Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/RQJNNbJglx8TK5b9q7O4ZRquIJ4.roa (download)

Subject key identifier:   45:02:4D:35:B2:60:97:1F:13:2B:96:FD:AB:B3:B8:65:1A:AE:20:9E 
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
asID:                     AS3356
Prefixes:
    1: 85.209.206.0/23 (max: 23)
    2: 85.209.204.0/23 (max: 23)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/RQJNNbJglx8TK5b9q7O4ZRquIJ4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119409976 (0x71e0d38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
        Validity
            Not Before: Apr 23 16:51:41 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=45024d35b260971f132b96fdabb3b8651aae209e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:08:25:c0:47:00:7d:b1:93:b2:05:61:2f:
                    20:07:f7:e4:c3:0b:01:03:4b:67:6d:11:d3:2f:55:
                    28:66:75:08:90:89:10:cb:44:7a:05:9c:1d:e2:be:
                    f6:aa:2e:e1:5d:20:97:ef:e6:57:58:20:89:c7:34:
                    07:97:fd:f0:75:61:70:8d:de:04:18:88:d2:93:6d:
                    2e:91:ff:29:88:b2:94:78:be:49:6c:b2:35:e0:96:
                    39:fc:cf:12:0c:2b:f2:16:de:3e:54:3e:bb:7a:0c:
                    14:bd:38:3f:06:3c:3f:c2:e9:9d:11:f7:40:3a:15:
                    c5:ca:3a:f6:e0:1c:10:02:fc:8d:c6:18:96:e5:1c:
                    8a:f7:dc:b8:70:54:87:2e:84:d7:ed:65:a9:af:af:
                    ac:7c:49:b8:f6:76:55:17:37:4a:2b:0c:81:7f:42:
                    3a:77:ad:20:6d:a7:d4:e3:38:cc:53:05:66:34:20:
                    d8:54:5e:9f:eb:db:01:77:da:c0:33:14:68:9b:9d:
                    df:84:61:25:3f:12:d9:c1:ec:e4:78:38:16:f6:6d:
                    d7:68:88:35:a7:c8:ac:aa:6c:ff:c6:aa:13:e7:b1:
                    38:2c:54:16:d2:b0:5b:7f:65:37:47:fa:c9:c4:cf:
                    13:40:38:b7:c7:a8:a9:78:da:53:33:6d:50:31:0a:
                    12:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                45:02:4D:35:B2:60:97:1F:13:2B:96:FD:AB:B3:B8:65:1A:AE:20:9E
            X509v3 Authority Key Identifier: 
                keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/RQJNNbJglx8TK5b9q7O4ZRquIJ4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....U..
    Signature Algorithm: sha256WithRSAEncryption
         17:11:52:8d:c2:39:00:4a:d6:c4:c7:6f:bf:95:94:34:52:f9:
         dd:94:91:e6:91:5e:b6:38:d3:5a:8c:9c:1f:d6:15:01:e9:90:
         49:be:1f:d9:75:8f:89:86:4d:bb:20:b2:d2:f6:5e:be:03:1a:
         d5:15:68:9f:af:6e:df:9e:f9:70:f1:61:d7:44:c0:64:ba:c6:
         53:be:5f:aa:cf:cf:5e:d6:d9:1b:2c:db:b7:48:3f:ff:8b:bd:
         95:c4:50:9e:88:cf:e5:c6:6c:56:f2:1a:c0:fd:c3:45:52:b0:
         2d:58:81:0a:aa:a6:bf:c5:a1:01:93:57:4c:ae:b8:e5:b9:f4:
         4f:15:d2:82:d8:b4:a2:03:dc:fb:90:44:81:4f:f9:c3:a5:e0:
         0d:57:82:31:89:bd:ed:d6:0d:7d:cd:97:e4:6a:08:15:79:89:
         20:aa:36:8c:00:8b:96:94:cf:56:03:da:fe:50:5f:81:19:72:
         7d:3f:64:34:33:07:c9:c0:b0:e5:49:3a:23:e0:16:d0:9f:de:
         83:bd:20:11:46:61:c7:ac:45:ca:f0:b8:31:71:df:1b:c4:0b:
         e7:4b:40:a8:72:d6:bf:2c:02:93:e7:0a:c6:13:ef:c8:e4:72:
         1d:fc:ea:6e:28:e1:0c:e8:2b:dd:b7:f2:80:63:b5:b1:7a:7d:
         be:46:8c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jun 13 12:33:58 2021 by LibreSSL & rpki-client.