Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/zv_f2DaUY_Crrs82dCTnPOXimwc.roa (download)

Subject key identifier:   CE:FF:DF:D8:36:94:63:F0:AB:AE:CF:36:74:24:E7:3C:E5:E2:9B:07 
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
asID:                     AS3356
Prefixes:
    1: 109.207.136.0/22 (max: 22)
    2: 64.43.96.0/22 (max: 22)
    3: 64.43.100.0/22 (max: 22)
    4: 64.43.104.0/22 (max: 22)
    5: 64.43.108.0/22 (max: 22)
    6: 64.43.112.0/22 (max: 22)
    7: 64.43.116.0/22 (max: 22)
    8: 176.115.224.0/21 (max: 21)
    9: 64.43.120.0/22 (max: 22)
   10: 64.43.124.0/22 (max: 22)
   11: 193.36.204.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/zv_f2DaUY_Crrs82dCTnPOXimwc.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411684415 (0x1889ce3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Mar 12 14:19:36 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ceffdfd8369463f0abaecf367424e73ce5e29b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:28:a0:cf:d2:ca:31:3b:79:96:46:8f:7c:
                    7c:16:64:a6:bb:03:8d:c6:d5:fb:d6:0d:ff:a9:b6:
                    2f:09:e8:85:a0:2c:bf:d2:39:ae:8e:1a:b9:67:90:
                    8c:fa:a4:f8:e2:27:b4:b3:df:d3:ca:b6:28:b4:5f:
                    d4:17:f6:79:cb:4f:d6:33:c9:8a:c7:1c:79:fa:79:
                    ee:32:f4:2c:93:79:12:b6:2a:3d:26:76:42:56:4e:
                    79:27:2c:89:ae:c3:ac:43:5f:dc:20:74:6b:76:34:
                    69:71:48:8e:fd:99:d9:ea:ee:99:68:b0:f9:96:eb:
                    9e:be:40:21:29:7e:a6:8c:88:2c:5e:d0:16:ce:ad:
                    c2:8f:e2:dd:a4:0a:a0:d1:15:c5:e4:4a:06:ce:c7:
                    7f:46:75:89:76:25:e8:e7:88:4d:26:42:ed:78:c7:
                    40:3c:44:1a:89:52:7d:03:3c:97:22:04:07:d9:e8:
                    e2:48:d5:f7:55:df:67:4e:52:ca:91:5c:6e:0d:5f:
                    69:9d:7a:10:1a:78:ba:bd:bd:00:d2:3c:b2:8e:fa:
                    1f:db:a2:4d:3c:7d:ea:f8:c4:8f:a4:2b:82:b3:8e:
                    fd:77:54:dd:9f:8c:bb:35:5a:9f:3b:bc:a6:60:ec:
                    d0:a5:ea:f4:1b:ab:a2:38:21:f5:e2:de:c5:65:66:
                    69:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CE:FF:DF:D8:36:94:63:F0:AB:AE:CF:36:74:24:E7:3C:E5:E2:9B:07
            X509v3 Authority Key Identifier: 
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/zv_f2DaUY_Crrs82dCTnPOXimwc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0 0.....0....@+`...m......s.....$.
