Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/8c/a40bc2-4b4b-47de-b08c-629b61782f5d/1/dS1oDqDT-0EZORdLTI5bAnl2ng0.roa (download)

Subject key identifier:   75:2D:68:0E:A0:D3:FB:41:19:39:17:4B:4C:8E:5B:02:79:76:9E:0D 
Authority key identifier: 5C:10:03:18:76:23:9D:4A:2C:42:6C:DF:B8:BC:0F:53:9C:BD:C2:D1
asID:                     AS3356
Prefixes:
    1: 195.88.56.0/24 (max: 24)
    2: 195.88.57.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/8c/a40bc2-4b4b-47de-b08c-629b61782f5d/1/dS1oDqDT-0EZORdLTI5bAnl2ng0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68494867 (0x4152613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c10031876239d4a2c426cdfb8bc0f539cbdc2d1
        Validity
            Not Before: Apr 29 05:02:25 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=752d680ea0d3fb411939174b4c8e5b0279769e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:26:5e:f3:5a:25:ec:35:88:5e:24:b3:e1:25:
                    29:6d:a2:d0:c5:49:3a:30:24:3e:9d:39:f0:3d:d9:
                    ac:fc:09:db:cb:77:8e:fb:c1:bb:22:55:ac:49:20:
                    a7:77:fe:ea:3e:12:e6:ef:e6:f1:47:8f:9c:57:c3:
                    d6:1d:a7:1e:a7:a5:d2:68:97:3f:81:3c:85:57:2b:
                    36:d8:eb:0f:02:fa:95:2e:45:a1:51:3c:9a:a2:b8:
                    a3:a4:b8:f6:26:01:d5:37:67:d6:e9:61:6a:c7:97:
                    8c:b6:2e:4a:c0:74:ee:cd:c9:6f:8f:c0:5b:a3:18:
                    0c:9c:71:06:0c:9a:44:0b:06:34:13:11:08:82:1a:
                    5d:b6:4e:1f:ef:37:3b:5a:59:1e:6a:20:32:5a:04:
                    04:12:34:7a:7e:24:16:08:5b:17:49:97:00:06:47:
                    44:0b:fe:47:e9:12:2f:f5:17:97:45:c8:04:ef:58:
                    d2:ac:db:6c:60:4d:74:0a:b0:33:07:4f:61:c5:59:
                    56:70:42:d8:49:e7:7d:b7:5e:94:00:68:ed:4c:62:
                    4b:ff:a9:45:33:a7:58:52:76:06:3c:60:82:b4:f3:
                    83:a1:5c:78:1d:60:16:f6:2f:ac:9c:4d:1e:a0:f7:
                    d9:5c:87:25:5b:cc:df:c6:a2:cf:b9:10:5d:1b:1b:
                    13:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                75:2D:68:0E:A0:D3:FB:41:19:39:17:4B:4C:8E:5B:02:79:76:9E:0D
            X509v3 Authority Key Identifier: 
                keyid:5C:10:03:18:76:23:9D:4A:2C:42:6C:DF:B8:BC:0F:53:9C:BD:C2:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBADGHYjnUosQmzfuLwPU5y9wtE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a40bc2-4b4b-47de-b08c-629b61782f5d/1/dS1oDqDT-0EZORdLTI5bAnl2ng0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a40bc2-4b4b-47de-b08c-629b61782f5d/1/XBADGHYjnUosQmzfuLwPU5y9wtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....X8
    Signature Algorithm: sha256WithRSAEncryption
         39:ea:af:f6:52:a6:ec:81:c4:12:36:10:23:b5:a3:af:ff:14:
         e9:97:5c:88:53:4c:e5:b4:11:6d:f2:57:f6:ac:1d:2c:72:eb:
         b3:0e:41:8c:7c:5d:26:a6:5a:08:91:1a:ce:fc:33:17:50:78:
         6c:f2:9c:26:63:08:d2:18:94:a2:4a:34:8f:ac:4e:40:9b:f3:
         b6:6b:bc:3f:98:02:b1:ba:47:f2:db:34:f4:16:2c:99:e8:3e:
         72:1b:26:a7:dc:77:1c:3b:ed:25:ab:7c:e2:5b:39:f1:99:2c:
         59:87:83:fe:af:bf:16:4b:6f:b5:f3:c3:b7:c6:2a:2e:02:fd:
         1c:5f:11:50:6f:0b:5c:45:83:bf:ad:d4:97:a0:9f:58:91:24:
         e3:fb:f4:09:57:bf:ed:3b:7c:68:50:e5:01:b9:3d:ab:ef:45:
         3b:a8:23:dd:9b:dd:1d:0b:82:e4:0e:04:41:eb:a3:2d:a0:d0:
         a3:34:06:2a:8c:f0:28:38:41:00:bd:e3:58:e9:9f:96:60:3f:
         89:8f:84:50:ed:72:50:0c:64:79:7d:37:da:50:0d:6b:13:6a:
         9f:3c:3f:ca:36:b0:31:85:62:09:a5:e4:80:ff:91:9c:a0:6b:
         fb:54:17:3d:33:2c:ea:0f:90:b4:7b:a9:7f:87:39:77:19:62:
         04:5d:a2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jun 13 12:34:32 2021 by LibreSSL & rpki-client.