Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/57/3e81a8-e3ca-459e-96e0-47835a8ae2a8/1/R0S4MiVUJ3kr67lfPhgjzaTulo4.roa (download)

Subject key identifier:   47:44:B8:32:25:54:27:79:2B:EB:B9:5F:3E:18:23:CD:A4:EE:96:8E 
Authority key identifier: C0:72:22:E9:FE:04:2C:75:2C:0A:4D:CB:37:46:F8:65:97:3D:AB:62
asID:                     AS398646
Prefixes:
    1: 2a0c:b642:1a0d::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/57/3e81a8-e3ca-459e-96e0-47835a8ae2a8/1/R0S4MiVUJ3kr67lfPhgjzaTulo4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105117167 (0x643f5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c07222e9fe042c752c0a4dcb3746f865973dab62
        Validity
            Not Before: Jan  1 00:10:55 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=4744b832255427792bebb95f3e1823cda4ee968e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a1:c2:86:bd:be:23:20:a8:bf:a0:ed:23:8f:
                    a3:72:a1:33:ab:e1:a4:a8:d6:73:ee:42:7a:9b:fe:
                    4f:ef:0e:0d:60:71:89:97:09:52:ac:01:4d:cf:29:
                    f5:18:e2:62:9b:60:a4:c0:77:d8:ea:fb:b2:c0:4a:
                    75:1e:8d:f6:04:d0:fe:8b:2c:42:b2:16:ab:1a:ea:
                    9f:d1:40:ac:31:61:38:ae:17:ec:82:7d:95:a4:db:
                    3a:c4:45:0a:fe:e5:02:df:45:bd:4d:8b:3b:39:87:
                    58:fb:64:4a:71:0b:6b:fe:16:74:87:3b:1d:84:98:
                    20:15:e1:30:e1:8e:84:9e:ad:02:ac:8a:a8:02:52:
                    13:12:73:72:41:ac:3e:e3:ae:1a:72:20:0c:9a:90:
                    df:a4:fe:0e:06:b0:ea:44:bd:31:e9:c2:33:d5:1f:
                    27:d8:48:e8:2c:cb:4f:b0:17:e3:2c:79:a8:1e:03:
                    3f:a9:f7:82:d5:c9:2c:af:30:99:8e:51:42:48:45:
                    80:19:78:ef:08:b4:69:79:ee:bd:4f:be:90:5f:b3:
                    c0:07:ec:a1:18:a2:ae:fb:81:a6:8a:2f:44:41:c9:
                    68:f3:28:b3:3f:26:c9:7a:12:0f:a6:09:86:62:77:
                    a1:b7:70:be:f8:04:03:e1:36:6d:61:43:60:4a:da:
                    61:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                47:44:B8:32:25:54:27:79:2B:EB:B9:5F:3E:18:23:CD:A4:EE:96:8E
            X509v3 Authority Key Identifier: 
                keyid:C0:72:22:E9:FE:04:2C:75:2C:0A:4D:CB:37:46:F8:65:97:3D:AB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHIi6f4ELHUsCk3LN0b4ZZc9q2I.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3e81a8-e3ca-459e-96e0-47835a8ae2a8/1/R0S4MiVUJ3kr67lfPhgjzaTulo4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3e81a8-e3ca-459e-96e0-47835a8ae2a8/1/wHIi6f4ELHUsCk3LN0b4ZZc9q2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b642:1a0d::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:41:6e:65:d4:c8:bd:05:c3:95:cf:02:d1:87:e6:61:da:1d:
