Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/fc/4e4815-0ba7-4e78-9539-61fd746069e0/1/VLe2JGBn1Fklh0FiG9lFtVnB-aQ.roa (download)

Subject key identifier:   54:B7:B6:24:60:67:D4:59:25:87:41:62:1B:D9:45:B5:59:C1:F9:A4 
Authority key identifier: C3:C5:8A:AF:3B:60:27:25:AB:C8:C6:B9:58:F9:E1:1A:51:42:97:B7
asID:                     AS26636
Prefixes:
    1: 45.158.8.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/fc/4e4815-0ba7-4e78-9539-61fd746069e0/1/VLe2JGBn1Fklh0FiG9lFtVnB-aQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451364 (0x6e324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c58aaf3b602725abc8c6b958f9e11a514297b7
        Validity
            Not Before: Apr  8 04:08:36 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=54b7b6246067d459258741621bd945b559c1f9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:65:35:d9:f9:d6:fa:64:3c:a3:2f:c9:64:8d:
                    89:49:a2:52:cc:21:a2:39:86:5c:06:d0:ba:c6:81:
                    3e:07:0e:e0:0e:c4:a0:57:17:5a:d3:3d:21:3c:1b:
                    60:6a:c1:46:cf:f3:0d:ac:57:5a:e9:bd:5d:45:ac:
                    ed:ae:75:4f:c6:0d:ae:2a:e0:53:48:5f:7e:73:ff:
                    0c:17:45:87:09:21:43:94:19:d6:08:6b:a0:3f:d6:
                    48:45:bc:b4:7f:bf:45:d2:70:f2:7f:73:e5:c3:bc:
                    0a:25:75:00:09:13:42:d9:5b:74:b5:ff:0c:80:a4:
                    b8:4d:f9:21:00:c4:67:e8:32:86:79:b4:24:ec:a1:
                    31:07:99:bd:7b:8a:65:ea:66:b5:c3:ef:21:16:b6:
                    22:bf:17:22:83:83:5f:2c:e6:11:9d:16:45:6d:68:
                    a1:43:02:0e:df:78:ff:6b:fd:10:bc:83:5f:71:1f:
                    d6:a7:5c:bb:aa:49:15:ba:55:fd:33:3b:b0:3d:3e:
                    c5:88:96:63:b3:a0:7a:5f:94:8c:6b:8e:29:76:11:
                    b9:1a:7c:a3:be:c5:97:e0:09:a1:70:bc:bd:d1:84:
                    4d:1f:bf:9d:24:dc:8a:d7:bc:e1:16:4d:68:78:db:
                    60:9a:fd:cf:23:e1:04:a8:72:c1:24:8a:e0:fa:7a:
                    22:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                54:B7:B6:24:60:67:D4:59:25:87:41:62:1B:D9:45:B5:59:C1:F9:A4
            X509v3 Authority Key Identifier: 
                keyid:C3:C5:8A:AF:3B:60:27:25:AB:C8:C6:B9:58:F9:E1:1A:51:42:97:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8WKrztgJyWryMa5WPnhGlFCl7c.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e4815-0ba7-4e78-9539-61fd746069e0/1/VLe2JGBn1Fklh0FiG9lFtVnB-aQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e4815-0ba7-4e78-9539-61fd746069e0/1/w8WKrztgJyWryMa5WPnhGlFCl7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:ef:8e:7c:2e:83:97:6f:4d:b4:e7:13:d6:a0:89:63:9b:01:
         13:6c:dd:02:1e:e4:11:c9:d7:c6:94:f4:d5:23:ef:e8:1f:3e:
         0a:97:5d:a2:66:98:5c:85:e9:0e:0c:d8:e7:97:11:9a:af:65:
         43:68:fe:33:17:1c:66:86:1a:2b:42:f8:7a:d8:c2:a9:78:c5:
         ca:5a:09:21:6b:7d:77:b8:a4:d2:f8:a7:6b:9f:03:9f:74:7b:
         c3:f0:f5:fc:31:e1:31:be:cc:85:99:19:05:bf:2a:83:3c:2e:
         cc:62:61:69:40:ad:7a:11:7a:33:f0:f7:02:c8:44:cf:71:54:
         08:84:d0:0d:72:f4:61:b6:fe:c3:d3:9c:88:c6:52:c8:a2:28:
         f6:44:7a:17:fe:a1:34:c8:11:15:f7:cf:97:84:46:db:cc:d5:
         3e:e8:77:f8:e0:fe:83:3b:01:9b:8f:0b:76:0a:41:2a:cc:2e:
         08:79:37:1c:68:1d:bc:c8:94:19:46:ff:95:ab:9d:31:64:78:
         4f:ed:48:1c:0e:82:1c:c8:11:b3:a4:0e:8e:9b:72:7e:ac:f5:
         54:b5:76:03:00:be:cd:96:f0:d0:c1:76:2e:f7:2d:aa:57:58:
         26:74:06:23:79:e6:59:d5:4e:3f:2d:fd:27:5f:f6:a9:9f:a9:
         e3:ae:f3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:17:19 2021 by LibreSSL & rpki-client.