Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/lkCYPmpJ_2dN24-di5hzIVopHaQ.roa (download)

Subject key identifier:   96:40:98:3E:6A:49:FF:67:4D:DB:8F:9D:8B:98:73:21:5A:29:1D:A4 
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
asID:                     AS3356
Prefixes:
    1: 85.237.209.0/24 (max: 24)
    2: 85.237.216.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/lkCYPmpJ_2dN24-di5hzIVopHaQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29667128 (0x1c4af38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: May  5 20:15:12 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9640983e6a49ff674ddb8f9d8b9873215a291da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:45:9e:20:f3:15:7e:e7:99:14:cc:bd:4c:2a:
                    b0:c8:de:15:25:c1:4a:a4:79:e7:5b:20:eb:ee:fa:
                    e7:ad:a7:6c:49:91:fd:2c:18:ff:68:fd:8b:36:d1:
                    24:c7:5d:e7:aa:25:fa:46:d3:33:85:c8:2f:33:f4:
                    c3:73:1e:25:91:54:4e:2c:91:6b:0e:a4:31:5a:c4:
                    ea:38:30:75:cd:07:b3:ba:5f:f6:bf:1e:81:1c:db:
                    bb:2b:93:d8:a5:07:12:f5:76:b0:99:91:5a:f4:31:
                    53:51:32:3f:e5:12:5a:f9:73:e7:96:cf:18:68:38:
                    0f:35:87:73:72:fa:f5:3d:50:38:82:9f:13:2e:01:
                    ab:81:3f:61:b6:a4:ad:87:36:a9:48:67:b3:0a:3b:
                    f3:54:ef:76:37:11:20:d9:8c:8c:67:bd:4c:e6:2c:
                    51:c9:e6:63:d2:09:f7:65:d0:a5:0a:0e:52:ab:5b:
                    38:5b:a3:95:28:9b:f1:e5:7c:6f:83:ac:c8:d7:ff:
                    66:82:3e:70:f2:f4:be:7f:69:a0:ce:3d:ad:8f:44:
                    cf:26:e7:96:67:67:5c:15:48:a7:f2:b8:fc:ed:47:
                    4e:e8:8c:9a:1a:a3:1a:af:38:54:56:40:8d:50:8f:
                    89:9d:df:30:19:d9:0b:a9:83:79:9f:98:b8:96:09:
                    55:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                96:40:98:3E:6A:49:FF:67:4D:DB:8F:9D:8B:98:73:21:5A:29:1D:A4
            X509v3 Authority Key Identifier: 
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/lkCYPmpJ_2dN24-di5hzIVopHaQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....U.....U..
    Signature Algorithm: sha256WithRSAEncryption
         4b:88:b1:ec:13:34:49:1d:f5:8e:98:f4:6d:dd:a9:a3:46:21:
         a2:8c:10:e5:d9:cf:ee:9e:2f:70:5d:c4:b9:2d:b7:3b:21:8a:
         f5:74:62:ba:96:ce:6f:0d:06:64:d6:d7:de:4e:83:ec:b4:f4:
         71:43:a5:1d:aa:80:63:87:d7:43:a8:7d:c1:4e:f1:0c:f3:b4:
         dc:bc:a3:e9:20:12:0b:90:93:b3:40:06:41:e2:27:fe:a1:aa:
         1a:90:38:e2:59:1c:1f:38:0a:95:d6:d5:92:3c:d2:4e:7d:ec:
         e5:18:0b:bc:cf:50:b1:61:b5:da:7e:e5:2c:d8:84:b5:43:97:
         98:fb:dc:73:c9:4c:5a:ba:83:6d:09:ee:59:aa:0b:b9:38:77:
         70:ce:ce:2a:c5:4a:8d:d7:10:0e:5e:cb:a2:37:9a:5c:f6:97:
         00:ea:29:ef:06:a4:1d:46:af:6d:8d:d5:ee:3c:b1:9b:6f:97:
         d9:10:53:73:50:c8:f4:56:c5:6c:25:7e:34:b1:b8:05:5e:29:
         3e:c3:16:33:dc:c3:97:9a:4a:ef:b0:f9:8f:e2:d0:fa:69:c0:
         99:4c:50:76:35:57:72:a4:de:8d:23:8a:03:2c:cc:46:c5:61:
         72:c8:68:10:18:7b:02:23:dc:ad:7e:b1:99:d5:eb:f7:fe:54:
         93:eb:45:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 11:25:00 2021 by LibreSSL & rpki-client.