Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a8/7c21c2-8a28-4243-b65d-a05725f9d780/1/vNcsiDiNM11LOaGaZFNFvZQ4bxQ.roa (download)

Subject key identifier:   BC:D7:2C:88:38:8D:33:5D:4B:39:A1:9A:64:53:45:BD:94:38:6F:14 
Authority key identifier: D0:79:91:79:E6:39:8B:8A:BF:99:C2:D4:51:D1:F7:CE:5F:CA:86:72
asID:                     AS3356
Prefixes:
    1: 194.49.16.0/23 (max: 23)
    2: 194.49.16.0/24 (max: 24)
    3: 194.49.17.0/24 (max: 24)
    4: 194.49.4.0/24 (max: 24)
    5: 194.49.4.0/23 (max: 23)
    6: 194.49.5.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a8/7c21c2-8a28-4243-b65d-a05725f9d780/1/vNcsiDiNM11LOaGaZFNFvZQ4bxQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82397356 (0x4e948ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0799179e6398b8abf99c2d451d1f7ce5fca8672
        Validity
            Not Before: Apr 23 08:50:01 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=bcd72c88388d335d4b39a19a645345bd94386f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:45:41:ff:2f:70:12:e4:b5:c9:8a:dd:07:
                    da:fa:e0:1d:c4:a8:ef:68:5a:ad:a9:47:04:ae:64:
                    d2:c8:94:df:25:35:db:fe:c6:9b:6c:2d:f6:4f:50:
                    4f:8a:12:e5:86:c2:fe:6b:2e:01:ae:4e:33:d6:27:
                    89:67:72:5d:eb:cb:89:3a:d6:b6:7d:3d:f3:4e:35:
                    22:d7:47:eb:db:61:12:eb:8e:36:fc:95:44:ea:1d:
                    30:c1:81:60:de:83:0d:53:fc:3b:7d:ef:4c:35:63:
                    bc:32:06:40:15:b2:9a:aa:9d:33:ea:89:50:f8:14:
                    0a:a4:75:45:03:64:60:19:3b:43:cc:54:6e:ab:bb:
                    b2:ce:cc:d4:c6:a0:cf:98:1b:b0:e1:c1:6b:76:45:
                    83:3f:9e:64:81:4a:4c:5b:08:ec:27:f1:c2:ef:53:
                    90:6f:79:13:a2:f8:ed:09:da:57:d2:eb:78:05:7a:
                    3b:d1:e1:24:01:b2:cc:5e:34:1c:4f:a6:48:bd:80:
                    6a:0c:32:cd:1a:26:2e:5e:0b:97:c0:8e:48:49:65:
                    75:f3:e9:aa:4e:b0:19:aa:3e:8a:b4:d9:ba:d0:38:
                    7a:95:92:0c:34:78:dc:db:04:e8:30:a1:78:63:60:
                    7d:4a:36:04:09:b5:0c:20:32:1c:34:d7:9c:e2:3a:
                    5a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BC:D7:2C:88:38:8D:33:5D:4B:39:A1:9A:64:53:45:BD:94:38:6F:14
            X509v3 Authority Key Identifier: 
                keyid:D0:79:91:79:E6:39:8B:8A:BF:99:C2:D4:51:D1:F7:CE:5F:CA:86:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HmReeY5i4q_mcLUUdH3zl_KhnI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7c21c2-8a28-4243-b65d-a05725f9d780/1/vNcsiDiNM11LOaGaZFNFvZQ4bxQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7c21c2-8a28-4243-b65d-a05725f9d780/1/0HmReeY5i4q_mcLUUdH3zl_KhnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....1.....1.
