Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/P4B3WPBDVjlFfGxCGUXXk8XmKQ4.roa (download)

Subject key identifier:   3F:80:77:58:F0:43:56:39:45:7C:6C:42:19:45:D7:93:C5:E6:29:0E 
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
asID:                     AS26636
Prefixes:
    1: 84.245.16.0/20 (max: 20)
    2: 185.241.208.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/P4B3WPBDVjlFfGxCGUXXk8XmKQ4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160880431 (0x996d72f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
        Validity
            Not Before: Apr  7 14:45:08 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3f807758f0435639457c6c421945d793c5e6290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:df:30:20:e9:38:d2:bd:f1:ea:05:2a:57:09:
                    2b:7c:f4:ff:c2:dd:45:8b:73:99:c1:4d:f7:81:2a:
                    17:47:27:27:0f:15:a0:3a:58:3f:e7:4b:65:19:21:
                    a2:a4:c4:af:0f:0d:f4:0d:90:21:a9:b5:72:07:d2:
                    d8:26:4d:36:c0:9b:16:c9:d1:d0:ac:99:18:ee:21:
                    7c:7e:db:a3:06:34:46:e5:43:cf:8c:f2:a5:2f:5e:
                    8f:c4:b8:5e:1a:52:80:e4:a4:35:dd:79:92:8e:9c:
                    d1:e9:a6:10:cd:0d:c5:76:9a:e3:29:62:59:ca:99:
                    e7:12:c6:01:5a:2c:df:1e:d0:89:dd:43:b6:4a:d5:
                    38:41:d2:b8:75:b4:cb:9a:4b:7b:72:bd:d7:ad:08:
                    72:8f:aa:77:8e:1a:cf:15:2a:18:f2:c9:f9:22:e0:
                    f0:30:fa:f1:8a:46:61:40:1e:49:aa:8c:99:39:4b:
                    41:12:06:d4:3a:05:a5:12:46:76:7e:9e:1a:e4:d3:
                    ea:65:1c:2f:44:50:37:a5:e5:60:ea:ae:4b:5c:42:
                    a2:5b:26:aa:85:36:07:94:4a:31:5e:e3:e2:f0:c6:
                    57:d8:87:63:a2:51:af:c2:00:45:3b:ae:6a:2d:f5:
                    69:d4:97:c6:a1:bf:71:75:0c:f4:e2:f7:d2:14:4e:
                    76:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3F:80:77:58:F0:43:56:39:45:7C:6C:42:19:45:D7:93:C5:E6:29:0E
            X509v3 Authority Key Identifier: 
                keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/P4B3WPBDVjlFfGxCGUXXk8XmKQ4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.245.16.0/20
                  185.241.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:b3:06:6a:cd:39:15:3a:0f:b0:35:aa:ee:69:45:29:dd:e5:
         3a:e0:c9:ff:9d:f7:d3:23:62:06:a4:8b:15:9d:7a:07:2d:ac:
         e2:24:d2:2c:3e:2d:ee:32:09:e5:52:90:b6:40:0a:45:cf:e6:
         6a:63:a4:86:78:e5:d4:0e:d4:fa:9a:41:df:49:b0:7b:41:39:
         39:1a:f1:fb:86:94:5f:58:5f:8e:d9:f0:26:b7:3a:e1:4c:78:
         6c:27:6c:9e:bb:1d:69:fc:dc:ea:5d:f3:f4:82:f9:ae:fa:69:
         81:38:0a:73:aa:f5:fb:c1:7f:c5:13:2f:26:37:da:13:e0:89:
         4f:ad:12:0f:aa:51:ed:39:04:26:ad:29:2f:93:cb:95:83:46:
         b7:a0:63:5c:f4:31:a2:53:d3:43:25:95:d4:37:19:b8:25:aa:
         af:e5:87:c0:40:b5:d3:e0:2f:2e:88:8d:c1:67:8f:25:00:02:
         52:f9:cc:d2:e1:5b:08:9a:6b:40:39:61:e9:9e:92:18:60:e3:
         40:a2:4a:91:df:d0:1e:03:78:0b:be:0a:6d:44:78:51:f1:b1:
         55:05:36:45:fe:35:53:98:d8:c9:b8:4c:8a:d4:90:7a:c6:76:
         1b:a0:94:43:42:60:a8:c7:08:75:f3:b0:f2:1d:8c:e1:f6:ab:
         2e:42:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:58:47 2021 by LibreSSL & rpki-client.