Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/Idb8pvdT5hcyRHXm2bbRO5mtZKo.roa (download)

Subject key identifier:   21:D6:FC:A6:F7:53:E6:17:32:44:75:E6:D9:B6:D1:3B:99:AD:64:AA 
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
asID:                     AS3356
Prefixes:
    1: 185.194.188.0/22 (max: 22)
    2: 94.199.160.0/21 (max: 21)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/Idb8pvdT5hcyRHXm2bbRO5mtZKo.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73272579 (0x45e0d03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
        Validity
            Not Before: Jan  1 07:46:53 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=21d6fca6f753e617324475e6d9b6d13b99ad64aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:58:06:05:01:5e:3c:60:4c:9f:70:40:28:
                    ec:03:b3:aa:01:63:6c:5d:df:77:1c:5e:c7:0a:72:
                    d6:9b:ce:c8:ea:cd:27:54:47:f1:c0:b7:a0:dd:90:
                    33:60:9b:2b:f7:94:85:40:2d:82:c1:2a:8d:1f:3d:
                    8b:55:e2:65:2f:26:98:c7:1b:85:f4:5a:0e:0f:6a:
                    24:8b:3d:43:7e:ee:75:e0:24:7f:9b:6f:e8:92:0e:
                    12:51:fc:55:84:93:99:70:16:89:ae:23:9b:04:e8:
                    75:64:29:e6:cf:3f:a0:6d:29:5c:7f:3f:49:fc:2c:
                    7e:67:68:4b:2d:a6:3d:68:2c:25:07:71:53:48:ba:
                    51:c3:90:5d:b6:ef:26:a6:ac:3f:29:2c:8b:49:52:
                    e3:38:54:e8:e6:dd:47:a6:eb:80:a8:d6:76:77:c5:
                    3f:de:b0:6a:14:8a:51:4e:d2:56:a3:00:2a:3f:44:
                    d7:7d:58:60:78:58:78:d2:2b:0a:65:0f:28:9f:b4:
                    bd:9a:97:c0:c3:89:5f:07:64:ca:a1:64:39:ec:ae:
                    71:60:86:f5:3d:c6:c7:3c:4d:02:88:33:8e:7c:d8:
                    3b:64:4b:17:f5:1a:fa:10:41:59:7f:ca:fb:ca:52:
                    a0:64:c9:fd:28:71:ca:c3:ac:ba:18:6a:6f:aa:ca:
                    49:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                21:D6:FC:A6:F7:53:E6:17:32:44:75:E6:D9:B6:D1:3B:99:AD:64:AA
            X509v3 Authority Key Identifier: 
                keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/Idb8pvdT5hcyRHXm2bbRO5mtZKo.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....^........
    Signature Algorithm: sha256WithRSAEncryption
         b4:b5:78:ab:17:91:0c:47:8a:8c:79:f0:c4:32:6b:d3:c1:a6:
         bc:7b:03:70:c0:3a:58:33:04:c1:33:54:b8:41:c7:49:aa:54:
         f8:86:b6:b3:14:b1:98:b0:30:7c:65:b7:45:14:2a:53:1f:69:
         0b:79:f3:16:78:50:db:8a:89:cf:e1:b7:77:be:b8:36:29:79:
         f9:49:d8:3c:9c:c2:87:32:9e:a8:54:1d:7f:6b:8b:f2:6d:60:
         d7:75:22:be:dd:82:06:80:6f:c0:0c:67:ca:c2:80:e4:5e:01:
         bf:3a:45:3b:7e:58:8d:36:3e:70:d5:df:0d:c6:55:d0:f4:6c:
         c9:68:01:d5:cd:60:ff:d7:8f:89:c3:04:82:cb:3a:3a:83:8a:
         50:d7:c7:8e:a6:a1:dd:62:40:26:49:f7:ec:36:b1:10:dd:2f:
         d6:cd:bf:ab:16:b3:6a:ed:b8:33:84:67:1c:56:60:02:60:bd:
         e1:cf:15:96:91:75:8d:44:33:ed:09:18:d2:c7:45:fa:63:f7:
         c7:c4:c0:2a:65:94:b4:63:24:36:41:65:fc:aa:91:35:fe:4f:
         eb:b0:ee:d1:ee:df:70:7f:f6:6d:22:86:91:13:91:29:fd:51:
         dd:6c:c7:38:74:d8:48:56:6d:c5:4b:38:d4:8a:43:5a:e4:fe:
         64:24:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jun 13 10:21:38 2021 by LibreSSL & rpki-client.