Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/q8GpQkdVgjI7A1yAXL6V6tVDODM.roa (download)

Subject key identifier:   AB:C1:A9:42:47:55:82:32:3B:03:5C:80:5C:BE:95:EA:D5:43:38:33 
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
asID:                     AS7922
Prefixes:
    1: 2a03:2880:d001::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/q8GpQkdVgjI7A1yAXL6V6tVDODM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412066148 (0x188fa164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: Jan  1 04:40:54 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=abc1a942475582323b035c805cbe95ead5433833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:23:30:3a:da:90:0a:30:b9:eb:c6:27:e1:63:
                    87:ac:69:f6:5c:a6:42:b5:a5:63:8a:76:0e:e8:a0:
                    2d:4a:0c:17:75:b3:57:11:50:df:b7:1e:a4:26:ea:
                    af:a1:a8:99:47:77:30:0b:a8:67:ce:5a:3e:f9:4b:
                    2f:e5:38:b4:93:dd:35:77:74:86:b2:71:31:39:b9:
                    4b:ad:7a:e4:17:e9:b3:e0:dc:e0:8b:ce:56:46:61:
                    f9:3a:e2:c2:bd:5a:84:37:e9:ec:2b:dc:c4:69:bc:
                    26:bb:90:d2:d8:b3:1b:f4:68:f3:60:4f:04:0f:a4:
                    89:47:d7:5f:a7:6c:29:1f:1f:9a:ab:57:2e:19:d0:
                    0c:29:cd:fb:07:bc:ca:dd:14:48:7d:83:1d:1d:a0:
                    c8:d0:b1:fb:db:0c:fe:7c:67:1b:85:6c:cc:0e:84:
                    2a:11:aa:c8:ae:d9:22:af:4c:33:5a:b9:7d:be:d1:
                    ba:d7:29:d6:e7:7b:8a:d2:e8:60:e8:92:74:d5:ff:
                    58:18:83:13:76:6d:ed:ba:78:3b:84:59:a7:7e:a7:
                    83:f6:05:99:49:3c:67:e5:2e:7a:25:7b:fe:ef:98:
                    7f:2b:bd:1c:94:14:90:58:52:0d:59:92:94:79:05:
                    74:72:1d:c8:e2:af:e9:9d:90:5a:c6:22:c5:f5:78:
                    74:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AB:C1:A9:42:47:55:82:32:3B:03:5C:80:5C:BE:95:EA:D5:43:38:33
            X509v3 Authority Key Identifier: 
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/q8GpQkdVgjI7A1yAXL6V6tVDODM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....*.(...
    Signature Algorithm: sha256WithRSAEncryption
         72:1e:26:3f:4a:f8:40:c7:42:60:d1:f5:58:f6:c0:7d:4d:81:
         79:99:3c:54:0f:5c:9b:21:b5:91:5a:2a:d2:a0:67:e9:79:24:
         d9:13:75:4c:de:78:b0:04:2e:4f:74:09:95:66:0e:e1:fb:27:
         a9:57:97:69:2a:41:c3:4b:3b:1d:53:5a:c3:06:15:78:e9:04:
         fe:13:86:23:77:ea:3e:c4:24:86:ba:a1:fc:1a:54:59:b7:84:
         a8:82:2a:df:c3:ec:c6:ee:45:98:86:64:91:aa:8a:aa:00:cf:
         4a:0e:cb:a9:be:f9:e2:61:c7:35:62:5c:63:0e:88:34:06:26:
         61:2d:89:e9:6e:ff:85:95:ae:55:2d:22:35:7e:1d:a1:c0:91:
         99:b2:a0:cc:cb:7a:c6:86:98:ae:8b:9f:2f:80:1b:0b:09:43:
         44:b3:bb:42:52:34:f6:e6:4d:f3:f1:16:01:86:7a:56:b0:80:
         96:1d:fc:56:a7:05:6a:f4:2f:47:cf:47:6e:bf:e1:09:4d:6d:
         85:7b:4b:e0:0f:a8:55:1a:9a:04:1c:11:a2:89:2a:a5:0b:b5:
         55:55:38:65:25:bc:d3:7e:ce:5f:7b:6f:b3:5c:83:9d:1b:5d:
         b6:4e:4a:24:4d:a4:eb:46:83:e3:fe:10:25:2b:36:23:0e:09:
         93:ab:d6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Jun 16 07:53:14 2021 by LibreSSL & rpki-client.