Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/f8/2cddd6-17ca-4895-9d95-0c08109ae94e/1/sW86PTcm3p1GrN1PRlrdR6ZDT-I.roa (download)

Subject key identifier:   B1:6F:3A:3D:37:26:DE:9D:46:AC:DD:4F:46:5A:DD:47:A6:43:4F:E2 
Authority key identifier: AC:54:18:D6:FB:DD:B0:13:F3:24:49:9D:0B:82:10:F3:96:66:75:D5
asID:                     AS26636
Prefixes:
    1: 45.67.132.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/f8/2cddd6-17ca-4895-9d95-0c08109ae94e/1/sW86PTcm3p1GrN1PRlrdR6ZDT-I.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110119761 (0x6904b51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5418d6fbddb013f324499d0b8210f3966675d5
        Validity
            Not Before: Mar 29 15:11:08 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b16f3a3d3726de9d46acdd4f465add47a6434fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:89:9e:87:9c:ca:02:64:d8:14:67:ae:ba:f1:
                    17:72:f0:a3:7a:87:50:c3:b4:56:55:37:2c:ac:01:
                    e8:94:e6:dc:b7:54:81:5e:ff:1a:b5:46:d5:b8:3d:
                    70:a1:15:24:14:6f:2f:a3:5b:44:b1:41:b9:b6:24:
                    e9:dd:dd:58:5b:32:09:e3:6b:8c:b1:ef:74:ad:29:
                    eb:c4:9e:5e:60:ac:96:78:7f:08:9d:e1:17:2e:0a:
                    fe:4b:20:0a:73:b3:00:8d:da:ab:4a:0e:b0:83:a9:
                    df:e0:8d:19:dc:3a:3b:d2:15:9d:5b:8e:cc:58:c4:
                    ac:82:7f:04:4f:c6:c5:34:24:b7:48:a6:9a:f3:45:
                    b1:42:ba:bd:13:88:15:6c:a5:fa:27:c6:a6:97:6e:
                    f6:12:89:03:cd:6f:e0:d8:9a:34:21:a4:6f:28:64:
                    97:fe:ff:9a:96:eb:2c:8a:a0:af:01:e6:4d:c4:b1:
                    eb:4c:d3:8a:7d:1f:de:d6:b8:ec:67:a2:0b:f5:9c:
                    16:c1:f4:dc:fe:cd:41:8a:98:0e:4e:94:f6:ae:e0:
                    56:c4:a4:56:7f:24:21:ed:af:6c:cf:f9:93:b2:f1:
                    5d:95:22:b7:ea:75:27:8f:03:b9:9d:f3:cb:69:54:
                    1b:cf:83:dd:aa:78:ab:3d:bc:f1:92:7e:db:96:e2:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B1:6F:3A:3D:37:26:DE:9D:46:AC:DD:4F:46:5A:DD:47:A6:43:4F:E2
            X509v3 Authority Key Identifier: 
                keyid:AC:54:18:D6:FB:DD:B0:13:F3:24:49:9D:0B:82:10:F3:96:66:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFQY1vvdsBPzJEmdC4IQ85ZmddU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cddd6-17ca-4895-9d95-0c08109ae94e/1/sW86PTcm3p1GrN1PRlrdR6ZDT-I.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cddd6-17ca-4895-9d95-0c08109ae94e/1/rFQY1vvdsBPzJEmdC4IQ85ZmddU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:9c:64:b0:6a:7c:bc:8b:7b:53:bc:01:a6:87:49:13:2b:65:
         9b:44:2e:a6:2e:ac:8b:fa:64:0c:31:cb:01:9b:49:65:31:63:
         92:29:28:56:71:32:90:e9:f0:76:13:92:57:a8:6e:63:79:9e:
         e4:f6:95:b1:6e:0a:72:1e:dd:c4:57:33:ca:6e:3e:cf:c1:1c:
         65:da:a4:54:e9:6d:07:e6:c0:82:68:87:d2:34:aa:c2:06:78:
         ae:71:28:21:2a:10:b9:ec:9d:a9:14:24:ec:27:07:5a:12:75:
         ac:88:d6:1e:e6:5a:41:ce:b3:4f:76:71:a9:c0:4a:12:9f:ce:
         bb:40:e7:f9:2e:c6:61:a8:6b:a6:71:c9:f1:6e:9d:d3:d2:7f:
         03:33:fc:22:19:62:8e:fa:1b:a8:ac:37:a0:04:38:92:72:e3:
         5c:d2:bf:11:1f:89:12:96:6a:a5:9d:c9:d8:c6:d0:3f:70:72:
         41:8f:b3:c3:4c:41:10:63:95:6d:11:82:8c:b7:e5:8d:11:d1:
         02:a4:7f:41:df:ff:4d:d8:7e:85:6e:7d:97:14:1d:69:8d:87:
         bb:40:7c:8f:bb:cd:fd:45:9c:50:d8:e8:86:9a:95:a4:ca:07:
         36:b6:6b:10:03:89:94:80:87:44:91:89:a6:01:02:fb:21:12:
         46:f0:37:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:16:18 2021 by LibreSSL & rpki-client.