Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d2/61a86a-3d9e-4d6d-a722-cd438fc18d05/1/cOBhR4n_fTX6ypFyvZefiAO7dZY.roa (download)

Subject key identifier:   70:E0:61:47:89:FF:7D:35:FA:CA:91:72:BD:97:9F:88:03:BB:75:96 
Authority key identifier: 94:8D:46:52:AB:B1:03:AA:81:F5:87:FD:2D:13:01:49:26:5E:DB:B7
asID:                     AS3356
Prefixes:
    1: 45.136.24.0/22 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d2/61a86a-3d9e-4d6d-a722-cd438fc18d05/1/cOBhR4n_fTX6ypFyvZefiAO7dZY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61422 (0xefee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=948d4652abb103aa81f587fd2d130149265edbb7
        Validity
            Not Before: Apr 19 11:37:37 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=70e0614789ff7d35faca9172bd979f8803bb7596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f8:eb:2f:71:8d:d3:eb:da:ca:94:10:ef:1f:
                    74:ec:59:50:50:86:ab:06:2f:f1:25:a1:cb:ca:a2:
                    f7:08:2d:1a:09:12:f0:e9:f2:87:72:e3:87:a5:7a:
                    2a:61:6f:20:97:2e:78:f8:f4:89:cf:f7:cb:5c:aa:
                    69:c8:72:25:f6:3d:12:9b:df:d1:7c:5e:e2:8d:35:
                    d1:72:51:9f:a9:db:d8:25:1f:02:63:77:25:da:2d:
                    6e:6f:55:4f:a3:cf:27:f6:ba:d9:80:34:53:0b:5a:
                    28:11:38:e8:51:71:d1:27:60:06:f1:23:25:ba:ca:
                    2d:82:45:96:d7:a4:1f:d4:5f:83:ce:6c:04:99:82:
                    37:04:bf:0b:c2:0e:eb:2e:e8:18:27:ed:18:f1:70:
                    2a:96:aa:7c:56:35:b1:97:dc:fa:5d:90:d8:59:72:
                    43:54:73:35:1b:26:03:57:75:65:9e:de:4b:9f:3d:
                    29:3d:11:ff:c5:8b:cf:09:29:95:05:84:1f:e7:b6:
                    cd:76:45:2f:a7:31:ec:c1:ed:30:40:c1:01:f4:c1:
                    d1:01:ae:b4:ae:fa:c2:9d:84:06:59:26:75:b5:c3:
                    5c:ea:db:5f:fe:ae:d5:14:7c:31:4e:13:12:b0:f8:
                    e4:09:61:99:a0:84:f4:b2:df:e2:35:d9:16:6a:75:
                    58:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                70:E0:61:47:89:FF:7D:35:FA:CA:91:72:BD:97:9F:88:03:BB:75:96
            X509v3 Authority Key Identifier: 
                keyid:94:8D:46:52:AB:B1:03:AA:81:F5:87:FD:2D:13:01:49:26:5E:DB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1GUquxA6qB9Yf9LRMBSSZe27c.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/61a86a-3d9e-4d6d-a722-cd438fc18d05/1/cOBhR4n_fTX6ypFyvZefiAO7dZY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/61a86a-3d9e-4d6d-a722-cd438fc18d05/1/lI1GUquxA6qB9Yf9LRMBSSZe27c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-..
    Signature Algorithm: sha256WithRSAEncryption
         19:0b:18:45:3f:a1:d8:38:8d:ad:76:35:dd:ec:75:1b:20:21:
         6e:75:fa:20:3c:7c:38:89:80:b2:1a:ad:82:a3:08:21:f6:de:
         07:44:38:d8:e8:5f:ca:ef:71:f9:f4:cb:42:fe:f0:77:10:d5:
         d7:76:5c:a5:22:25:cd:f7:db:03:55:b5:82:dd:53:a6:cf:6e:
         75:74:23:6b:6e:5a:2c:db:4c:16:99:ef:91:94:32:ed:1f:cb:
         06:5a:a3:0a:cf:94:cf:61:3c:6b:a2:76:03:3a:9f:49:d1:a2:
         39:89:81:ef:39:94:c7:82:63:e7:9d:f9:5a:51:70:65:9c:5b:
         f7:2f:92:ef:17:c0:5a:bb:71:46:5f:20:88:79:fd:a3:4d:42:
         a7:25:07:ef:15:7b:79:89:d1:11:84:2d:f3:57:db:0c:df:4b:
         32:fc:e6:04:3c:cc:e4:bf:e6:fe:68:3a:2b:f4:8d:bd:bc:fa:
         68:13:49:53:d2:31:98:7a:a5:a5:e0:bc:e5:73:ed:96:e0:1a:
         23:fd:db:ad:5b:8c:e8:ef:a0:39:3f:e8:08:77:d9:47:72:bc:
         0f:2f:50:a2:30:a6:0f:07:e4:61:f8:4d:91:2c:fd:19:98:a6:
         cc:f0:0b:ec:62:42:4a:0e:c7:ca:f0:6c:3e:94:07:d7:8c:4b:
         1f:fa:fa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jun 13 10:34:43 2021 by LibreSSL & rpki-client.