Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/MYTy3JhMQ9lWYKYDihHQx6rKL8E.roa (download)

Subject key identifier:   31:84:F2:DC:98:4C:43:D9:56:60:A6:03:8A:11:D0:C7:AA:CA:2F:C1 
Authority key identifier: 9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2
asID:                     AS1239
Prefixes:
    1: 2a0f:103::/32 maxlen: 32
    2: 2a0f:100::/30 maxlen: 30
    3: 2a0f:100::/29 maxlen: 29
    4: 2a0f:104::/30 maxlen: 30

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/MYTy3JhMQ9lWYKYDihHQx6rKL8E.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125401128 (0x7797828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
        Validity
            Not Before: Jan  1 04:01:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3184f2dc984c43d95660a6038a11d0c7aaca2fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:03:70:79:88:04:6f:c6:bb:77:f1:a1:f8:
                    de:7b:73:2e:12:be:ef:95:3c:43:0b:0d:da:84:72:
                    cd:36:1a:b3:cd:1b:ed:d3:ca:0d:d4:51:f0:2b:2a:
                    06:8c:19:ec:aa:3a:36:58:e7:0c:39:22:2f:7b:a5:
                    c8:62:45:b1:45:3a:8f:7c:4e:da:37:e8:b6:3e:08:
                    66:66:4a:b5:37:5f:02:1a:26:dd:2b:3a:bf:5c:43:
                    5e:3f:a7:2a:5d:f7:1c:27:37:e1:33:d4:c8:ec:aa:
                    98:21:2b:23:45:c1:b1:37:40:47:bf:85:b7:4b:d1:
                    06:55:6f:3a:d7:9a:27:07:b0:41:7b:ec:61:35:09:
                    fd:f1:53:c4:0f:c5:63:21:70:0d:5f:70:21:01:18:
                    40:37:8e:0e:c1:b4:43:a0:69:2f:17:9a:bb:2e:f0:
                    5e:ac:04:1d:fd:08:5f:62:c8:b2:e2:49:ec:9e:da:
                    35:c3:5b:dd:8e:7b:50:b5:4b:84:c7:86:3b:67:d2:
                    f9:8a:d0:0b:4f:e5:8c:61:49:60:5f:4a:e0:63:7a:
                    f9:35:12:61:cb:96:44:7f:8a:79:98:64:1c:cc:21:
                    08:e2:0e:6c:d8:99:95:61:4b:61:6a:c4:d0:ac:26:
                    f8:dd:61:a4:c9:39:50:42:f1:e6:0a:ea:e9:f4:09:
                    3d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                31:84:F2:DC:98:4C:43:D9:56:60:A6:03:8A:11:D0:C7:AA:CA:2F:C1
            X509v3 Authority Key Identifier: 
                keyid:9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/MYTy3JhMQ9lWYKYDihHQx6rKL8E.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:100::/29

    Signature Algorithm: sha256WithRSAEncryption
         8b:11:09:ea:55:73:92:9b:84:45:7f:62:bb:07:0b:ae:da:7f:
         a3:fc:cf:e0:c4:3a:5b:b3:6a:a4:d2:4f:17:b6:af:b5:fe:49:
         1a:19:d2:d9:b7:a2:7a:45:ae:7c:43:01:21:85:ee:c8:1f:aa:
         04:b5:1e:ab:2f:38:a0:0f:f1:67:30:2b:a1:05:64:c3:11:12:
         43:47:c2:39:e1:3d:53:49:bb:aa:b5:f4:a9:5f:87:83:e4:0e:
         55:f5:08:49:e9:87:32:29:47:7e:88:dc:4a:07:a0:64:58:da:
         42:c3:18:6f:6b:36:e9:b7:ec:b4:94:8c:75:a8:9d:c0:47:c1:
         7a:a1:62:66:a2:c5:f8:85:0d:98:d1:22:85:f5:b1:01:74:06:
         fb:b0:39:66:8f:1f:0d:fb:65:fe:b5:5d:34:b8:69:cd:51:04:
         9b:b0:60:72:d6:a1:a4:8f:7e:3b:55:89:bc:54:66:7b:6d:d2:
         cb:8d:e2:df:6a:9c:3b:6a:c3:4c:0b:3f:0d:ad:6a:8f:75:1c:
         34:75:13:8f:6e:34:eb:12:70:0e:04:56:4a:16:99:3e:f5:df:
         7d:21:c2:64:2a:57:10:04:82:91:c4:81:08:3e:8b:1f:86:00:
         33:04:58:4e:f9:6a:16:a5:b0:11:ea:77:26:e4:74:ad:31:81:
         26:ba:b6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 13:17:35 2022 by LibreSSL & rpki-client.