Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/QOQxncXmUysIXrZVr_xd6OFtYVY.roa (download)

Subject key identifier:   40:E4:31:9D:C5:E6:53:2B:08:5E:B6:55:AF:FC:5D:E8:E1:6D:61:56 
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
asID:                     AS174
Prefixes:
    1: 2a03:f80:420::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/QOQxncXmUysIXrZVr_xd6OFtYVY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1071829655 (0x3fe2d297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
        Validity
            Not Before: Jan  1 01:35:00 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=40e4319dc5e6532b085eb655affc5de8e16d6156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:eb:0b:29:73:48:08:7e:e2:1f:e1:f5:f5:
                    84:47:c8:15:9b:c5:a6:db:f3:70:60:47:dc:f9:09:
                    f4:6c:06:13:ce:0f:f3:c3:19:3a:e9:df:a7:1d:a1:
                    10:34:03:9b:b6:b6:f4:99:f0:36:19:34:67:68:7e:
                    59:53:07:4b:c0:3b:20:9a:3d:df:57:74:50:02:a2:
                    4f:a6:5e:cc:ac:ff:1b:ea:a2:47:d4:a1:55:8d:49:
                    d7:5c:9a:b4:34:71:e0:6e:37:a5:5b:3f:9e:f8:b9:
                    11:11:e6:14:53:06:9d:84:36:af:a2:b0:2e:b8:6e:
                    f6:22:c4:11:82:dd:e7:dc:d2:d9:98:2a:66:9b:3f:
                    20:a9:e0:6f:af:f0:34:95:d8:18:96:75:45:6c:01:
                    70:c5:59:84:c1:ab:90:17:fa:45:89:0f:37:7e:17:
                    43:59:73:2c:1c:3f:0f:70:7e:98:8e:98:c3:b2:50:
                    9b:9b:7a:9f:4e:b3:1e:55:98:1b:6a:95:18:8b:e8:
                    7d:48:d0:9d:31:b9:93:31:f9:06:02:7d:f7:31:e1:
                    74:99:dd:f1:cb:b1:da:4b:d5:aa:a0:d4:6c:84:b8:
                    81:55:b5:98:06:97:a6:92:77:65:b0:b0:2f:cb:64:
                    a5:f1:95:b4:f2:a8:c9:c5:55:40:1e:be:02:b2:cb:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                40:E4:31:9D:C5:E6:53:2B:08:5E:B6:55:AF:FC:5D:E8:E1:6D:61:56
            X509v3 Authority Key Identifier: 
                keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/QOQxncXmUysIXrZVr_xd6OFtYVY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:f80:420::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:d7:db:f8:7e:f4:59:86:1e:16:d0:b9:6b:fd:af:8f:ee:80:
         10:e0:64:a1:d9:df:80:2a:d0:30:e1:b4:7e:74:e6:25:9c:5e:
         fd:5d:50:27:9a:bb:da:22:92:6a:af:44:e0:35:66:dc:01:b2:
         08:49:bb:74:aa:f7:ed:b2:f0:dc:91:a1:39:6d:93:f2:cd:41:
         0d:4c:f8:8d:60:0a:c8:93:1d:f5:51:9c:2b:a6:c4:48:69:99:
         d3:1e:cb:04:16:46:ac:8f:97:84:00:56:9f:c7:3e:bc:90:1e:
         75:0b:f2:4c:df:f7:f3:60:00:dc:a1:72:0c:74:e9:24:c4:58:
         96:ec:05:4b:72:ab:04:db:0a:f1:ee:5a:e9:51:11:32:2f:df:
         9b:9e:46:24:91:18:e5:86:84:6a:c5:0c:c3:d8:11:8d:4f:56:
         df:58:42:15:6e:78:39:b9:dd:95:9f:ab:cf:63:3e:cb:9f:34:
         4a:bf:1e:95:e4:80:59:bb:ac:0b:24:0e:d7:18:6d:0f:f2:83:
         a1:61:f6:61:58:d9:84:7a:30:ca:9f:c3:f8:cf:fe:a9:b0:d5:
         44:1a:e3:c6:7e:06:ce:6b:3f:59:cf:05:91:fe:09:30:e6:74:
         7b:0e:7f:a4:fc:2c:57:25:d6:c0:d9:b6:28:8a:c7:97:97:70:
         4b:b3:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 11:51:21 2021 by LibreSSL & rpki-client.