Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/LsFox7D9PJd21L6WRQw2nQb3JHk.roa (download)

Subject key identifier:   2E:C1:68:C7:B0:FD:3C:97:76:D4:BE:96:45:0C:36:9D:06:F7:24:79 
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
asID:                     AS3356
Prefixes:
    1: 212.60.23.0/24 (max: 24)
    2: 45.66.117.0/24 (max: 24)
    3: 46.16.12.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/LsFox7D9PJd21L6WRQw2nQb3JHk.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246826678 (0xeb646b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
        Validity
            Not Before: Apr  2 07:43:07 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2ec168c7b0fd3c9776d4be96450c369d06f72479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:06:6d:c0:8f:f4:4c:06:90:49:17:c5:ad:
                    c7:70:4b:10:44:50:b4:fe:6c:ed:b6:0a:14:2c:fe:
                    7d:b4:5a:7b:45:b7:b2:21:65:bb:eb:9e:07:27:c3:
                    5e:c3:82:fd:f0:47:ed:04:2f:5c:be:ba:d8:2f:8f:
                    40:61:e5:e0:08:fa:ad:43:50:f9:45:a1:f7:4d:c6:
                    6a:90:9c:b5:c6:41:60:3b:b4:c2:d7:27:fa:9b:65:
                    76:62:ab:4d:29:c5:2a:74:47:1e:9f:8a:58:13:c6:
                    bd:0f:73:41:e1:6c:e5:e0:cd:c5:94:3b:aa:29:74:
                    fd:9d:bf:41:9a:7f:be:08:d4:47:d6:cc:bb:67:2a:
                    69:5c:a0:39:4c:de:00:a9:d4:93:68:1e:27:36:b2:
                    46:e8:40:56:f3:dc:9d:0a:b7:55:38:6e:0c:ef:6c:
                    99:cc:f6:9f:ad:2a:27:71:ce:b7:3f:2d:b0:89:46:
                    85:f0:db:08:e0:a8:72:38:cb:f2:c6:1a:6d:9b:17:
                    ab:9a:de:21:b8:c8:d0:5e:72:6b:29:30:6b:ab:32:
                    6c:ec:0e:52:64:2b:21:92:b6:99:9c:97:f6:a8:60:
                    dc:00:54:f1:b7:20:a8:0f:95:8b:a7:c4:2e:c7:57:
                    bc:13:d9:da:01:fe:d6:64:a1:a9:46:54:45:d3:51:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2E:C1:68:C7:B0:FD:3C:97:76:D4:BE:96:45:0C:36:9D:06:F7:24:79
            X509v3 Authority Key Identifier: 
                keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/LsFox7D9PJd21L6WRQw2nQb3JHk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-Bu..........<.
    Signature Algorithm: sha256WithRSAEncryption
         5c:05:b8:43:78:7a:8f:7f:59:c8:7b:79:8b:b6:e9:07:e3:a6:
         ab:16:33:f1:7d:98:df:61:fa:06:9f:b2:f3:4c:01:31:a8:0f:
         77:f5:33:eb:51:ac:5f:3b:ec:c6:7f:30:6a:8b:01:b9:46:f6:
         52:9f:ff:c1:53:44:3e:39:0a:a6:45:bc:f4:85:e0:06:bb:93:
         fd:4a:d2:eb:76:30:38:c4:1b:09:c5:c2:ee:d4:99:d2:65:af:
         06:77:b7:18:b3:d9:75:48:14:b2:51:11:8e:21:f1:dd:2c:72:
         8e:92:fa:f4:86:81:99:63:a7:55:9a:5a:4e:41:d0:ae:34:37:
         75:b3:94:29:04:29:71:9b:6a:f3:33:45:8f:1f:23:3a:fa:9e:
         65:5c:91:a0:21:52:cd:88:cf:88:4a:95:66:c2:26:dc:64:84:
         07:27:2c:3c:9e:d3:5c:59:0f:60:df:62:1d:95:db:f0:6f:96:
         25:ef:45:c6:a4:cf:8a:3d:48:3f:eb:01:89:d1:b0:d0:df:01:
         b2:d7:43:a7:5c:e1:05:eb:78:83:d5:d7:e5:23:d9:e4:a3:45:
         b8:60:1a:a0:4a:06:9b:63:f6:97:4d:d3:fc:97:d2:d3:b2:a1:
         d3:d9:73:78:ab:9d:d7:c8:30:fb:1e:70:53:2b:37:4f:cc:52:
         fa:84:ad:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 13:45:47 2021 by LibreSSL & rpki-client.