Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/tbpDZfMq9KTHLxyOlaJc3RIBlKA.roa (download)

Subject key identifier:   B5:BA:43:65:F3:2A:F4:A4:C7:2F:1C:8E:95:A2:5C:DD:12:01:94:A0 
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
asID:                     AS3356
Prefixes:
    1: 185.215.247.0/24 (max: 24)
    2: 82.115.8.0/22 (max: 22)
    3: 82.115.12.0/23 (max: 23)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/tbpDZfMq9KTHLxyOlaJc3RIBlKA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269745694 (0x1013fe1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Apr 28 03:30:29 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b5ba4365f32af4a4c72f1c8e95a25cdd120194a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:29:e4:3a:3b:ce:73:2c:e3:ed:75:b8:4a:
                    c7:67:43:1b:a4:f5:b4:a6:47:8e:36:0a:50:23:5a:
                    5d:f6:fa:56:d0:e5:78:c8:52:e7:0b:41:08:ba:e0:
                    3f:10:5c:4b:55:45:6e:5e:2d:9a:e9:e4:89:9a:a2:
                    5f:44:c6:20:66:2f:73:a9:7c:32:54:48:20:52:74:
                    fe:fb:7c:f5:17:fb:41:d7:ca:40:a2:82:20:bc:27:
                    4a:97:ab:d8:cb:c2:45:fe:a9:73:35:29:28:24:36:
                    66:8a:aa:7e:0d:d5:1d:83:40:0f:ee:30:76:35:1c:
                    c1:c8:5c:38:1c:81:6d:67:f9:4e:1e:90:87:42:c9:
                    87:07:5f:78:e2:17:e9:3f:a4:de:db:6b:f2:3d:b1:
                    82:c4:a3:3b:6b:f9:cf:45:5c:85:92:ac:6d:36:97:
                    a5:b4:b8:5f:60:b0:33:ce:88:89:7f:31:a6:0e:c4:
                    b3:f0:bb:01:72:8a:0c:45:11:5e:b9:89:11:25:a7:
                    08:17:44:07:43:60:ff:b3:f0:df:5b:41:77:98:f5:
                    cc:32:b6:72:a6:97:64:8d:ae:21:86:63:48:3f:33:
                    97:7f:f4:26:97:58:a1:5b:99:4d:72:ae:0a:d3:c5:
                    e7:01:79:a5:44:fa:b6:7e:a4:21:3b:50:13:31:36:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B5:BA:43:65:F3:2A:F4:A4:C7:2F:1C:8E:95:A2:5C:DD:12:01:94:A0
            X509v3 Authority Key Identifier: 
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/tbpDZfMq9KTHLxyOlaJc3RIBlKA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.0....Rs....Rs.......
    Signature Algorithm: sha256WithRSAEncryption
         d1:0c:57:8f:a1:04:85:97:be:9d:ed:11:f2:39:b9:c6:b8:46:
         3e:3a:c5:90:c0:9f:32:80:30:b3:52:69:88:e3:53:00:88:6d:
         0e:e3:b9:5e:4c:aa:f6:9e:85:4c:1b:8f:a1:cf:c0:cf:49:77:
         35:27:c5:d5:fa:30:f2:cf:d5:78:af:01:58:48:89:84:d0:31:
         d0:4b:a7:5a:25:43:a2:35:4e:a9:32:26:69:43:58:5d:00:be:
         3d:83:5e:70:99:15:b7:71:c5:b0:b6:d7:68:4e:0a:99:01:41:
         21:f6:d6:c8:16:59:ac:1e:4b:f8:5b:21:6d:29:8a:6f:36:e0:
         d1:cf:71:60:f0:2e:16:f9:4e:5c:a8:19:66:c5:02:71:c7:ad:
         70:9a:d3:ad:fa:72:c2:6a:aa:7f:61:a5:b6:4e:00:09:fe:bf:
         3f:76:b6:96:9e:f5:82:60:3a:88:66:10:67:a6:d9:6b:af:0c:
         b2:f2:f9:43:4f:ce:75:25:b8:3e:fe:80:db:bf:01:db:c7:b3:
         b3:26:17:1f:34:8a:99:fa:3b:b1:c3:b8:a0:85:d4:dd:53:3f:
         ba:6f:97:33:d0:b1:b8:05:df:ff:1f:7c:e5:76:20:38:2f:73:
         90:45:07:ba:6b:27:8e:02:1e:9e:60:18:54:af:2d:42:e5:d8:
         fa:ad:d3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue May 25 12:24:37 2021 by LibreSSL & rpki-client.