Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/fc/cbfbbe-050b-4815-879a-9f3153f2837c/1/O5Q3rmJtTbukniUA5arO6dp175w.roa (download)

Subject key identifier:   3B:94:37:AE:62:6D:4D:BB:A4:9E:25:00:E5:AA:CE:E9:DA:75:EF:9C 
Authority key identifier: F0:9C:90:F8:B7:28:65:E6:51:11:4A:66:BC:C9:77:49:9E:EC:AA:69
asID:                     AS3356
Prefixes:
    1: 45.67.4.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/fc/cbfbbe-050b-4815-879a-9f3153f2837c/1/O5Q3rmJtTbukniUA5arO6dp175w.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59876950 (0x391a656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f09c90f8b72865e651114a66bcc977499eecaa69
        Validity
            Not Before: Jan  1 07:54:24 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3b9437ae626d4dbba49e2500e5aacee9da75ef9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:92:7a:1b:81:bf:12:50:a5:86:9b:79:3b:2a:
                    08:ec:3c:05:6a:e2:38:6b:4f:d4:1c:cc:69:56:05:
                    de:89:c4:75:3f:08:be:92:39:5f:11:ab:58:d3:ec:
                    2c:fe:d3:8e:2a:f8:fe:6d:03:92:3c:b8:2d:6e:d0:
                    70:f5:f2:ea:2d:8a:a5:e9:cf:9d:bf:1e:d3:95:81:
                    d3:fc:29:2d:7b:42:5d:1c:d2:7a:cb:0b:d6:fc:80:
                    85:5e:6f:b2:9f:f3:d4:e6:57:aa:c7:0a:1c:74:b4:
                    c9:f8:c3:e5:df:46:cc:bf:ff:41:4a:eb:34:b1:a5:
                    9e:26:29:24:cc:bb:f6:33:d9:03:72:a1:4e:17:ac:
                    bc:af:08:0d:27:74:c3:84:1d:1a:23:ce:c5:83:12:
                    d5:24:bd:2b:ed:a5:34:e6:81:c1:a0:0f:c9:c3:bf:
                    38:d6:3f:76:6a:8b:d5:8e:c0:7a:d5:f8:47:67:57:
                    30:be:2f:59:62:e7:63:ef:96:86:56:4f:c3:0b:0c:
                    11:c9:6e:81:de:1e:2e:c5:5b:02:ab:11:88:65:12:
                    44:a3:31:a7:60:f8:4b:3d:7b:69:18:f0:c1:33:7d:
                    d1:44:d8:10:0a:4a:0e:9d:d2:0f:3b:13:2c:d0:d4:
                    4c:d5:4d:40:16:9f:2e:44:59:42:b1:34:5a:ed:b8:
                    03:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3B:94:37:AE:62:6D:4D:BB:A4:9E:25:00:E5:AA:CE:E9:DA:75:EF:9C
            X509v3 Authority Key Identifier: 
                keyid:F0:9C:90:F8:B7:28:65:E6:51:11:4A:66:BC:C9:77:49:9E:EC:AA:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JyQ-LcoZeZREUpmvMl3SZ7sqmk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cbfbbe-050b-4815-879a-9f3153f2837c/1/O5Q3rmJtTbukniUA5arO6dp175w.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cbfbbe-050b-4815-879a-9f3153f2837c/1/8JyQ-LcoZeZREUpmvMl3SZ7sqmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-C.