    Signature Algorithm: sha256WithRSAEncryption
         1f:67:57:d4:b9:59:14:50:8a:ec:2a:4d:46:c5:98:54:c5:91:
         5b:f2:64:fe:86:80:15:d9:31:51:3e:96:3c:ce:ab:3b:bc:ef:
         f9:a0:5e:39:63:5b:03:eb:72:66:79:19:7e:ff:57:3c:12:a8:
         d2:69:8d:9b:b3:51:af:a5:d1:1a:23:f8:e5:f0:c9:08:f4:34:
         42:cf:10:14:5f:16:54:28:d8:ec:d9:36:ac:33:29:22:87:87:
         02:28:99:4a:ba:6d:6b:d6:0e:6b:2a:b4:ef:99:8d:2c:00:cf:
         7e:29:2e:f5:54:57:ba:8c:7e:59:3e:47:61:a8:68:52:eb:b6:
         2c:9f:db:0a:a2:93:73:b0:36:b8:0f:47:e8:9e:43:71:33:2c:
         cb:f6:a0:84:d1:54:f7:1f:06:e4:ff:15:2c:8b:3b:58:76:0a:
         31:4d:46:4f:39:34:dd:3d:88:e1:5e:91:8a:07:6b:96:d5:4d:
         a9:33:c7:f4:da:2e:6b:3d:bf:94:11:a1:d6:5c:58:9e:b0:69:
         ac:5d:92:32:ec:6f:63:35:2d:43:0a:4a:55:d1:83:86:51:77:
         7f:00:b7:e2:be:07:bd:f6:e9:fb:0f:ac:56:45:30:98:69:bf:
         d9:54:36:77:cb:19:75:45:3c:c4:9f:53:22:b9:b4:11:f6:1e:
         52:c5:f2:e1
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBOlIrDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MDc5OTE3OWU2Mzk4YjhhYmY5OWMyZDQ1MWQxZjdjZTVmY2E4NjcyMB4XDTIxMDQy
MzA4NTAwMVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmNkNzJjODgzODhk
MzM1ZDRiMzlhMTlhNjQ1MzQ1YmQ5NDM4NmYxNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKk2RUH/L3AS5LXJit0H2vrgHcSo72haralHBK5k0siU3yU1
2/7Gm2wt9k9QT4oS5YbC/msuAa5OM9YniWdyXevLiTrWtn098041ItdH69thEuuO
NvyVROodMMGBYN6DDVP8O33vTDVjvDIGQBWymqqdM+qJUPgUCqR1RQNkYBk7Q8xU
bqu7ss7M1Magz5gbsOHBa3ZFgz+eZIFKTFsI7Cfxwu9TkG95E6L47QnaV9LreAV6
O9HhJAGyzF40HE+mSL2AagwyzRomLl4Ll8COSElldfPpqk6wGao+irTZutA4epWS
DDR43NsE6DCheGNgfUo2BAm1DCAyHDTXnOI6WtUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBS81yyIOI0zXUs5oZpkU0W9lDhvFDAfBgNVHSMEGDAWgBTQeZF55jmLir+Z
wtRR0ffOX8qGcjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBIbVJlZVk1aTRxX21jTFVVZEgzemxfS2huSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTgvN2MyMWMyLThhMjgtNDI0My1iNjVkLWEwNTcyNWY5ZDc4MC8x
L3ZOY3NpRGlOTTExTE9hR2FaRk5GdlpRNGJ4US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgv
N2MyMWMyLThhMjgtNDI0My1iNjVkLWEwNTcyNWY5ZDc4MC8xLzBIbVJlZVk1aTRx
X21jTFVVZEgzemxfS2huSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAcIxBAMEAcIxEDANBgkqhkiG9w0B
AQsFAAOCAQEAH2dX1LlZFFCK7CpNRsWYVMWRW/Jk/oaAFdkxUT6WPM6rO7zv+aBe
OWNbA+tyZnkZfv9XPBKo0mmNm7NRr6XRGiP45fDJCPQ0Qs8QFF8WVCjY7Nk2rDMp
IoeHAiiZSrpta9YOayq075mNLADPfiku9VRXuox+WT5HYahoUuu2LJ/bCqKTc7A2
uA9H6J5DcTMsy/aghNFU9x8G5P8VLIs7WHYKMU1GTzk03T2I4V6RigdrltVNqTPH
9Nouaz2/lBGh1lxYnrBprF2SMuxvYzUtQwpKVdGDhlF3fwC34r4Hvfbp+w+sVkUw
mGm/2VQ2d8sZdUU8xJ9TIrm0EfYeUsXy4Q==
-----END CERTIFICATE-----

Generated at Sun Jun 13 10:30:27 2021 by LibreSSL & rpki-client.