Route Origin Authorization
Location: rpki.ripe.net/repository/DEFAULT/60/1fa6b4-ac69-4d08-96b0-5ad3c24bd90b/1/lS3FWF7pNBy0NciKXjj6FCAIAH4.roa (download)

Subject key identifier:   95:2D:C5:58:5E:E9:34:1C:B4:35:C8:8A:5E:38:FA:14:20:08:00:7E 
Authority key identifier: 0F:C6:3D:CE:DD:3D:6F:79:A8:AF:BF:A8:31:35:7D:95:61:E0:ED:79
asID:                     AS212477
Prefixes:
    1: 2a0e:fd45:d00::/44 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/60/1fa6b4-ac69-4d08-96b0-5ad3c24bd90b/1/lS3FWF7pNBy0NciKXjj6FCAIAH4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82702758 (0x4edf1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fc63dcedd3d6f79a8afbfa831357d9561e0ed79
        Validity
            Not Before: Jan  1 00:37:10 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=952dc5585ee9341cb435c88a5e38fa142008007e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:95:da:89:fe:de:b0:96:a0:5c:cd:c2:ce:8f:
                    21:0d:82:f1:2b:c2:44:4d:2a:b8:4d:9d:ba:23:8f:
                    9f:c2:7d:80:00:2f:a0:dd:53:8b:3d:0e:95:5d:41:
                    0e:6f:92:38:2b:eb:93:64:6a:7c:4b:34:4b:ef:f0:
                    13:9b:4b:ea:03:f4:23:60:d3:27:bf:cf:cd:6f:71:
                    9f:35:7f:a4:45:7d:65:d2:67:5d:67:41:48:c8:80:
                    19:c1:b4:2f:2b:31:ff:ba:07:4b:6c:97:28:72:dc:
                    4d:2e:9c:db:d6:f5:4e:6e:31:04:13:b9:2b:a3:c2:
                    5c:d8:aa:31:00:3d:87:b6:dd:09:c2:28:ca:18:65:
                    6c:1d:d2:ba:64:56:c1:d9:d6:75:e2:df:50:ec:8b:
                    03:21:06:eb:8c:a9:80:af:36:0f:dc:72:d4:44:dd:
                    35:d4:55:d8:b1:67:c9:df:2a:00:2e:81:43:7a:df:
                    67:18:5a:7d:f9:69:42:fe:4c:22:43:2b:e1:50:b9:
                    57:f4:b1:33:9b:84:85:b0:70:00:5f:cd:5e:9b:cc:
                    0f:90:f5:a1:03:b5:f1:b5:ec:68:17:b0:b6:74:32:
                    f5:e0:bd:52:11:ed:bf:3f:1d:e9:d1:69:76:29:d9:
                    a2:a5:0f:e6:00:7d:27:50:3a:bc:f8:57:1e:46:29:
                    77:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                95:2D:C5:58:5E:E9:34:1C:B4:35:C8:8A:5E:38:FA:14:20:08:00:7E
            X509v3 Authority Key Identifier: 
                keyid:0F:C6:3D:CE:DD:3D:6F:79:A8:AF:BF:A8:31:35:7D:95:61:E0:ED:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8Y9zt09b3mor7-oMTV9lWHg7Xk.cer

