Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/49/9b61cb-e987-4d3f-b176-383e2bd40bd9/1/LyK0mxTX2omIZxxNbvvtgigECxE.roa (download)

Subject key identifier:   2F:22:B4:9B:14:D7:DA:89:88:67:1C:4D:6E:FB:ED:82:28:04:0B:11 
Authority key identifier: E8:95:68:60:E8:C1:0E:FD:93:02:48:A4:9A:17:18:4D:46:DF:EE:FD
asID:                     AS3356
Prefixes:
    1: 194.246.36.0/23 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/49/9b61cb-e987-4d3f-b176-383e2bd40bd9/1/LyK0mxTX2omIZxxNbvvtgigECxE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169177 (0x294d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8956860e8c10efd930248a49a17184d46dfeefd
        Validity
            Not Before: Jan 20 05:14:34 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2f22b49b14d7da8988671c4d6efbed8228040b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ae:70:e9:52:a4:ca:bf:7e:8c:bf:e3:57:36:
                    d6:e0:e7:4c:66:54:bb:f5:22:9b:7d:1f:56:27:e7:
                    55:bb:2d:f3:e3:06:e5:ce:fe:24:a9:64:b7:25:07:
                    1a:72:c6:7c:f8:54:41:97:92:c3:7f:b1:ef:56:db:
                    61:38:63:80:9d:7b:fe:63:45:0f:54:95:ed:d5:da:
                    43:ba:f2:1a:b5:32:6a:56:ed:99:4e:58:15:6f:89:
                    81:1a:a5:ee:3a:55:fe:4e:25:50:b8:a1:bc:0f:22:
                    48:47:87:e3:2d:e6:58:9d:92:f3:7e:7c:21:28:45:
                    75:0a:8d:f3:15:7e:3d:97:ab:e9:8d:cb:23:8d:24:
                    57:b8:17:79:85:6f:d4:d6:a1:ce:8e:57:ad:99:38:
                    5f:2d:30:6f:92:96:cb:be:dd:6e:e3:94:b0:6c:2b:
                    9d:d8:08:e1:9c:de:88:ce:17:74:d5:46:dd:f4:1d:
                    9c:b5:74:03:12:33:44:4d:e0:6c:d8:ce:94:47:74:
                    3c:36:42:84:50:4b:c6:26:61:ba:c7:ba:01:09:44:
                    1c:8f:53:e3:16:4e:a1:1a:61:0d:85:9a:8e:96:dc:
                    d6:c1:f8:38:43:d2:7e:70:54:b6:30:b5:95:74:30:
                    74:66:a7:26:55:11:c1:bb:85:50:25:57:40:02:de:
                    25:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2F:22:B4:9B:14:D7:DA:89:88:67:1C:4D:6E:FB:ED:82:28:04:0B:11
            X509v3 Authority Key Identifier: 
                keyid:E8:95:68:60:E8:C1:0E:FD:93:02:48:A4:9A:17:18:4D:46:DF:EE:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JVoYOjBDv2TAkikmhcYTUbf7v0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9b61cb-e987-4d3f-b176-383e2bd40bd9/1/LyK0mxTX2omIZxxNbvvtgigECxE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9b61cb-e987-4d3f-b176-383e2bd40bd9/1/6JVoYOjBDv2TAkikmhcYTUbf7v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0......$
    Signature Algorithm: sha256WithRSAEncryption
