Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/lQ3RyTwUajaAP9kIbdcwxSI0lHg.roa (download)

Subject key identifier:   95:0D:D1:C9:3C:14:6A:36:80:3F:D9:08:6D:D7:30:C5:22:34:94:78 
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
asID:                     AS174
Prefixes:
    1: 2a07:4a80::/29 (max: 29)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/lQ3RyTwUajaAP9kIbdcwxSI0lHg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26776278 (0x19892d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
        Validity
            Not Before: Apr 30 21:14:39 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=950dd1c93c146a36803fd9086dd730c522349478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:c9:ee:00:fd:fa:02:ae:18:fa:a9:8a:c0:
                    e0:98:dd:a7:c3:f5:b4:b5:e6:4e:00:7f:85:75:5a:
                    83:46:f6:21:38:bb:bb:ae:98:45:7b:4e:0f:e3:17:
                    b0:f0:e5:5a:2b:b7:58:c1:a7:9d:fc:2b:f8:bc:68:
                    ee:4d:aa:75:3e:6f:f8:2e:bd:df:d9:f2:55:6c:c4:
                    21:4d:9f:45:47:2d:34:59:c5:fc:6b:9c:da:eb:33:
                    e5:86:d2:0d:29:53:2c:f7:77:c1:ef:c0:de:4a:38:
                    7f:20:ac:3f:53:07:f1:0e:71:d1:8d:65:70:cc:b5:
                    db:f4:be:2e:22:90:28:67:62:e6:92:da:e0:fb:72:
                    38:55:93:4f:96:d9:16:96:28:8a:2a:1a:e8:92:5b:
                    de:1f:13:ac:9c:2d:11:c2:ae:c2:f3:d5:88:9d:83:
                    60:d5:13:6b:7a:8a:e3:79:f2:71:08:55:2f:9b:ea:
                    a8:14:91:57:d7:85:8f:de:a4:13:f6:09:4f:3f:aa:
                    05:9c:bd:fc:3f:f3:99:9e:1b:1a:d2:f8:11:1f:89:
                    35:69:fa:f5:23:59:4f:9c:06:51:e7:53:69:48:30:
                    74:c7:b4:88:61:64:98:a5:80:5c:03:85:10:04:19:
                    19:c7:cd:e1:9c:f9:e6:1a:a1:01:b4:08:4e:20:ba:
                    32:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                95:0D:D1:C9:3C:14:6A:36:80:3F:D9:08:6D:D7:30:C5:22:34:94:78
            X509v3 Authority Key Identifier: 
                keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/lQ3RyTwUajaAP9kIbdcwxSI0lHg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:4a80::/29

    Signature Algorithm: sha256WithRSAEncryption
         18:e7:57:ae:2f:36:84:13:7b:48:9b:10:a4:35:2b:62:a1:7b:
         cc:24:8a:14:c9:9c:fa:12:ab:47:96:51:9d:0c:2f:4f:5e:a9:
         9c:8b:f1:80:06:a6:09:1c:3c:4a:ad:38:e3:81:26:45:c5:54:
         60:40:52:5b:3f:19:73:e3:0b:e4:1e:b0:cc:db:6d:c2:1c:b9:
         54:40:b2:c6:d5:81:1f:c5:33:75:52:dc:fa:ad:bf:97:ea:81:
         13:2e:f1:c9:3a:a3:88:24:aa:74:4f:d2:2c:ac:d0:09:cf:36:
         c1:38:82:83:89:c6:cf:18:b1:f2:bc:20:7f:bf:c2:08:15:09:
         16:98:56:aa:79:60:89:a8:c4:84:14:90:1d:c4:d8:e7:c1:e2:
         f4:f0:4e:04:16:72:02:79:b8:da:fd:ab:c8:eb:22:d2:2b:b8:
         b8:56:40:98:9b:7c:59:4c:37:d7:fd:88:76:27:61:92:93:9a:
         cb:ce:4b:b4:a3:6b:91:01:bb:a0:4c:58:27:a6:65:77:13:ac:
         53:47:b8:f1:2b:1d:99:15:fa:90:76:4e:6d:c6:b4:06:86:09:
         b1:1b:ff:d9:4b:70:8c:5c:7f:ba:b4:6d:aa:4c:cf:f3:f9:61:
         d9:34:3d:ad:01:d0:22:9a:b3:22:ad:46:c1:46:b4:c1:6f:cb:
         4d:a2:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 11:59:14 2021 by LibreSSL & rpki-client.