            Subject Information Access: 
                1.3.6.1.5.5.7.48.11 - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1fa6b4-ac69-4d08-96b0-5ad3c24bd90b/1/lS3FWF7pNBy0NciKXjj6FCAIAH4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1fa6b4-ac69-4d08-96b0-5ad3c24bd90b/1/D8Y9zt09b3mor7-oMTV9lWHg7Xk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0....*..E
.
    Signature Algorithm: sha256WithRSAEncryption
         4d:89:63:8a:98:ee:5c:26:e4:b3:3f:15:e8:6f:58:9e:54:b5:
         89:77:d4:de:b8:61:3e:30:cc:6b:f7:e3:2c:42:62:a2:f4:8c:
         3e:5c:f8:b8:04:02:a6:40:67:c0:41:18:89:d5:53:72:d5:dc:
         72:f6:c4:50:64:bc:36:fd:5d:9a:ea:8a:a6:a8:ff:02:bc:16:
         3f:25:b3:64:ad:07:35:2c:07:c1:55:c5:49:24:eb:9d:b6:04:
         15:04:0e:e9:9a:30:02:8c:a1:3e:d2:f0:b5:b9:96:48:73:ce:
         93:52:27:2c:cc:35:0a:af:cc:cb:51:80:ea:bc:46:3d:07:99:
         f7:23:b1:88:99:29:f1:d6:dc:b8:6c:b6:5d:05:19:87:97:78:
         4b:03:d8:55:b3:da:7c:4b:a9:b4:e1:ac:9a:98:6e:e4:7f:a2:
         08:73:a7:64:76:63:88:29:db:23:14:f1:36:aa:24:d2:c2:b1:
         9f:51:73:56:84:44:42:68:52:94:f6:12:de:1a:04:df:04:da:
         7a:e6:89:fc:e0:00:e7:ef:ec:58:78:07:1f:e6:b7:08:36:e0:
         c3:3c:20:46:74:38:0d:a9:0f:4b:6a:6d:ac:ca:f4:cb:81:07:
         b1:51:12:f5:7c:54:b8:5f:2b:c4:e7:52:a0:0d:12:da:e4:e1:
         d5:20:29:a8
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBO3xpjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZmM2M2RjZWRkM2Q2Zjc5YThhZmJmYTgzMTM1N2Q5NTYxZTBlZDc5MB4XDTIxMDEw
MTAwMzcxMFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTUyZGM1NTg1ZWU5
MzQxY2I0MzVjODhhNWUzOGZhMTQyMDA4MDA3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJuV2on+3rCWoFzNws6PIQ2C8SvCRE0quE2duiOPn8J9gAAv
oN1Tiz0OlV1BDm+SOCvrk2RqfEs0S+/wE5tL6gP0I2DTJ7/PzW9xnzV/pEV9ZdJn
XWdBSMiAGcG0Lysx/7oHS2yXKHLcTS6c29b1Tm4xBBO5K6PCXNiqMQA9h7bdCcIo
yhhlbB3SumRWwdnWdeLfUOyLAyEG64ypgK82D9xy1ETdNdRV2LFnyd8qAC6BQ3rf
ZxhafflpQv5MIkMr4VC5V/SxM5uEhbBwAF/NXpvMD5D1oQO18bXsaBewtnQy9eC9
UhHtvz8d6dFpdinZoqUP5gB9J1A6vPhXHkYpd/0CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSVLcVYXuk0HLQ1yIpeOPoUIAgAfjAfBgNVHSMEGDAWgBQPxj3O3T1veaiv
v6gxNX2VYeDteTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Q4WTl6dDA5YjNtb3I3LW9NVFY5bFdIZzdYay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvMWZhNmI0LWFjNjktNGQwOC05NmIwLTVhZDNjMjRiZDkwYi8x
L2xTM0ZXRjdwTkJ5ME5jaUtYamo2RkNBSUFINC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAv
MWZhNmI0LWFjNjktNGQwOC05NmIwLTVhZDNjMjRiZDkwYi8xL0Q4WTl6dDA5YjNt
b3I3LW9NVFY5bFdIZzdYay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoO/UUNADANBgkqhkiG9w0BAQsF
AAOCAQEATYljipjuXCbksz8V6G9YnlS1iXfU3rhhPjDMa/fjLEJiovSMPlz4uAQC
pkBnwEEYidVTctXccvbEUGS8Nv1dmuqKpqj/ArwWPyWzZK0HNSwHwVXFSSTrnbYE
FQQO6ZowAoyhPtLwtbmWSHPOk1InLMw1Cq/My1GA6rxGPQeZ9yOxiJkp8dbcuGy2
XQUZh5d4SwPYVbPafEuptOGsmphu5H+iCHOnZHZjiCnbIxTxNqok0sKxn1FzVoRE
QmhSlPYS3hoE3wTaeuaJ/OAA5+/sWHgHH+a3CDbgwzwgRnQ4DakPS2ptrMr0y4EH
sVES9XxUuF8rxOdSoA0S2uTh1SApqA==
-----END CERTIFICATE-----

Generated at Wed Mar 3 04:08:42 2021 by LibreSSL & rpki-client.