Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/60/1fa6b4-ac69-4d08-96b0-5ad3c24bd90b/1/DKzOFBchqpdA9cAxM2a4H863WiI.roa (download)

Subject key identifier:   0C:AC:CE:14:17:21:AA:97:40:F5:C0:31:33:66:B8:1F:CE:B7:5A:22 
Authority key identifier: 0F:C6:3D:CE:DD:3D:6F:79:A8:AF:BF:A8:31:35:7D:95:61:E0:ED:79
asID:                     AS212052
Prefixes:
    1: 2a0e:fd45:e00::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/60/1fa6b4-ac69-4d08-96b0-5ad3c24bd90b/1/DKzOFBchqpdA9cAxM2a4H863WiI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84562618 (0x50a52ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fc63dcedd3d6f79a8afbfa831357d9561e0ed79
        Validity
            Not Before: Jan  6 22:22:49 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0cacce141721aa9740f5c0313366b81fceb75a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8c:b9:9f:90:b1:c4:79:10:e7:80:5f:a1:7f:
                    85:e5:f0:7e:8f:d9:2f:97:3a:18:f4:e1:7c:5e:e2:
                    08:d0:75:35:ec:ff:dc:f3:b7:96:6b:21:c4:62:e6:
                    5f:1b:2f:f0:9c:4b:81:4f:c7:45:1b:5c:a1:7d:db:
                    cd:74:99:3a:ba:ab:69:96:cb:38:97:fe:dc:a4:c1:
                    75:11:4a:cb:da:aa:c0:e4:4e:a1:70:38:15:50:dc:
                    24:e1:94:60:03:b7:d9:7e:1d:ec:ae:e5:85:1f:4d:
                    f2:66:5a:92:08:fb:ab:7b:3b:7f:24:c0:a7:16:27:
                    f5:df:12:21:1e:ec:20:fc:fa:f5:67:01:99:9b:7b:
                    44:ed:77:4c:d7:c7:47:47:06:33:0b:f0:f5:47:a0:
                    32:a1:3a:30:78:9b:3f:c6:05:bc:f5:98:c3:98:f6:
                    29:8c:f1:35:9a:5e:ec:d7:5c:bc:95:d9:dd:3c:97:
                    eb:d6:8f:f8:e2:29:8d:55:4d:e3:8e:5f:14:f0:b4:
                    0b:dc:08:7e:69:6e:ac:4d:67:1a:ba:c3:eb:4e:5f:
                    37:c5:cf:d4:91:ff:5c:a6:ac:b4:03:90:32:03:55:
                    10:c8:b5:6e:6e:49:57:cd:26:44:5c:6e:68:07:d1:
                    d1:0c:ab:cc:87:06:dc:64:b0:20:29:a6:43:bb:6a:
                    85:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0C:AC:CE:14:17:21:AA:97:40:F5:C0:31:33:66:B8:1F:CE:B7:5A:22
            X509v3 Authority Key Identifier: 
                keyid:0F:C6:3D:CE:DD:3D:6F:79:A8:AF:BF:A8:31:35:7D:95:61:E0:ED:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8Y9zt09b3mor7-oMTV9lWHg7Xk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1fa6b4-ac69-4d08-96b0-5ad3c24bd90b/1/DKzOFBchqpdA9cAxM2a4H863WiI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1fa6b4-ac69-4d08-96b0-5ad3c24bd90b/1/D8Y9zt09b3mor7-oMTV9lWHg7Xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....*..E..
    Signature Algorithm: sha256WithRSAEncryption
         9b:38:1e:53:ea:9e:25:91:45:37:2b:9f:4a:4b:cf:2c:68:b5:
         36:0a:0c:62:06:49:55:0c:b5:22:f8:35:b6:40:64:7b:7a:20:
         ee:86:12:42:61:f5:ef:a3:d2:77:42:7b:10:97:e7:aa:89:c3:
         38:91:dd:e5:40:fd:53:39:b0:d4:1b:8b:27:67:dd:7e:cb:7a:
         91:df:1b:7c:e1:0b:f7:e5:e9:06:42:78:e4:a5:87:62:97:80:
         7e:38:2a:60:cd:b7:53:30:28:49:41:a8:ba:e4:66:70:95:29:
         58:03:32:8f:d0:47:83:45:5f:1f:4c:fd:88:59:0e:06:4d:80:
         ed:c2:73:ba:86:22:18:13:55:96:0b:ef:ff:df:36:58:26:3b:
         47:6e:4b:b9:2a:e9:c6:b3:33:78:af:36:12:a8:ea:4a:d7:77:
         65:22:55:7d:cf:c0:6e:b5:0f:0e:89:c4:b9:a4:8c:6b:57:62:
         ed:1a:c0:9a:6f:2c:b6:e9:97:9d:39:7c:0e:7e:e2:3a:71:98:
         a6:8e:1f:d5:78:16:cb:3e:4f:e0:f5:b0:df:a2:67:14:1e:54:
         2c:4b:9b:97:96:1f:ce:d6:9d:aa:9c:8b:72:c1:27:17:77:0f:
         36:c1:e7:e4:fe:45:08:ad:e7:4f:c0:bf:03:9e:23:17:fb:87:
         c8:7a:3d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Aug 1 19:17:16 2021 by LibreSSL & rpki-client.