    Signature Algorithm: sha256WithRSAEncryption
         8e:3b:4b:2e:f7:62:32:6a:31:ef:5e:6c:f4:c0:ba:1c:fb:f4:
         08:7a:fa:d9:42:b8:0b:11:86:1b:fe:6b:fc:df:ca:ff:69:6c:
         09:f4:7a:a5:7c:b6:7e:39:1d:8a:66:fe:db:05:fe:bd:06:1e:
         6f:13:9c:fb:ff:f6:4b:15:25:8d:ba:36:a7:3f:e3:6c:42:8d:
         0c:25:22:9b:29:11:b2:ae:0f:63:3d:5e:5d:ff:89:80:e1:82:
         a6:1b:47:8f:1a:84:c9:33:b7:86:24:b1:3d:ec:e3:96:c3:97:
         a8:90:75:38:d8:48:b7:45:c6:11:4c:ea:9c:f8:bc:b7:6a:9a:
         25:17:fa:d4:3a:ef:ab:45:96:64:cd:f5:58:c3:f2:4e:d4:88:
         73:d8:ae:3b:3b:aa:25:e4:83:b8:e7:0a:25:d9:47:7b:6b:9e:
         6a:db:c5:f8:bc:16:71:be:db:61:59:d8:ed:c9:cd:4c:29:e8:
         83:53:2e:4a:ab:2f:06:c8:e3:30:f9:5d:4a:b5:f6:52:ed:12:
         1c:47:07:44:13:52:33:25:b2:5b:fe:49:26:6e:2c:0a:a6:c2:
         ee:d4:42:58:92:e4:71:94:a8:71:82:56:d3:cd:a5:b4:9b:b5:
         29:a2:e5:83:c3:a1:05:ae:94:74:86:e9:0e:4b:f8:a6:f7:09:
         93:30:15:5a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA5GmVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MDljOTBmOGI3Mjg2NWU2NTExMTRhNjZiY2M5Nzc0OTllZWNhYTY5MB4XDTIxMDEw
MTA3NTQyNFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2I5NDM3YWU2MjZk
NGRiYmE0OWUyNTAwZTVhYWNlZTlkYTc1ZWY5YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN2SehuBvxJQpYabeTsqCOw8BWriOGtP1BzMaVYF3onEdT8I
vpI5XxGrWNPsLP7Tjir4/m0Dkjy4LW7QcPXy6i2KpenPnb8e05WB0/wpLXtCXRzS
essL1vyAhV5vsp/z1OZXqscKHHS0yfjD5d9GzL//QUrrNLGlniYpJMy79jPZA3Kh
ThesvK8IDSd0w4QdGiPOxYMS1SS9K+2lNOaBwaAPycO/ONY/dmqL1Y7AetX4R2dX
ML4vWWLnY++WhlZPwwsMEclugd4eLsVbAqsRiGUSRKMxp2D4Sz17aRjwwTN90UTY
EApKDp3SDzsTLNDUTNVNQBafLkRZQrE0Wu24AxkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ7lDeuYm1Nu6SeJQDlqs7p2nXvnDAfBgNVHSMEGDAWgBTwnJD4tyhl5lER
Sma8yXdJnuyqaTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhKeVEtTGNvWmVaUkVVcG12TWwzU1o3c3Ftay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmMvY2JmYmJlLTA1MGItNDgxNS04NzlhLTlmMzE1M2YyODM3Yy8x
L081UTNybUp0VGJ1a25pVUE1YXJPNmRwMTc1dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMv
Y2JmYmJlLTA1MGItNDgxNS04NzlhLTlmMzE1M2YyODM3Yy8xLzhKeVEtTGNvWmVa
UkVVcG12TWwzU1o3c3Ftay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1DBDANBgkqhkiG9w0BAQsFAAOC
AQEAjjtLLvdiMmox715s9MC6HPv0CHr62UK4CxGGG/5r/N/K/2lsCfR6pXy2fjkd
imb+2wX+vQYebxOc+//2SxUljbo2pz/jbEKNDCUimykRsq4PYz1eXf+JgOGCphtH
jxqEyTO3hiSxPezjlsOXqJB1ONhIt0XGEUzqnPi8t2qaJRf61Drvq0WWZM31WMPy
TtSIc9iuOzuqJeSDuOcKJdlHe2ueatvF+LwWcb7bYVnY7cnNTCnog1MuSqsvBsjj
MPldSrX2Uu0SHEcHRBNSMyWyW/5JJm4sCqbC7tRCWJLkcZSocYJW082ltJu1KaLl
g8OhBa6UdIbpDkv4pvcJkzAVWg==
-----END CERTIFICATE-----

Generated at Sun Jun 13 12:45:30 2021 by LibreSSL & rpki-client.