Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/60/1fa6b4-ac69-4d08-96b0-5ad3c24bd90b/1/DIEZ54FHEV42Jooug7Q7bN6DMEE.roa (download)

Subject key identifier:   0C:81:19:E7:81:47:11:5E:36:26:8A:2E:83:B4:3B:6C:DE:83:30:41 
Authority key identifier: 0F:C6:3D:CE:DD:3D:6F:79:A8:AF:BF:A8:31:35:7D:95:61:E0:ED:79
asID:                     AS212231
Prefixes:
    1: 2a0e:fd45:d60::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/60/1fa6b4-ac69-4d08-96b0-5ad3c24bd90b/1/DIEZ54FHEV42Jooug7Q7bN6DMEE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82525132 (0x4eb3bcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fc63dcedd3d6f79a8afbfa831357d9561e0ed79
        Validity
            Not Before: Jan  1 00:37:09 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0c8119e78147115e36268a2e83b43b6cde833041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d4:87:fe:cd:c4:51:17:b1:19:26:0e:02:87:
                    82:ef:9e:73:29:c1:a9:ac:d6:26:2c:4c:82:01:2a:
                    5a:2f:aa:38:da:f4:da:63:3e:77:8c:61:e1:a8:ba:
                    1e:30:09:fe:ab:4e:c4:b6:53:88:e2:88:9c:13:f8:
                    4a:6d:2f:a1:f6:33:94:20:c4:62:1a:4a:79:b0:ba:
                    43:64:af:d6:c6:e6:14:18:47:8e:78:40:31:b6:78:
                    dd:3a:1d:df:76:29:5b:9a:13:95:88:46:c4:89:7d:
                    8e:47:03:d7:e6:d4:81:9f:95:63:e7:bd:cb:dc:32:
                    15:35:d7:a8:fb:22:43:5b:13:f4:35:3e:d7:cd:2d:
                    ec:a5:4d:99:29:0e:e7:77:d7:07:79:ca:4a:07:98:
                    a7:da:5e:de:6f:a2:02:a9:46:85:d2:bc:f6:75:56:
                    06:46:a9:a3:a6:d5:b8:0e:a3:cc:2c:10:5b:99:6a:
                    4e:11:a1:4c:20:7f:14:01:d3:85:b6:6e:19:43:23:
                    e8:62:28:c6:91:a1:a2:dc:3c:b6:2d:96:6d:0e:ae:
                    60:88:ef:f0:a0:04:5b:09:40:c5:37:11:7c:e6:e3:
                    23:af:02:1c:e5:8d:23:10:6c:90:e9:ba:21:a2:22:
                    32:d6:81:4e:75:b9:75:dd:50:69:55:6f:19:11:4b:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0C:81:19:E7:81:47:11:5E:36:26:8A:2E:83:B4:3B:6C:DE:83:30:41
            X509v3 Authority Key Identifier: 
                keyid:0F:C6:3D:CE:DD:3D:6F:79:A8:AF:BF:A8:31:35:7D:95:61:E0:ED:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8Y9zt09b3mor7-oMTV9lWHg7Xk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1fa6b4-ac69-4d08-96b0-5ad3c24bd90b/1/DIEZ54FHEV42Jooug7Q7bN6DMEE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1fa6b4-ac69-4d08-96b0-5ad3c24bd90b/1/D8Y9zt09b3mor7-oMTV9lWHg7Xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....*..E
`
    Signature Algorithm: sha256WithRSAEncryption
         92:79:e1:ee:e5:61:f1:e3:1b:d0:b0:99:54:89:4d:f7:c9:fe:
         61:99:c6:83:64:48:ae:96:2e:af:71:93:fb:15:bb:30:19:cc:
         d0:5e:69:6a:2d:22:f9:3d:6f:79:f6:cf:57:e6:47:af:3f:4c:
         8d:53:22:19:38:80:a0:f8:15:7d:7a:b2:07:44:b2:49:1c:0d:
         d4:63:84:b5:4d:97:87:92:94:af:7f:15:dd:2f:2e:72:57:48:
         46:99:5d:1a:62:b0:06:b2:24:3e:cc:61:c9:c4:09:c0:8f:a7:
         5a:8b:54:c7:65:2c:3b:02:72:eb:b5:6b:26:58:2a:2b:fd:7c:
         23:40:fe:0b:64:f7:cd:b5:f1:ee:a8:2e:bd:79:95:f4:30:c0:
         ca:fe:fa:30:1a:6c:06:e3:30:01:3f:4f:24:dd:28:c0:82:6a:
         7e:2c:b8:c6:c0:18:5a:d7:83:da:02:42:44:08:6f:5e:92:2f:
         98:ab:99:7f:6a:5b:bc:ee:80:c7:70:3f:3b:73:80:03:26:09:
         ea:2d:0d:c8:e9:6b:6e:fa:9a:e3:a6:d4:fe:6f:e6:d0:56:13:
         bf:5b:b5:56:f8:d6:24:bd:db:7c:71:70:35:08:96:26:fa:e8:
         b5:a9:b9:3c:8a:f4:a1:17:84:63:49:21:c0:ce:65:6e:a0:96:
         64:da:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Aug 1 19:17:16 2021 by LibreSSL & rpki-client.