Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/1-SExrKFKt0DD9tN2L575njNCWDU.roa (download)

Subject key identifier:   F9:21:31:AC:A1:4A:B7:40:C3:F6:D3:76:2F:9E:F9:9E:33:42:58:35 
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
asID:                     AS174
Prefixes:
    1: 45.13.152.0/24 (max: 24)
    2: 45.13.155.0/24 (max: 24)
    3: 45.13.154.0/24 (max: 24)
    4: 45.13.153.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/1-SExrKFKt0DD9tN2L575njNCWDU.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85812706 (0x51d65e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
        Validity
            Not Before: Jan  1 02:13:18 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f92131aca14ab740c3f6d3762f9ef99e33425835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:9f:35:3a:31:89:df:63:5d:14:9d:ec:d5:
                    ed:5d:c9:db:e4:5c:30:be:29:81:4a:e9:48:79:92:
                    1f:6f:e3:75:b0:f6:16:c5:cb:d6:86:96:d6:f3:13:
                    32:f5:ce:79:72:d1:67:63:b1:ff:0e:20:83:81:3e:
                    42:97:aa:80:a6:c1:21:4b:d1:28:0b:c8:64:30:6f:
                    5f:a9:11:2a:af:94:16:fd:a5:32:30:70:83:93:c6:
                    72:d3:96:b1:25:c6:78:a9:8d:ef:63:a0:47:c3:f1:
                    04:06:75:c4:b5:55:62:6a:c7:62:7b:7c:25:a4:9a:
                    a2:bb:7c:c5:20:02:88:8d:61:1a:23:1d:3b:27:b1:
                    bc:a4:d0:a0:3f:7b:8d:72:5f:4a:a3:23:c9:f2:21:
                    1d:43:55:a2:a0:75:57:c5:44:12:be:08:f7:7e:68:
                    85:16:56:af:37:67:5f:ff:53:59:08:3a:73:14:4f:
                    87:d4:56:ee:6a:90:25:ac:9d:4f:e7:78:7e:e4:bc:
                    77:f2:0e:dd:c6:cf:96:8f:fd:b6:1e:22:b5:c4:e4:
                    04:95:c4:72:5d:a4:b4:4e:5a:f3:57:19:c2:37:8e:
                    90:94:4f:81:06:6f:98:b6:61:ef:42:dd:e2:ec:0c:
                    07:ee:59:17:ac:95:40:25:c3:b0:91:01:f1:02:b2:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F9:21:31:AC:A1:4A:B7:40:C3:F6:D3:76:2F:9E:F9:9E:33:42:58:35
            X509v3 Authority Key Identifier: 
                keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/1-SExrKFKt0DD9tN2L575njNCWDU.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:75:b6:9c:39:68:71:6f:67:ae:7a:a5:eb:c1:04:d4:f2:91:
         a9:3b:c4:55:6f:03:7f:f4:7a:4f:e3:5f:9b:33:d1:7e:98:22:
         33:35:26:40:7c:61:95:b0:3d:c0:07:11:dd:66:27:bb:84:f9:
         9f:3b:0a:8b:63:cd:af:cb:26:fd:8c:fd:1f:5c:20:e5:28:1a:
         eb:4e:96:63:be:dc:e4:3c:3f:12:f0:76:08:f5:ae:d9:21:d6:
         ae:e6:78:ec:2d:be:0c:4d:e9:84:e6:75:1b:94:03:cb:0d:10:
         32:8e:c0:7f:a0:17:b1:45:c6:9d:42:ed:73:8e:9a:f6:2f:c1:
         c3:70:0c:35:d4:98:bb:82:83:41:f3:68:98:14:af:14:1d:5a:
         b5:cb:17:f4:34:c8:f0:e1:8a:b2:18:0c:1b:e9:c8:66:96:62:
         48:af:05:f9:d6:7b:41:c7:2a:98:e5:2c:71:f3:45:83:db:b0:
         06:69:52:f9:14:d5:f9:11:46:3d:d7:8f:b8:8b:ad:58:e2:9c:
         de:fb:37:fa:25:53:6b:33:71:d2:d4:e0:6b:26:42:e2:38:ec:
         67:b3:5b:1f:de:2d:b6:5f:8b:d9:2c:c2:cb:11:31:05:94:09:
         64:49:09:70:0c:6f:b8:f7:2c:83:9a:30:5b:1d:d1:f7:45:00:
         b8:6c:03:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:15:22 2021 by LibreSSL & rpki-client.