    Signature Algorithm: sha256WithRSAEncryption
         52:b3:14:18:65:7e:de:e3:d7:71:d4:bd:31:c8:59:c2:9b:77:
         4f:b3:1a:22:b2:58:75:04:b1:ca:45:72:60:89:e9:39:a1:bb:
         c6:d8:de:ad:95:2f:60:db:06:d2:0c:48:f4:5e:5e:97:5b:32:
         47:03:84:51:e9:7a:2c:b0:f5:a1:55:99:94:f7:93:09:70:95:
         6f:2a:52:4b:b2:c3:a1:94:f2:1b:bd:9d:86:af:ee:c7:80:bc:
         75:d8:bd:fc:ae:66:36:ac:96:90:5b:96:08:94:44:5c:3d:6e:
         c8:2f:41:6d:c3:f0:5f:c6:98:28:8b:9e:ae:53:96:19:d0:1d:
         62:ca:42:1c:f3:24:4e:42:1a:11:54:6d:89:ec:13:7d:1f:c9:
         95:97:7f:0c:32:30:ab:e5:d5:c1:a5:e6:e9:f4:46:1d:1d:2b:
         02:c3:59:be:08:a7:64:63:7c:86:0f:b3:26:bf:d3:5f:c5:a9:
         9f:0a:be:b7:2c:1c:29:fb:87:2d:e0:f9:68:64:8e:90:f1:60:
         af:16:37:7d:93:15:69:a9:5a:7f:48:79:e7:fd:00:2f:6c:0d:
         6c:6a:15:5e:cb:13:ec:5b:03:df:f6:35:b3:02:23:bc:b4:a3:
         dd:4a:20:a1:4a:ec:d8:52:62:43:d1:40:8e:be:e5:bd:77:21:
         37:7b:d2:fe
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEGInOPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NDljYmJkNWMyY2Y0MTk1Y2M2ZWM3ZjIxZjYwNzU4MWEwMjI0ZGFhMB4XDTIxMDMx
MjE0MTkzNloXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2VmZmRmZDgzNjk0
NjNmMGFiYWVjZjM2NzQyNGU3M2NlNWUyOWIwNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKKYKKDP0soxO3mWRo98fBZkprsDjcbV+9YN/6m2LwnohaAs
v9I5ro4auWeQjPqk+OIntLPf08q2KLRf1Bf2ectP1jPJisccefp57jL0LJN5ErYq
PSZ2QlZOeScsia7DrENf3CB0a3Y0aXFIjv2Z2erumWiw+Zbrnr5AISl+poyILF7Q
Fs6two/i3aQKoNEVxeRKBs7Hf0Z1iXYl6OeITSZC7XjHQDxEGolSfQM8lyIEB9no
4kjV91XfZ05SypFcbg1faZ16EBp4ur29ANI8so76H9uiTTx96vjEj6QrgrOO/XdU
3Z+MuzVanzu8pmDs0KXq9Burojgh9eLexWVmaX8CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBTO/9/YNpRj8KuuzzZ0JOc85eKbBzAfBgNVHSMEGDAWgBQ0nLvVws9Blcxu
x/IfYHWBoCJNqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05KeTcxY0xQUVpYTWJzZnlIMkIxZ2FBaVRhby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvY2RmNWY2LTJmMTgtNDJjNy05MzBlLWRjMDZkZDgwNTk2MC8x
L3p2X2YyRGFVWV9DcnJzODJkQ1RuUE9YaW13Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
Y2RmNWY2LTJmMTgtNDJjNy05MzBlLWRjMDZkZDgwNTk2MC8xL05KeTcxY0xQUVpY
TWJzZnlIMkIxZ2FBaVRhby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEBUArYAMEAm3PiAMEA7Bz4AMEAsEk
zDANBgkqhkiG9w0BAQsFAAOCAQEAUrMUGGV+3uPXcdS9MchZwpt3T7MaIrJYdQSx
ykVyYInpOaG7xtjerZUvYNsG0gxI9F5el1syRwOEUel6LLD1oVWZlPeTCXCVbypS
S7LDoZTyG72dhq/ux4C8ddi9/K5mNqyWkFuWCJREXD1uyC9BbcPwX8aYKIuerlOW
GdAdYspCHPMkTkIaEVRtiewTfR/JlZd/DDIwq+XVwaXm6fRGHR0rAsNZvginZGN8
hg+zJr/TX8Wpnwq+tywcKfuHLeD5aGSOkPFgrxY3fZMVaalaf0h55/0AL2wNbGoV
XssT7FsD3/Y1swIjvLSj3UogoUrs2FJiQ9FAjr7lvXchN3vS/g==
-----END CERTIFICATE-----

Generated at Tue May 18 11:58:20 2021 by LibreSSL & rpki-client.