Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/PCKf0PMOPQllJKvzpywGO0jhqaY.roa (download)

Subject key identifier:   3C:22:9F:D0:F3:0E:3D:09:65:24:AB:F3:A7:2C:06:3B:48:E1:A9:A6 
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
asID:                     AS3356
Prefixes:
    1: 195.93.197.0/24 (max: 24)
    2: 195.93.196.0/24 (max: 24)
    3: 95.130.110.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/PCKf0PMOPQllJKvzpywGO0jhqaY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841600792 (0x3229cf18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
        Validity
            Not Before: Jan  1 01:08:03 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3c229fd0f30e3d096524abf3a72c063b48e1a9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f8:52:76:c8:2f:0b:60:c2:6b:06:7b:7a:7b:
                    d7:b0:8f:7a:f0:f0:ac:fe:9b:d2:45:2b:8c:ec:20:
                    2a:bd:bb:a1:07:5d:8e:2e:c7:da:d8:df:23:5c:c1:
                    1c:f3:fd:11:6f:14:3c:72:e8:e0:41:a8:01:eb:f9:
                    eb:42:59:cb:c5:fe:4f:1e:18:69:17:e0:fd:ef:d4:
                    a8:4d:e2:0b:02:68:75:98:aa:38:62:98:9c:6c:94:
                    2c:5e:07:2d:95:81:34:cc:d2:96:cd:86:11:21:1b:
                    1a:7b:44:64:01:88:b6:f8:b6:da:7c:c6:04:a5:26:
                    e7:52:a7:1e:cf:09:87:d6:f5:6c:db:b7:82:b9:a0:
                    93:9b:3d:5c:5d:92:11:3d:0f:0f:3d:03:09:f0:98:
                    3f:04:0d:51:6b:51:a9:62:62:7b:23:c0:1d:04:38:
                    b5:f6:cd:9c:ca:92:52:f0:2b:66:7a:99:f6:5d:16:
                    92:69:4e:d8:01:2b:2c:7e:24:9d:95:67:22:51:dd:
                    a0:74:e1:96:d8:53:b7:2b:6f:b9:bc:3d:bb:10:fd:
                    f2:f6:00:73:0c:af:6e:7d:65:8a:45:50:6b:33:7d:
                    ce:58:08:59:a3:4c:b8:70:3f:a6:9a:2e:8f:66:a4:
                    b7:60:e4:a4:5c:bb:20:f1:0a:8e:4d:c3:fd:b9:c0:
                    96:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3C:22:9F:D0:F3:0E:3D:09:65:24:AB:F3:A7:2C:06:3B:48:E1:A9:A6
            X509v3 Authority Key Identifier: 
                keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/PCKf0PMOPQllJKvzpywGO0jhqaY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0...._.n....].
    Signature Algorithm: sha256WithRSAEncryption
         90:4e:d8:c3:46:ac:17:08:fa:20:89:36:5b:06:db:89:3c:4b:
         be:8e:23:2c:74:65:5c:a5:50:15:06:f0:43:4e:00:ed:31:e3:
         59:7e:8a:6b:51:11:df:0b:cd:26:74:39:c1:c3:96:12:83:42:
         c7:14:ad:31:63:29:ca:9c:b9:dd:58:e6:4d:9c:75:19:87:3b:
         43:39:48:33:44:ff:8d:b3:55:6d:61:e6:80:07:51:c5:c0:a7:
         75:a0:c8:8d:77:4a:7e:3d:78:71:aa:3b:42:c7:da:53:d5:7e:
         a3:3b:d6:b4:3e:f8:8a:da:38:c3:7e:3e:b0:bd:54:f7:31:2e:
         e0:aa:6c:e6:a7:be:3a:1a:21:8f:b0:6e:65:64:fc:13:7b:99:
         e5:a0:41:0e:b1:9a:1e:8e:78:52:25:9e:23:33:bd:f8:e7:b9:
         ac:ef:c2:e0:65:24:79:13:13:1d:62:b7:f2:e8:a7:da:04:9c:
         04:8e:77:d8:aa:bd:c5:84:67:c1:bb:4d:74:d8:d6:84:72:71:
         5c:35:2d:0a:b0:29:1b:ce:8d:17:ba:03:cd:1f:96:b5:53:eb:
         6b:11:e4:1b:0c:d2:d4:13:80:b2:ff:21:0f:d9:c9:63:8a:a9:
         52:bf:29:1b:70:c8:cc:74:4b:dc:5f:31:55:42:70:13:ba:62:
         ba:b9:6a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jun 13 12:43:13 2021 by LibreSSL & rpki-client.