Route Origin Authorization
Location: rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/VAD_aRRIrsekVr2wzLVCzZ2Y3sA.roa (download)

Subject key identifier:   54:00:FF:69:14:48:AE:C7:A4:56:BD:B0:CC:B5:42:CD:9D:98:DE:C0 
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
asID:                     AS60781
Prefixes:
    1: 185.96.140.0/24 (max: 24)
    2: 2a00:5020::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/VAD_aRRIrsekVr2wzLVCzZ2Y3sA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304041392 (0x121f4db0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
        Validity
            Not Before: Jan  1 01:55:29 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5400ff691448aec7a456bdb0ccb542cd9d98dec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:07:94:f5:52:c0:ab:12:50:54:93:c9:7b:
                    11:e4:b2:0d:08:05:c8:36:9c:d3:e2:cd:81:6a:08:
                    65:7c:bd:31:54:9b:2c:8c:c0:64:ce:95:92:d3:3e:
                    2c:5a:18:52:52:b5:36:29:c8:cc:eb:8d:33:67:16:
                    c3:4c:70:f6:fe:8b:ad:20:8a:20:a8:de:cb:b0:b3:
                    e6:32:e6:1b:50:85:8f:59:8e:7e:5e:ae:d0:1b:3c:
                    78:29:87:31:f5:fc:a2:e5:6c:29:d1:8f:88:d2:c7:
                    30:2f:07:3c:5f:db:63:8d:15:e4:c1:b9:d3:64:70:
                    34:34:64:bb:6a:2d:97:b6:f0:68:e2:5a:f4:e6:b2:
                    f8:95:fc:30:47:34:01:6c:29:94:6f:06:e4:50:2d:
                    5d:f5:12:7e:0f:62:c1:25:e0:29:2d:d3:b1:a9:6d:
                    88:20:52:63:f6:2b:00:47:4b:b3:63:52:70:bf:bf:
                    c6:3b:0d:8c:5e:41:32:da:b5:3f:12:1e:be:0b:1a:
                    8e:c9:01:7c:c9:8e:e8:10:f7:41:12:d2:f1:7c:bd:
                    ea:65:33:d1:25:58:7d:c2:66:40:96:b2:e8:4e:26:
                    24:52:cc:45:2e:16:ec:75:75:9e:42:20:d9:1c:2b:
                    3d:c0:eb:f4:de:d8:c0:3c:75:ac:a2:28:36:cf:68:
                    36:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                54:00:FF:69:14:48:AE:C7:A4:56:BD:B0:CC:B5:42:CD:9D:98:DE:C0
            X509v3 Authority Key Identifier: 
                keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer

            Subject Information Access: 
                1.3.6.1.5.5.7.48.11 - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/VAD_aRRIrsekVr2wzLVCzZ2Y3sA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0.....`.0.....0....*.P ..
    Signature Algorithm: sha256WithRSAEncryption
         62:4d:8b:0c:93:42:1a:25:17:97:0d:b9:4d:2f:e6:ce:e0:3d:
         67:f5:e8:17:85:6d:89:f5:13:4b:bc:91:d1:93:2b:7d:d0:70:
         0b:99:89:1e:24:45:91:72:54:37:39:cc:ee:ab:b6:3b:fa:db:
         cc:ea:5c:d7:cf:08:08:28:37:cb:2c:68:aa:dd:68:20:f8:c6:
         ce:ac:53:b8:60:fb:31:9c:0b:c5:a7:63:04:05:ac:e2:e9:29:
         89:3d:1c:b9:d1:b4:6d:b6:30:ab:7d:7a:4e:49:6d:13:17:fd:
         6c:c9:cc:10:4d:f7:bd:90:4f:e6:30:a7:b6:c6:65:7c:e7:d6:
         c5:ab:79:2d:2b:3a:9b:75:82:31:6f:15:30:53:9f:60:5b:b3:
         05:81:d1:42:d1:28:6f:bc:9f:56:ae:1c:93:a6:1c:07:9d:9d:
         a7:00:8f:82:e4:0b:a0:32:17:8f:98:0b:2a:c1:f1:44:a2:68:
         69:7b:87:a9:87:4c:38:ba:fd:fe:91:d9:5b:74:4d:d8:42:37:
         e6:1d:a2:ea:6f:8f:2b:7e:6d:fa:04:32:f2:bf:c6:be:f6:f0:
         9c:ce:61:ad:08:e2:89:5c:be:bb:73:ba:38:a2:ae:df:5c:12:
         d6:2e:59:1b:68:eb:68:68:95:b5:53:5f:7a:92:48:5e:1e:8d:
         c2:35:48:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----