Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/47/fdb729-be30-4f3b-8896-72689c6e0652/1/t2W4Naqc2I3Xbv0oXYqxh9oK_2s.roa (download)

Subject key identifier:   B7:65:B8:35:AA:9C:D8:8D:D7:6E:FD:28:5D:8A:B1:87:DA:0A:FF:6B 
Authority key identifier: C4:B1:72:41:3A:0B:AC:29:DA:5E:87:64:17:90:4F:56:4F:EC:61:59
asID:                     AS3356
Prefixes:
    1: 2a0f:3b04::/32 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/47/fdb729-be30-4f3b-8896-72689c6e0652/1/t2W4Naqc2I3Xbv0oXYqxh9oK_2s.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71231041 (0x43ee641)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b172413a0bac29da5e876417904f564fec6159
        Validity
            Not Before: Jan  1 03:17:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b765b835aa9cd88dd76efd285d8ab187da0aff6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:b4:76:7e:d5:e9:12:d3:c7:5b:df:51:4f:
                    69:57:66:8b:b6:98:7a:21:a7:cd:26:dd:5b:cd:b3:
                    7d:1c:9e:a5:e3:68:0c:e6:c8:a6:ad:09:0c:6d:8b:
                    0c:59:44:d6:10:77:b1:10:08:94:36:35:ae:dd:52:
                    0d:84:92:3a:26:9f:55:1b:98:db:97:57:3f:0c:ea:
                    93:b5:03:11:50:b1:21:99:0f:1f:6e:4c:3a:c2:dd:
                    b1:1d:1b:e3:c9:37:1d:5d:e0:72:d9:4e:e8:be:13:
                    27:67:d5:b3:f9:e8:94:c2:4e:33:1d:d5:a8:71:38:
                    9e:89:9b:24:4c:0c:c0:2e:70:c3:4c:55:50:04:81:
                    45:8b:e8:b3:29:7f:f6:82:06:7c:17:8d:19:6c:08:
                    f9:47:3e:e8:79:e4:b0:e2:14:ae:92:33:da:75:44:
                    2b:bc:d9:96:f6:6c:e9:76:ab:38:da:f9:de:2d:e2:
                    e6:e8:d5:44:83:eb:a1:fb:c5:1c:8c:dc:08:b2:97:
                    e7:ef:b4:56:a6:b8:16:26:33:37:d3:89:64:ed:9f:
                    82:61:95:04:fc:03:f1:96:0b:cd:09:e4:aa:50:b4:
                    f0:7b:fe:fc:9e:97:39:ff:9e:57:53:3e:91:98:02:
                    9d:94:d0:91:15:76:67:8d:ef:4a:b1:14:45:8b:9d:
                    6d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B7:65:B8:35:AA:9C:D8:8D:D7:6E:FD:28:5D:8A:B1:87:DA:0A:FF:6B
            X509v3 Authority Key Identifier: 
                keyid:C4:B1:72:41:3A:0B:AC:29:DA:5E:87:64:17:90:4F:56:4F:EC:61:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLFyQToLrCnaXodkF5BPVk_sYVk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fdb729-be30-4f3b-8896-72689c6e0652/1/t2W4Naqc2I3Xbv0oXYqxh9oK_2s.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fdb729-be30-4f3b-8896-72689c6e0652/1/xLFyQToLrCnaXodkF5BPVk_sYVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0
....0....*.;.
    Signature Algorithm: sha256WithRSAEncryption
         65:59:1f:da:9c:3d:da:fc:4e:7e:60:3b:03:5c:e1:58:6e:97:
         a1:d0:4a:b5:d2:0e:3f:ed:09:f7:9c:41:bc:21:c7:d3:8e:fd:
         d1:05:b2:e8:37:12:aa:7b:b9:43:b9:08:59:bd:d3:4b:23:64:
         d4:1d:cf:e9:df:2c:34:82:8f:a6:a4:cc:31:c0:49:e7:b9:56:
         1f:b5:6a:5f:6f:e3:09:e0:19:c4:0c:72:a0:71:b9:0e:c9:f8:
         02:f6:b9:84:8a:a2:30:36:2b:e9:9e:3a:19:2a:ed:de:77:a1:
         20:2c:dd:c8:a7:20:b0:0f:1b:75:78:8f:0c:56:96:c3:42:9c:
         af:09:6f:a7:12:f4:9a:31:0b:04:81:03:33:8d:67:2f:28:98:
         28:74:76:ce:a3:6c:4a:2b:1e:c4:ab:26:e2:8b:c3:91:77:71:
         9a:09:f3:c8:4b:55:9b:8d:8b:fa:43:bd:31:0a:47:d7:04:ea:
         a3:e5:32:98:83:6c:e1:57:ab:f7:52:93:71:5d:25:ed:18:50:
         0c:27:2e:62:c3:8a:04:8d:7a:12:9a:40:01:c9:8d:8b:2c:42:
         a7:73:ca:6c:f7:b9:6d:00:9e:5a:25:2a:16:0b:c3:42:86:b3:
         29:ec:8f:7f:74:51:e3:c1:63:a8:3d:ed:3d:6a:4b:d2:74:f2:
         9c:eb:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Jun 4 21:58:37 2021 by LibreSSL & rpki-client.