Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/f4/d12e2b-4a4a-4d9e-bbc6-72075b203efb/1/1I2O60vR0L-mcYF8R6gOueeSBhU.roa (download)

Subject key identifier:   D4:8D:8E:EB:4B:D1:D0:BF:A6:71:81:7C:47:A8:0E:B9:E7:92:06:15 
Authority key identifier: 83:9C:87:17:8F:F2:80:99:47:2F:2F:7F:E9:71:6B:FC:13:B6:82:40
asID:                     AS26636
Prefixes:
    1: 45.157.160.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/f4/d12e2b-4a4a-4d9e-bbc6-72075b203efb/1/1I2O60vR0L-mcYF8R6gOueeSBhU.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68039 (0x109c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839c87178ff28099472f2f7fe9716bfc13b68240
        Validity
            Not Before: Feb 26 13:43:40 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d48d8eeb4bd1d0bfa671817c47a80eb9e7920615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:17:34:d2:8c:c9:c2:93:46:ec:54:e4:90:9f:
                    96:25:74:a9:3a:cb:ae:b5:1b:98:58:ce:90:49:56:
                    f8:31:8f:22:64:3a:ce:dd:68:c3:4c:34:e8:25:a2:
                    f8:bf:d0:ac:96:83:ed:77:d8:6e:8b:6a:2f:71:fa:
                    9d:5f:5b:7b:d1:6a:96:1d:36:78:db:98:40:2b:9b:
                    7b:40:e5:8c:67:9c:e5:23:3e:ab:1a:30:f5:71:de:
                    ad:3c:c9:60:f5:d3:ce:3f:da:a4:59:2f:fb:a5:d9:
                    50:4a:12:2b:bb:f6:79:cf:c3:03:a3:a9:4d:60:e3:
                    ad:c6:88:78:e0:6f:3b:d4:11:b3:fe:43:86:6c:63:
                    61:40:eb:5d:eb:6c:61:8f:1b:a0:f8:8b:68:e0:6a:
                    82:28:9a:56:47:29:27:55:c1:5b:3d:a9:35:27:dd:
                    42:57:7b:3e:4e:d2:da:3a:12:c6:c4:77:34:43:1d:
                    6c:0a:62:dc:3e:b6:04:f8:c8:16:97:84:5d:90:16:
                    5f:b8:c1:71:66:4e:4a:51:1f:cb:00:42:77:26:a4:
                    21:03:31:a0:42:a8:42:77:d7:89:fe:5c:40:da:06:
                    a8:a5:2f:04:1e:1e:d9:60:6c:f1:b7:52:d8:a2:c6:
                    27:fb:6f:ee:ba:34:49:6f:74:7d:75:42:0e:db:59:
                    aa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D4:8D:8E:EB:4B:D1:D0:BF:A6:71:81:7C:47:A8:0E:B9:E7:92:06:15
            X509v3 Authority Key Identifier: 
                keyid:83:9C:87:17:8F:F2:80:99:47:2F:2F:7F:E9:71:6B:FC:13:B6:82:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5yHF4_ygJlHLy9_6XFr_BO2gkA.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d12e2b-4a4a-4d9e-bbc6-72075b203efb/1/1I2O60vR0L-mcYF8R6gOueeSBhU.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d12e2b-4a4a-4d9e-bbc6-72075b203efb/1/g5yHF4_ygJlHLy9_6XFr_BO2gkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:f2:11:0f:96:35:17:ad:aa:c6:71:9d:c2:58:8e:e9:91:0f:
         fc:16:5f:3f:7b:d7:a4:9c:6b:6b:bd:c5:77:82:62:7f:09:32:
         b5:7e:d8:ca:d4:c8:dd:40:77:23:5c:d5:34:29:33:1e:c9:53:
         d7:3e:ab:6d:c3:1d:66:70:65:e8:14:15:56:03:0a:80:b4:e6:
         e4:b4:d0:e9:06:dc:46:fe:41:ee:a7:cf:6a:43:1d:a9:02:cd:
         02:d7:00:d5:b4:7a:ce:77:6c:80:f0:74:14:64:eb:7d:e7:f0:
         16:57:00:e3:e3:55:a7:2e:d8:43:d6:bc:ee:a8:2e:14:84:a6:
         0d:91:2a:e9:69:d1:0c:4b:09:32:0f:09:13:80:f9:50:1e:c7:
         4d:de:0f:2c:52:b6:7d:73:6a:85:d4:ea:db:3d:6a:fa:ea:21:
         57:e4:da:6d:66:40:25:da:c0:36:0e:c6:ec:cc:e2:df:7a:fe:
         65:71:01:d8:2c:1c:a0:37:84:ae:bb:52:d8:d4:5e:c4:a4:e5:
         06:22:fa:4c:9b:64:01:d6:ab:4a:63:e1:fe:26:eb:a7:3e:d4:
         11:f7:0b:9f:f5:8b:54:ee:d9:16:47:c0:5e:22:35:a4:54:7f:
         97:91:68:e8:15:dc:b4:a7:8a:ce:6f:7c:5d:9c:3e:ab:e7:02:
         2f:97:cb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:15:20 2021 by LibreSSL & rpki-client.