Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e5/7f020d-aa0d-4811-8882-6a63c6c6ac4a/1/B88dlLyu4TDcnbQrExzPKQi6Be8.roa (download)

Subject key identifier:   07:CF:1D:94:BC:AE:E1:30:DC:9D:B4:2B:13:1C:CF:29:08:BA:05:EF 
Authority key identifier: C1:34:55:A2:71:17:E4:75:99:83:A9:D7:33:92:D2:7F:50:90:60:45
asID:                     AS3356
Prefixes:
    1: 45.82.206.0/24 (max: 32)
    2: 45.82.207.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e5/7f020d-aa0d-4811-8882-6a63c6c6ac4a/1/B88dlLyu4TDcnbQrExzPKQi6Be8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86677234 (0x52a96f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13455a27117e4759983a9d73392d27f50906045
        Validity
            Not Before: Jan  1 04:39:38 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=07cf1d94bcaee130dc9db42b131ccf2908ba05ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:d0:90:63:07:24:d4:63:7e:39:bf:38:fe:
                    60:99:5c:cf:ae:09:ad:13:0b:6b:cc:9e:2e:73:d4:
                    40:a0:32:d8:fe:bf:9b:46:fa:3f:45:07:d7:0b:d3:
                    25:6c:8c:b0:dc:b9:8f:4a:7b:3f:cd:fc:81:92:8a:
                    1b:b9:c7:e4:df:3a:93:3d:1d:3c:bf:42:4e:72:00:
                    6c:3c:1b:00:91:d2:93:35:d3:bb:9f:f8:a9:51:f9:
                    b3:23:89:b0:fc:16:15:3c:7a:b3:cc:d4:9d:95:4b:
                    87:91:1b:f1:10:6d:50:13:7b:ea:55:11:60:99:19:
                    ec:35:4f:cf:58:23:ba:22:a3:16:5e:c1:ce:99:c8:
                    05:12:c7:64:cd:95:87:cc:b6:5d:76:8e:e3:17:60:
                    2c:4b:96:32:27:d5:ab:c8:36:f0:0d:8b:bd:0b:5a:
                    20:23:38:6b:df:d9:1e:60:f9:55:7f:36:b2:f3:18:
                    a2:aa:7a:f2:be:c2:c3:2c:01:51:b8:f9:d8:19:8b:
                    07:22:17:e7:bb:13:f9:f2:47:db:2d:88:ab:30:29:
                    d5:c2:19:0b:be:c4:5d:6e:38:f8:35:ca:e4:d9:8e:
                    6b:8a:d7:f4:22:f3:85:6c:2d:27:6f:85:cb:c0:6a:
                    5f:69:c5:cd:5b:d9:41:48:d4:d5:e3:16:83:ce:92:
                    da:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                07:CF:1D:94:BC:AE:E1:30:DC:9D:B4:2B:13:1C:CF:29:08:BA:05:EF
            X509v3 Authority Key Identifier: 
                keyid:C1:34:55:A2:71:17:E4:75:99:83:A9:D7:33:92:D2:7F:50:90:60:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTRVonEX5HWZg6nXM5LSf1CQYEU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7f020d-aa0d-4811-8882-6a63c6c6ac4a/1/B88dlLyu4TDcnbQrExzPKQi6Be8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7f020d-aa0d-4811-8882-6a63c6c6ac4a/1/wTRVonEX5HWZg6nXM5LSf1CQYEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-R.
    Signature Algorithm: sha256WithRSAEncryption
         0e:da:9b:e4:bf:e0:55:55:43:75:4e:c8:81:b2:d3:61:57:19:
         4d:40:38:b1:f1:3a:81:7e:d5:64:f0:ea:73:cc:e8:93:d2:e4:
         fd:c7:58:ab:d2:5f:b8:c0:b5:c0:7c:06:a3:0e:58:68:f6:f5:
         73:52:2c:2d:97:33:38:ae:c1:ab:d4:82:c2:bf:49:78:11:5a:
         30:e2:35:37:99:dd:50:a0:c7:2f:8c:43:de:b3:f2:30:80:d1:
         91:42:74:02:7c:e9:89:3b:fa:c3:5e:89:51:7d:df:4e:b4:c0:
         e4:22:6c:d7:77:02:8c:86:30:42:a6:ae:0e:14:59:6e:55:a4:
         41:db:2f:3e:52:90:e2:f1:b5:bc:85:ca:02:66:17:24:52:73:
         b6:4e:92:48:85:0e:56:be:ca:dd:ba:d7:8e:94:7e:16:a2:f6:
         73:dc:d4:d5:85:03:e9:fb:69:1a:cd:07:ad:49:7a:0c:19:6a:
         be:9a:21:d1:01:04:d6:60:16:8d:03:10:bc:87:b8:f1:fb:65:
         83:22:60:1a:36:b4:d7:b6:af:54:8d:bd:66:05:66:25:14:5f:
         85:16:1f:03:a2:2b:8d:af:c3:e6:92:37:7b:ed:a9:c5:82:d6:
         b6:f0:7c:66:a3:b7:eb:52:1a:7e:7a:84:a6:6a:b5:2a:c1:21:
         3f:8e:de:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue May 25 10:14:12 2021 by LibreSSL & rpki-client.