Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xhku5JIZQyq2flx_Yywa8p3SDhM.roa (download)

Subject key identifier:   5E:19:2E:E4:92:19:43:2A:B6:7E:5C:7F:63:2C:1A:F2:9D:D2:0E:13 
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
asID:                     AS211703
Prefixes:
    1: 2a10:2f00:167::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xhku5JIZQyq2flx_Yywa8p3SDhM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135298782 (0x8107ede)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar  3 14:55:12 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5e192ee49219432ab67e5c7f632c1af29dd20e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:3e:6b:1e:87:e9:45:74:9f:85:7c:c5:13:
                    4c:15:96:db:d8:aa:b2:e0:20:d6:c3:7d:b0:75:b7:
                    75:83:7d:77:e7:6d:cf:03:1e:78:52:01:ac:db:11:
                    50:85:d7:33:a4:02:dd:53:c5:bf:e3:b6:0c:12:2d:
                    4d:3c:86:f7:b1:72:ca:e3:f2:fb:79:10:d5:33:e7:
                    9e:c2:27:68:db:19:1d:b0:f8:10:f2:40:13:8c:7d:
                    5b:d2:d8:5e:d4:de:6c:55:45:84:38:23:3f:60:0a:
                    5e:7c:b9:d3:ab:66:05:61:a0:70:3d:02:c3:7c:57:
                    7d:12:70:18:a2:66:21:bf:c0:1f:cd:ff:b4:65:3f:
                    77:46:bb:bc:13:3c:d0:2f:28:9f:96:d3:f2:11:00:
                    3d:3f:b1:86:fc:a8:3c:10:44:1d:99:92:c0:99:44:
                    f9:db:cc:e5:e5:54:01:e9:c8:83:43:e4:fa:5b:06:
                    32:cf:a6:e7:59:64:7c:f9:f4:b1:9c:16:9d:cb:cc:
                    0e:e7:eb:67:3f:37:40:bf:b6:0a:b6:4a:ee:1a:41:
                    7b:c1:c3:4e:5b:17:68:21:88:48:2c:f8:6f:1b:98:
                    6d:e2:e7:ac:ae:15:44:58:4d:ff:4f:0b:da:69:bf:
                    c0:4e:de:34:da:70:da:74:d9:1c:a3:31:af:03:40:
                    b0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5E:19:2E:E4:92:19:43:2A:B6:7E:5C:7F:63:2C:1A:F2:9D:D2:0E:13
            X509v3 Authority Key Identifier: 
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xhku5JIZQyq2flx_Yywa8p3SDhM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....*./..g
    Signature Algorithm: sha256WithRSAEncryption
         b9:dc:95:1d:2e:17:c2:40:08:ad:5c:77:1a:41:a2:83:97:fe:
         50:af:4c:f3:0e:71:10:a0:f9:17:d6:5b:07:cf:69:b1:ff:b0:
         21:f4:83:0d:75:92:e3:ba:9b:cf:a9:6a:42:9b:89:f9:13:2c:
         db:d4:c9:62:c4:9c:65:1b:7d:ca:a2:da:6e:24:7b:5a:5e:ed:
         b1:da:9e:08:64:84:0e:ee:68:5a:60:1d:50:64:3e:d3:01:45:
         10:60:39:50:72:d6:7e:b7:28:54:22:5a:3c:ab:de:f5:08:28:
         f7:b9:85:45:95:43:83:f0:29:29:00:ef:78:3f:19:a5:22:85:
         3f:fd:57:54:92:ca:88:f4:e3:79:2a:26:ec:d8:62:f9:ba:15:
         13:ef:43:45:f7:f9:21:3c:45:74:19:74:13:8d:b0:d9:ab:d8:
         2e:2f:99:67:80:4d:1b:62:88:99:5e:29:eb:ba:c8:d4:d0:7d:
         4c:27:07:73:f5:1f:c5:39:9b:a1:d7:87:e9:25:a9:f2:bc:25:
         8f:74:96:34:ce:b4:26:bf:e6:a6:92:ec:f8:5d:40:dc:e8:3f:
         1d:ff:cd:c5:f0:de:65:ed:e5:70:dd:34:c1:b2:aa:5b:de:5c:
         c8:c8:01:79:23:6f:8f:f8:ba:52:f6:15:23:49:a9:bd:87:d0:
         ba:eb:5f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 11:24:16 2021 by LibreSSL & rpki-client.