Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/b1/cfa4d7-fb7f-4982-be00-3cc0db9fff12/1/zFFpH7stJBoNyje3w4dUtF87J_I.roa (download)

Subject key identifier:   CC:51:69:1F:BB:2D:24:1A:0D:CA:37:B7:C3:87:54:B4:5F:3B:27:F2 
Authority key identifier: C3:C7:25:4F:7A:EF:9A:C6:71:A9:1C:31:43:B8:53:45:B3:BA:79:34
asID:                     AS3356
Prefixes:
    1: 45.149.15.0/24 (max: 24)
    2: 45.149.13.0/24 (max: 24)
    3: 45.149.14.0/24 (max: 24)
    4: 45.149.12.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/b1/cfa4d7-fb7f-4982-be00-3cc0db9fff12/1/zFFpH7stJBoNyje3w4dUtF87J_I.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89216775 (0x5515707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c7254f7aef9ac671a91c3143b85345b3ba7934
        Validity
            Not Before: Apr 29 05:43:29 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=cc51691fbb2d241a0dca37b7c38754b45f3b27f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:22:72:e6:0e:b2:24:07:b6:21:1d:36:ba:
                    bb:d9:92:24:55:27:c0:1a:3d:47:ea:a8:b9:44:50:
                    f4:fe:01:e6:44:bb:ce:28:ea:59:bf:a4:75:81:5e:
                    f5:f4:db:6f:2a:9e:01:26:8e:8e:97:9f:6c:76:db:
                    76:8b:c4:4d:69:96:45:a5:74:ab:6c:04:c7:26:7f:
                    fc:8f:06:be:58:fc:f8:d5:26:ec:43:f4:8a:43:70:
                    4d:4a:77:40:b6:a5:bb:fc:c3:b7:b2:15:af:82:92:
                    a2:65:1d:20:1b:8a:86:b8:ec:4b:5d:83:15:ec:1a:
                    df:b1:69:8e:ad:ad:3a:a9:61:34:c1:e3:c0:0f:7b:
                    80:7e:d5:1f:d4:9c:ca:b2:fa:3f:5e:9e:de:a3:e4:
                    c3:53:39:ad:c4:14:01:24:ea:23:21:13:a3:d7:4d:
                    de:1f:c3:ba:36:a0:89:27:e3:ef:63:8f:fa:32:12:
                    5e:96:3c:5a:be:13:ff:e2:ac:37:64:ba:06:a5:d2:
                    56:de:ab:de:2c:55:4d:b7:27:ca:be:2b:52:44:f8:
                    5c:ba:dc:99:0c:cf:ae:1a:a3:be:e2:db:73:1d:40:
                    37:a9:f2:13:aa:23:dd:64:8e:74:19:d7:76:c0:3d:
                    f8:3c:e6:a8:1e:fc:3b:05:67:96:f1:fb:23:a7:2d:
                    c1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CC:51:69:1F:BB:2D:24:1A:0D:CA:37:B7:C3:87:54:B4:5F:3B:27:F2
            X509v3 Authority Key Identifier: 
                keyid:C3:C7:25:4F:7A:EF:9A:C6:71:A9:1C:31:43:B8:53:45:B3:BA:79:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8clT3rvmsZxqRwxQ7hTRbO6eTQ.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cfa4d7-fb7f-4982-be00-3cc0db9fff12/1/zFFpH7stJBoNyje3w4dUtF87J_I.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cfa4d7-fb7f-4982-be00-3cc0db9fff12/1/w8clT3rvmsZxqRwxQ7hTRbO6eTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-..
    Signature Algorithm: sha256WithRSAEncryption
         06:af:98:cc:91:ff:cc:02:d9:87:7b:03:30:3e:b8:2c:b3:0a:
         57:17:b2:93:dc:3f:9d:f2:60:a9:bd:7f:5c:40:e2:7b:05:79:
         42:50:27:96:a1:99:c9:6d:60:23:67:0d:84:0e:32:8b:a7:23:
         f1:24:68:b8:52:61:29:69:25:8f:98:c2:eb:f1:62:4e:de:6f:
         b3:1c:e0:78:84:22:61:9f:e7:5e:08:7e:5d:cb:2c:bb:3e:31:
         a6:56:9b:14:e2:eb:ea:aa:2f:ba:75:41:b3:57:02:71:85:ff:
         69:db:f2:5b:a0:24:03:79:e4:e7:f6:85:b7:f8:43:1d:56:de:
         46:22:1e:cc:44:be:53:35:7b:c1:7c:db:d7:aa:47:d0:a8:1b:
         9d:2d:bd:1d:da:b1:61:cc:ef:11:db:53:0d:76:a4:68:f7:cf:
         f4:ad:59:66:f6:87:ff:32:c6:26:f2:3d:bb:b8:40:cf:d9:35:
         56:c8:e9:b8:db:03:74:a3:60:5a:ce:93:3f:69:ab:c1:3d:b1:
         63:54:dc:25:25:fa:95:bb:70:51:91:10:d0:d9:ae:d6:52:38:
         d2:fb:77:3c:d0:a4:c8:42:4b:90:a9:d8:81:3f:5f:ef:a6:c2:
         de:21:d3:29:b0:b8:e3:fb:e8:ad:73:5a:ed:01:80:ef:77:2d:
         c2:27:48:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jun 13 12:38:12 2021 by LibreSSL & rpki-client.