c2:8c:a9:5f:d7:e7:
                    93:3c:db:d2:99:1b:a0:d8:74:1a:58:58:2b:0a:e3:
                    59:83:ed:a9:f4:e8:00:cc:8e:5b:57:db:fe:65:48:
                    b7:aa:34:9e:5f:12:24:96:74:7c:c5:df:70:39:aa:
                    10:81:8d:1a:f7:8c:a6:09:20:02:4f:07:16:b0:5d:
                    b5:d5:61:90:0b:e0:e3:7d:46:ae:06:b7:87:ad:29:
                    5a:65:a6:16:e2:2c:5c:06:e7:f6:3d:a9:da:bb:ff:
                    93:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1C:A9:49:C7:AD:BA:2D:5E:23:06:B7:23:63:4D:AF:1E:C8:51:0F:47
            X509v3 Authority Key Identifier: 
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/HKlJx626LV4jBrcjY02vHshRD0c.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:86:d3:c1:79:f4:92:21:9c:3c:ef:26:2c:18:67:59:2e:77:
         69:e5:7b:bd:45:81:e0:82:56:f5:84:1d:99:b0:3d:91:a8:9c:
         9d:9e:be:7b:0b:77:f8:59:e7:16:69:fe:28:c6:b8:f2:1a:1b:
         ac:f9:9d:3d:20:de:5a:29:5c:58:ac:f2:53:52:4a:c3:2e:30:
         dc:8c:4a:e4:ad:6a:82:3c:5b:fa:1f:e0:40:c1:d9:85:82:25:
         3f:25:23:6f:2d:7f:8b:b7:04:ff:f8:bf:77:0f:c5:81:fc:22:
         66:9e:ce:b9:a3:82:e7:ff:ac:b3:3e:8f:34:a1:40:51:8e:f0:
         87:03:f9:a9:ad:07:b0:7f:1b:22:ba:d8:86:5f:f3:c9:89:83:
         46:c4:4d:46:af:5e:be:ff:77:87:dd:32:d2:ae:19:83:da:f4:
         bf:6b:90:9f:a2:1a:85:73:f3:f0:d5:f3:e7:5d:da:52:8d:e6:
         f2:f5:a8:04:3f:46:8e:c5:83:f1:b2:e9:45:9e:ff:c9:73:97:
         8f:4f:61:a4:3c:d4:49:51:e7:b6:56:4c:be:8a:a8:24:7a:2e:
         f8:c3:43:4c:6a:a0:75:d4:d2:cb:dd:22:02:4b:e5:5f:dc:e9:
         07:2c:34:0c:59:69:61:86:9f:30:77:61:48:8d:e6:6b:40:3a:
         ce:8b:53:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Jan 20 23:42:12 2022 by LibreSSL & rpki-client.