Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/GWavcDZYFXNc0oPZlZALSN19Gx8.roa (download)

Subject key identifier:   19:66:AF:70:36:58:15:73:5C:D2:83:D9:95:90:0B:48:DD:7D:1B:1F 
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
asID:                     AS6939
Prefixes:
    1: 2a0b:32c0::/29 maxlen: 29

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/GWavcDZYFXNc0oPZlZALSN19Gx8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242260011 (0xe70982b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
        Validity
            Not Before: Jan  1 13:06:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1966af70365815735cd283d995900b48dd7d1b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2f:1a:03:31:63:39:2a:c1:df:9e:a8:d5:9e:
                    6e:6e:c1:ea:54:69:4a:3e:0e:6e:14:e9:ce:fb:ae:
                    08:0f:56:e4:14:9c:a8:f6:19:33:17:ec:49:99:d1:
                    89:e7:8e:b8:41:0e:45:7e:73:64:c2:b6:ca:cf:49:
                    21:18:2e:26:17:e8:d0:51:1f:8f:00:40:35:1e:b7:
                    a0:ea:f3:2f:10:1e:3a:07:1c:de:26:4d:63:0e:9f:
                    cb:95:d9:b7:82:de:d1:2f:db:e4:02:10:59:89:f3:
                    ba:c4:ad:cc:5b:72:62:cf:d3:ad:63:7e:69:83:89:
                    34:66:aa:dd:ee:eb:0b:24:f1:fe:1d:6f:06:03:ac:
                    45:c0:cf:f9:fc:4a:6b:35:1e:60:db:a6:c3:da:02:
                    5c:ca:ac:3a:49:48:02:87:e3:07:23:21:48:7c:8c:
                    bd:22:34:b3:95:22:ae:9f:e0:ee:71:91:8d:65:39:
                    7c:69:dd:09:cf:41:c8:64:d5:02:28:dd:24:46:14:
                    ce:26:2d:ee:c4:81:50:42:15:a9:a0:26:58:6e:15:
                    d2:0d:60:78:69:e7:9d:c0:17:fc:54:8b:22:90:28:
                    24:61:f2:9a:41:0d:26:4c:5e:ca:ab:3b:e2:be:0f:
                    d3:bc:37:ce:dc:9f:75:ed:53:7c:36:8b:66:e0:1a:
                    21:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                19:66:AF:70:36:58:15:73:5C:D2:83:D9:95:90:0B:48:DD:7D:1B:1F
            X509v3 Authority Key Identifier: 
                keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/GWavcDZYFXNc0oPZlZALSN19Gx8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:32c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         1c:e3:0c:2d:d7:65:f3:2f:01:17:71:59:73:a4:fb:a9:94:b8:
         69:48:32:61:31:a6:27:f5:ca:ab:46:d4:4b:09:12:9d:d7:dc:
         e6:4a:55:6f:a4:53:14:94:2b:4d:60:93:41:fe:54:1f:dd:2b:
         76:c0:4d:85:52:03:a8:fc:0f:f6:a6:b1:00:91:eb:e7:ce:95:
         ff:54:98:2d:94:5b:02:fb:5e:0a:41:b1:05:b8:20:d2:cf:be:
         8d:0d:98:62:87:e6:e6:99:23:c0:71:5a:9c:33:2c:71:f7:6c:
         6a:00:02:05:ee:cf:75:9c:a9:bd:8d:c5:3b:58:b1:46:06:77:
         d3:9f:dd:98:28:a5:b8:81:de:0f:f4:7d:15:6a:56:33:58:c9:
         22:cb:22:91:1a:f4:a8:55:0f:25:5e:7d:d1:f3:42:40:7b:85:
         cc:c9:db:b7:92:61:cf:95:9a:2b:df:0a:9d:7d:d7:e4:d3:2d:
         bd:14:d4:b2:b7:6b:d7:16:a6:a3:de:43:2f:c7:e3:5c:9b:59:
         a5:43:36:f9:b0:8b:dd:70:59:c5:e2:a1:2e:5e:d7:7e:2a:5a:
         5c:26:2f:f6:38:47:15:1f:1b:ed:88:b1:aa:6d:df:74:67:59:
         29:e3:b1:4a:78:9b:6a:71:1f:82:79:45:8f:ca:31:49:51:0d:
         9c:7b:c9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 15:18:59 2022 by LibreSSL & rpki-client.