Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/wdH0eJo8038rSMOtbREkMj2i0Ro.roa (download)

Subject key identifier:   C1:D1:F4:78:9A:3C:D3:7F:2B:48:C3:AD:6D:11:24:32:3D:A2:D1:1A 
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
asID:                     AS3356
Prefixes:
    1: 46.37.102.0/24 (max: 24)
    2: 46.37.108.0/24 (max: 24)
    3: 46.37.112.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/wdH0eJo8038rSMOtbREkMj2i0Ro.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11446043 (0xaea71b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: May  3 20:25:21 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=c1d1f4789a3cd37f2b48c3ad6d1124323da2d11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5a:3b:fd:65:47:35:4f:2d:b0:47:eb:2e:46:
                    18:82:5e:98:bd:fe:a0:e3:87:e9:27:f3:ab:a3:23:
                    92:08:13:fd:cc:90:72:79:56:25:84:8c:e1:3d:08:
                    e3:06:fa:7e:02:3d:76:c3:b0:af:79:7a:a8:84:8f:
                    a3:59:12:ac:c4:20:99:ff:f4:4a:da:db:74:65:aa:
                    68:20:9b:21:fd:b5:62:c5:96:ec:38:29:24:54:7b:
                    af:aa:ec:06:a4:47:14:56:06:49:ea:00:93:a9:01:
                    e9:f6:04:e4:09:06:9e:f8:14:73:5f:9a:a5:de:ff:
                    45:e9:8a:94:e7:09:a2:7f:a4:a1:a5:f2:dd:62:cc:
                    98:97:19:2a:99:cb:93:3b:a7:df:04:b5:d5:bf:91:
                    e7:ff:d3:91:51:41:ae:d9:17:30:e7:78:81:92:09:
                    a8:28:6e:1c:46:fa:f3:2e:13:0e:aa:96:24:66:6c:
                    02:d8:e9:24:cd:62:6e:2f:34:6c:d1:4e:db:9f:ac:
                    7b:49:6e:d7:82:9b:c1:95:0b:d3:23:3e:f9:9a:fe:
                    f2:0e:e8:5f:cd:d4:e8:a0:1d:48:1e:9c:21:8d:aa:
                    ae:60:84:3f:c3:e2:df:08:2c:4b:11:28:93:4a:e2:
                    d1:85:a7:7c:91:3b:3d:d8:3c:8b:2c:c7:b3:49:f0:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C1:D1:F4:78:9A:3C:D3:7F:2B:48:C3:AD:6D:11:24:32:3D:A2:D1:1A
            X509v3 Authority Key Identifier: 
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/wdH0eJo8038rSMOtbREkMj2i0Ro.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....%f....%l....%p
    Signature Algorithm: sha256WithRSAEncryption
         82:80:c2:88:c1:2d:a1:cf:ff:52:6f:ce:b8:4a:45:41:4c:5c:
         f6:05:ae:95:0b:24:03:73:08:25:15:8e:96:ed:30:e4:03:4c:
         be:94:c8:94:f8:5c:61:f3:b1:7a:77:27:cf:1f:ce:4d:26:13:
         ef:1e:34:18:d4:a2:35:2d:ab:19:90:75:49:f0:6e:ab:1e:26:
         9e:e6:2b:6f:a3:00:5f:f4:73:d8:20:43:ea:45:3c:1d:87:fb:
         f7:9e:f5:f7:5b:83:af:86:04:1a:70:3e:5c:03:d3:6f:9e:7e:
         d7:40:25:79:a0:c9:98:cf:2f:8b:40:81:8a:f6:be:24:8e:85:
         da:b5:4c:3b:42:e3:3f:68:4d:1f:6d:1c:00:5b:8e:bc:f9:c5:
         8d:d6:4f:27:0d:db:92:6a:fa:db:bd:d0:81:30:9a:ad:7d:79:
         6e:c9:c7:60:94:d1:ba:3c:c7:91:41:21:f0:8b:22:bf:a3:0f:
         5a:95:85:c3:da:06:ab:d8:5a:30:d0:92:fe:fb:01:76:29:d4:
         0c:d8:68:ea:3d:85:14:50:76:ca:bb:99:a8:37:7e:83:0e:a5:
         8a:75:e9:9e:60:bf:c9:2b:d2:e9:53:05:68:ef:4c:5c:79:3a:
         36:00:ad:8d:37:b1:f4:ed:11:4d:09:02:60:ce:28:f4:ea:9e:
         18:87:f2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 5 16:43:01 2021 by LibreSSL & rpki-client.