Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/fb/1497d8-6999-4f1a-af62-b80c6ff422a9/1/UmznPLKJoPGNo-L-7JzABGhfu3M.roa (download)

Subject key identifier:   52:6C:E7:3C:B2:89:A0:F1:8D:A3:E2:FE:EC:9C:C0:04:68:5F:BB:73 
Authority key identifier: 51:B0:F4:9F:22:26:AC:11:CB:E7:51:C6:10:B9:83:32:94:8B:57:88
asID:                     AS26636
Prefixes:
    1: 45.89.36.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/fb/1497d8-6999-4f1a-af62-b80c6ff422a9/1/UmznPLKJoPGNo-L-7JzABGhfu3M.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81890 (0x13fe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b0f49f2226ac11cbe751c610b98332948b5788
        Validity
            Not Before: Apr  7 14:47:05 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=526ce73cb289a0f18da3e2feec9cc004685fbb73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:07:89:27:f2:a4:14:82:bf:1a:f9:9f:d6:e6:
                    e6:e9:ee:ea:c0:e4:06:21:cc:54:79:00:3e:a0:ab:
                    9d:9c:b1:53:db:86:92:85:50:80:55:92:1c:9d:bc:
                    13:f2:b2:e2:50:a1:9e:b2:42:5d:4b:17:1e:21:57:
                    71:15:37:0f:5f:16:f2:7d:d7:6e:fc:d1:4d:2b:b8:
                    39:4a:0a:60:ec:32:41:ac:2d:6e:0b:ff:0d:24:39:
                    ae:42:dc:1e:26:b9:67:66:f5:31:d5:e1:dc:8b:36:
                    e8:c1:ad:09:c4:8d:a8:18:45:4b:0d:c0:42:d7:9b:
                    b2:96:a8:d5:5a:d8:4f:46:3b:44:30:f0:3a:5b:db:
                    e4:a5:a8:2e:e3:ef:d3:3d:c3:4d:65:ba:11:3e:08:
                    c0:d2:ad:53:2e:93:87:e0:83:01:83:4a:eb:f7:ae:
                    bf:9a:2f:2e:3d:7a:d8:c0:a9:a7:ee:7d:75:08:91:
                    54:84:21:5b:6e:be:6b:96:5f:bd:92:bb:78:7e:c2:
                    03:40:6f:54:8a:8f:ed:8d:08:f1:6c:79:a9:11:74:
                    cb:ba:7b:8d:da:3e:23:ae:4e:9c:79:e3:bf:f6:81:
                    86:87:e2:c4:b3:c9:42:5d:80:83:64:b2:7c:83:a9:
                    51:3c:7c:1b:3a:62:1a:4a:19:78:6d:0c:bf:3d:5f:
                    76:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                52:6C:E7:3C:B2:89:A0:F1:8D:A3:E2:FE:EC:9C:C0:04:68:5F:BB:73
            X509v3 Authority Key Identifier: 
                keyid:51:B0:F4:9F:22:26:AC:11:CB:E7:51:C6:10:B9:83:32:94:8B:57:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbD0nyImrBHL51HGELmDMpSLV4g.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1497d8-6999-4f1a-af62-b80c6ff422a9/1/UmznPLKJoPGNo-L-7JzABGhfu3M.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1497d8-6999-4f1a-af62-b80c6ff422a9/1/UbD0nyImrBHL51HGELmDMpSLV4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:2b:00:e9:c4:14:37:78:74:9e:d8:ed:f5:9c:41:2f:75:24:
         71:10:a4:b3:e6:81:b9:17:b0:01:ec:8d:cb:b3:7d:62:ab:86:
         73:57:fb:e3:fa:12:17:af:fd:98:aa:2d:5a:52:0d:6c:39:35:
         9f:ad:b1:66:18:30:4e:d5:35:d7:d5:ae:9d:7c:a3:f4:a9:8c:
         d5:75:24:ee:2f:9d:5d:aa:87:47:9a:b6:ec:14:b1:1a:15:0e:
         44:c6:22:bf:64:35:8d:9f:a9:fe:51:7b:b0:66:e4:1c:49:8c:
         f5:d1:91:01:80:18:e5:1c:14:bd:c6:50:60:2d:5e:8b:3f:3a:
         bd:83:e2:58:ac:c5:d1:a0:70:03:f1:42:08:55:89:85:77:14:
         2a:02:01:a8:a8:3f:11:83:44:00:ff:96:a1:c2:7f:ec:ba:1f:
         92:d4:b7:32:9e:0b:33:a3:21:c4:85:ad:db:0b:cf:9e:61:23:
         85:05:91:e1:80:bc:5f:7f:1d:4b:d6:57:40:09:dc:4b:ee:33:
         2a:6b:83:3d:62:f3:e0:a8:cb:83:fa:13:42:10:a7:36:39:83:
         4f:10:50:9b:80:c1:92:94:9e:76:30:18:89:a8:31:60:e2:41:
         04:9b:d1:16:8b:22:c0:49:dc:27:61:03:56:41:b2:66:d9:29:
         86:76:82:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:16:58 2021 by LibreSSL & rpki-client.