         30:1e:dc:7e:8b:f3:cc:35:81:8c:f5:94:50:bb:1f:97:d3:06:
         97:dd:d2:7d:3f:ad:8b:73:b0:00:c1:c5:e1:cd:f0:f6:ad:50:
         dd:45:27:a0:9e:49:d9:a4:00:a3:49:e2:a1:17:73:f5:a3:50:
         54:29:a0:2d:98:f2:7a:b7:3a:da:c4:70:f4:f4:b0:44:fb:85:
         5e:29:5d:8e:51:1f:c0:b2:68:ef:d3:38:02:e2:41:a2:20:c4:
         47:54:f7:3d:ae:7f:23:e3:f6:50:20:33:23:2e:4e:07:b4:09:
         b0:e4:d8:26:63:dd:ca:99:09:a7:86:e2:ac:b8:e6:16:cd:e1:
         a9:03:bf:50:6b:d1:0a:2d:4b:56:0a:0d:52:e6:ff:47:b2:04:
         38:01:7b:42:99:8d:f1:6e:3e:a1:4d:81:c6:b5:69:d3:a0:b1:
         58:91:d5:2a:da:11:3a:e7:c5:9e:3d:f7:c6:13:f5:24:fa:5a:
         6c:66:ba:7f:16:e2:4e:d2:4f:97:96:ad:1c:b3:0e:0b:49:2a:
         ed:57:da:55:8a:58:86:57:a7:03:2b:7e:91:39:4d:9c:6e:a0:
         24:3b:4d:e3:19:77:2c:9c:02:fb:16:60:30:3d:0b:23:82:91:
         40:67:e4:84:23:59:5e:9a:5a:c5:cd:36:8a:70:e7:42:87:51:
         82:50:b8:a7
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDApTZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU4
OTU2ODYwZThjMTBlZmQ5MzAyNDhhNDlhMTcxODRkNDZkZmVlZmQwHhcNMjEwMTIw
MDUxNDM0WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyZjIyYjQ5YjE0ZDdk
YTg5ODg2NzFjNGQ2ZWZiZWQ4MjI4MDQwYjExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAz65w6VKkyr9+jL/jVzbW4OdMZlS79SKbfR9WJ+dVuy3z4wbl
zv4kqWS3JQcacsZ8+FRBl5LDf7HvVtthOGOAnXv+Y0UPVJXt1dpDuvIatTJqVu2Z
TlgVb4mBGqXuOlX+TiVQuKG8DyJIR4fjLeZYnZLzfnwhKEV1Co3zFX49l6vpjcsj
jSRXuBd5hW/U1qHOjletmThfLTBvkpbLvt1u45SwbCud2AjhnN6Izhd01Ubd9B2c
tXQDEjNETeBs2M6UR3Q8NkKEUEvGJmG6x7oBCUQcj1PjFk6hGmENhZqOltzWwfg4
Q9J+cFS2MLWVdDB0ZqcmVRHBu4VQJVdAAt4ldwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFC8itJsU19qJiGccTW777YIoBAsRMB8GA1UdIwQYMBaAFOiVaGDowQ79kwJI
pJoXGE1G3+79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
NkpWb1lPakJEdjJUQWtpa21oY1lUVWJmN3YwLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC80OS85YjYxY2ItZTk4Ny00ZDNmLWIxNzYtMzgzZTJiZDQwYmQ5LzEv
THlLMG14VFgyb21JWnh4TmJ2dnRnaWdFQ3hFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS85
YjYxY2ItZTk4Ny00ZDNmLWIxNzYtMzgzZTJiZDQwYmQ5LzEvNkpWb1lPakJEdjJU
QWtpa21oY1lUVWJmN3YwLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwvYkMA0GCSqGSIb3DQEBCwUAA4IB
AQAwHtx+i/PMNYGM9ZRQux+X0waX3dJ9P62Lc7AAwcXhzfD2rVDdRSegnknZpACj
SeKhF3P1o1BUKaAtmPJ6tzraxHD09LBE+4VeKV2OUR/Asmjv0zgC4kGiIMRHVPc9
rn8j4/ZQIDMjLk4HtAmw5NgmY93KmQmnhuKsuOYWzeGpA79Qa9EKLUtWCg1S5v9H
sgQ4AXtCmY3xbj6hTYHGtWnToLFYkdUq2hE658WePffGE/Uk+lpsZrp/FuJO0k+X
lq0csw4LSSrtV9pViliGV6cDK36ROU2cbqAkO03jGXcsnAL7FmAwPQsjgpFAZ+SE
I1lemlrFzTaKcOdCh1GCULin
-----END CERTIFICATE-----

Generated at Sun Jun 13 10:16:51 2021 by LibreSSL & rpki-client.