         bb:04:fe:f2:15:97:c3:de:36:45:84:8e:cb:ee:59:6d:1e:f8:
         80:c8:59:67:77:72:f9:f7:9e:fc:99:55:3a:8e:c3:30:e1:ea:
         4e:9e:82:d7:e5:08:c6:18:d6:11:72:4f:7e:d9:ee:43:c9:1d:
         73:7f:01:ce:aa:f3:bf:54:15:f0:39:d7:55:32:47:e6:d1:86:
         c0:63:bd:ad:ad:42:77:36:8f:4b:86:74:ee:3c:4e:45:20:eb:
         9d:9e:dc:2d:b5:a5:a5:d9:fc:18:08:47:7a:92:02:0e:8a:a4:
         36:bf:53:df:86:c0:d4:51:ff:3b:1c:10:ce:e2:4a:a2:81:29:
         d2:79:b9:a0:ee:22:4b:fd:dd:f6:f9:62:75:40:85:2f:17:54:
         2e:90:c1:d8:8e:87:45:7c:3c:67:d8:f4:40:70:34:36:29:72:
         78:07:ab:e2:8a:7e:1f:03:ff:9d:4d:cc:d3:8f:ba:c7:58:19:
         e3:4c:24:fd:d3:c4:4f:5a:62:fd:09:df:50:c7:ec:7a:12:21:
         32:6a:f9:a3:48:df:ee:ab:36:65:b2:2c:76:28:55:37:a0:46:
         95:35:50:c6:91:ba:16:92:46:36:1c:0b:8f:72:32:f6:54:b2:
         42:b0:51:12
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBkP17zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MDcyMjJlOWZlMDQyYzc1MmMwYTRkY2IzNzQ2Zjg2NTk3M2RhYjYyMB4XDTIxMDEw
MTAwMTA1NVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDc0NGI4MzIyNTU0
Mjc3OTJiZWJiOTVmM2UxODIzY2RhNGVlOTY4ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOGhwoa9viMgqL+g7SOPo3KhM6vhpKjWc+5Cepv+T+8ODWBx
iZcJUqwBTc8p9RjiYptgpMB32Or7ssBKdR6N9gTQ/ossQrIWqxrqn9FArDFhOK4X
7IJ9laTbOsRFCv7lAt9FvU2LOzmHWPtkSnELa/4WdIc7HYSYIBXhMOGOhJ6tAqyK
qAJSExJzckGsPuOuGnIgDJqQ36T+Dgaw6kS9MenCM9UfJ9hI6CzLT7AX4yx5qB4D
P6n3gtXJLK8wmY5RQkhFgBl47wi0aXnuvU++kF+zwAfsoRiirvuBpoovREHJaPMo
sz8myXoSD6YJhmJ3obdwvvgEA+E2bWFDYEraYYUCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRHRLgyJVQneSvruV8+GCPNpO6WjjAfBgNVHSMEGDAWgBTAciLp/gQsdSwK
Tcs3Rvhllz2rYjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dISWk2ZjRFTEhVc0NrM0xOMGI0WlpjOXEySS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTcvM2U4MWE4LWUzY2EtNDU5ZS05NmUwLTQ3ODM1YThhZTJhOC8x
L1IwUzRNaVZVSjNrcjY3bGZQaGdqemFUdWxvNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcv
M2U4MWE4LWUzY2EtNDU5ZS05NmUwLTQ3ODM1YThhZTJhOC8xL3dISWk2ZjRFTEhV
c0NrM0xOMGI0WlpjOXEySS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoMtkIaDTANBgkqhkiG9w0BAQsF
AAOCAQEAvUFuZdTIvQXDlc8C0YfmYdoduwT+8hWXw942RYSOy+5ZbR74gMhZZ3dy
+fee/JlVOo7DMOHqTp6C1+UIxhjWEXJPftnuQ8kdc38Bzqrzv1QV8DnXVTJH5tGG
wGO9ra1CdzaPS4Z07jxORSDrnZ7cLbWlpdn8GAhHepICDoqkNr9T34bA1FH/OxwQ
zuJKooEp0nm5oO4iS/3d9vlidUCFLxdULpDB2I6HRXw8Z9j0QHA0NilyeAer4op+
HwP/nU3M04+6x1gZ40wk/dPET1pi/QnfUMfsehIhMmr5o0jf7qs2ZbIsdihVN6BG
lTVQxpG6FpJGNhwLj3Iy9lSyQrBREg==
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:16:15 2021 by LibreSSL & rpki-client.