Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/cd/585f16-6d9b-4ac4-953b-7fc3409d3ac2/1/SktvYi6aae1L6ECwGS2HAmGO-kA.roa (download)

Subject key identifier:   4A:4B:6F:62:2E:9A:69:ED:4B:E8:40:B0:19:2D:87:02:61:8E:FA:40 
Authority key identifier: EA:7A:7D:77:C6:6A:9F:F1:52:CE:26:50:B9:19:A6:F3:9D:F2:93:6C
asID:                     AS3356
Prefixes:
    1: 2.58.76.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/cd/585f16-6d9b-4ac4-953b-7fc3409d3ac2/1/SktvYi6aae1L6ECwGS2HAmGO-kA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61102528 (0x3a459c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7a7d77c66a9ff152ce2650b919a6f39df2936c
        Validity
            Not Before: Jan  1 00:53:14 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=4a4b6f622e9a69ed4be840b0192d8702618efa40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:98:f7:95:6c:24:16:cd:f2:16:26:77:d4:6e:
                    7a:e9:94:ac:03:8f:c5:95:8c:73:ae:e4:87:43:a6:
                    e0:3c:e6:3c:e7:bd:16:be:ce:dd:79:1a:2e:77:d3:
                    92:3b:1c:e2:14:9e:47:89:d9:cc:1f:44:f7:d0:c7:
                    25:f8:72:32:2a:ba:6d:37:24:f1:06:d2:f7:5f:32:
                    b7:71:ae:a4:84:af:ca:3f:b1:1a:b9:19:26:49:ae:
                    05:be:b2:0e:bb:80:1f:36:b4:8f:07:e0:f2:35:6c:
                    55:bc:ba:5d:1c:c1:c3:4e:8e:f3:9d:a2:bc:cc:43:
                    74:9f:e1:eb:c7:51:64:bf:d1:3f:18:b2:33:cd:e2:
                    a7:02:37:79:d8:67:c1:28:08:e3:06:74:84:42:91:
                    ae:87:bf:43:83:bf:4e:3d:cf:47:4a:be:f2:1b:5e:
                    b0:9c:01:69:7b:6f:65:78:3c:25:a0:3d:b4:d6:d0:
                    b1:f6:ad:3b:8b:25:15:44:89:62:82:a3:5f:af:44:
                    c1:79:8d:ca:49:5f:34:bc:30:e1:a0:af:49:16:1f:
                    bd:58:d0:32:49:5a:09:ee:44:4d:65:4e:47:82:82:
                    1c:2b:db:a7:ec:df:83:fc:a8:16:ad:2b:a8:2a:cd:
                    7f:e2:51:0f:99:bc:a3:06:da:f7:2f:f5:ff:ee:c6:
                    63:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4A:4B:6F:62:2E:9A:69:ED:4B:E8:40:B0:19:2D:87:02:61:8E:FA:40
            X509v3 Authority Key Identifier: 
                keyid:EA:7A:7D:77:C6:6A:9F:F1:52:CE:26:50:B9:19:A6:F3:9D:F2:93:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6np9d8Zqn_FSziZQuRmm853yk2w.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/585f16-6d9b-4ac4-953b-7fc3409d3ac2/1/SktvYi6aae1L6ECwGS2HAmGO-kA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/585f16-6d9b-4ac4-953b-7fc3409d3ac2/1/6np9d8Zqn_FSziZQuRmm853yk2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....:L
    Signature Algorithm: sha256WithRSAEncryption
         20:d2:24:bb:22:39:4d:30:83:44:c8:16:12:f0:0d:af:9f:b4:
         a1:5f:93:36:84:42:ed:fc:cb:30:89:bf:4a:9a:d7:85:0f:ad:
         8f:ff:12:3c:d4:21:69:6b:58:71:61:a9:59:04:56:97:d1:d7:
         e7:03:99:48:7c:56:77:ff:8d:1d:05:0d:5f:9f:6a:b3:ab:8d:
         22:65:79:9f:1c:66:ed:de:ad:f1:ad:68:73:be:89:b1:ca:58:
         64:0c:a6:f1:7b:00:b4:95:42:c4:51:3c:9e:99:c0:65:9d:c0:
         fb:c4:d4:89:9f:6a:98:0e:57:24:e1:d9:0d:fc:96:5c:97:a1:
         bc:a4:67:d8:9c:7f:00:8d:9d:6d:fa:3a:6b:0a:b3:78:c6:e5:
         ae:1a:b9:7e:cb:b7:32:de:f8:e4:94:9d:64:d4:aa:16:d9:50:
         2a:1c:9e:82:9f:17:c7:cb:92:9e:0b:d7:c6:6c:55:53:95:a8:
         bd:cb:6b:12:49:41:6f:43:d7:8a:09:dc:11:a5:7b:08:b3:af:
         8d:2b:8a:5e:cb:64:b0:87:7e:96:f0:c9:13:00:08:13:a0:ba:
         22:69:91:6c:10:49:86:df:ca:9d:f4:04:8d:0c:70:fe:1d:6a:
         e3:23:08:54:df:86:ea:aa:2b:d8:ed:51:62:d8:be:6b:bc:09:
         d2:b3:a8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jun 13 10:34:06 2021 by LibreSSL & rpki-client.