Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/EczfKj2CcpLRsxn3ouaG8gMk5NQ.roa (download)

Subject key identifier:   11:CC:DF:2A:3D:82:72:92:D1:B3:19:F7:A2:E6:86:F2:03:24:E4:D4 
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
asID:                     AS397568
Prefixes:
    1: 2a06:6540:2003::/48 (max: 48)
    2: 2a06:6541:2003::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/EczfKj2CcpLRsxn3ouaG8gMk5NQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198911679 (0xbdb26bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
        Validity
            Not Before: Jan  1 07:40:41 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=11ccdf2a3d827292d1b319f7a2e686f20324e4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:29:07:b7:27:87:bd:91:86:9d:48:1f:1e:
                    3a:e0:e6:d4:b7:14:5d:69:24:22:dc:3c:05:01:52:
                    3d:df:d6:69:73:2d:f7:59:15:1f:db:7d:56:4a:d5:
                    ca:a8:8e:34:06:c7:4a:11:0e:65:08:72:eb:25:d6:
                    ad:cf:a1:6e:c8:5e:25:2a:46:c7:8a:c5:a8:7a:c4:
                    f9:30:7e:95:97:eb:24:41:2f:7c:38:67:d2:a6:7c:
                    63:df:1e:0e:ff:2e:b2:d3:05:ef:28:da:a0:5d:60:
                    dd:70:cb:56:07:90:e6:50:d5:a2:1f:9b:62:9e:94:
                    f7:18:99:62:ff:7c:5a:36:25:12:a1:16:6f:ea:9e:
                    d8:02:21:ab:06:d1:72:dc:2b:04:fa:c2:5c:42:7e:
                    01:01:ba:25:23:50:17:86:08:d8:c5:2d:73:71:e5:
                    9e:66:8b:9e:d9:03:35:6d:08:72:50:c4:2c:ea:19:
                    91:7e:62:b4:ea:1f:a9:33:bd:33:5a:0d:2d:73:0d:
                    0a:dc:8c:14:10:81:00:b7:91:fd:54:89:ee:62:5a:
                    d5:d9:e1:f1:03:3c:7b:c9:79:ae:27:c3:cb:b2:a5:
                    63:b3:a8:3a:37:a5:20:6f:b4:7c:2f:00:23:ee:72:
                    65:c9:de:30:cb:77:ec:a2:17:6e:df:67:cd:20:95:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                11:CC:DF:2A:3D:82:72:92:D1:B3:19:F7:A2:E6:86:F2:03:24:E4:D4
            X509v3 Authority Key Identifier: 
                keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/EczfKj2CcpLRsxn3ouaG8gMk5NQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:6540:2003::/48
                  2a06:6541:2003::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:0b:8a:6b:a2:d8:9b:29:d4:6f:c3:80:41:5a:ba:fc:d6:d9:
         10:7d:24:c7:08:26:25:df:ef:7b:8a:0e:d1:90:46:e2:80:a3:
         34:c2:34:20:a1:94:49:69:bb:09:5a:82:32:56:33:ac:26:5a:
         38:67:fe:69:c9:b4:d6:55:30:f2:d5:76:69:cd:d7:31:a8:4e:
         cb:fe:1f:84:62:4c:e6:13:59:0c:1a:93:6a:57:a8:be:e5:a2:
         30:81:b6:19:3e:8c:a5:14:29:3b:ca:ba:4a:34:74:11:fa:20:
         3c:a6:2f:d2:d4:6b:9a:20:7f:57:64:57:ed:d6:af:b4:aa:ef:
         5e:cf:7e:12:bd:38:2d:57:4a:ea:af:00:60:8a:a3:f0:d1:d2:
         3b:6f:4b:02:de:c1:29:9a:b7:d9:29:23:7b:de:18:43:c1:c9:
         a1:57:12:ab:46:7a:92:28:2f:53:dc:f0:3c:ca:91:d9:13:e0:
         37:61:e0:b6:0c:ac:30:a0:26:e1:67:e4:d6:86:a6:9e:fe:83:
         b4:63:02:f0:dc:4c:85:f4:b9:bb:97:f4:da:e8:98:eb:20:9f:
         32:a7:3f:5f:b0:cd:c3:42:23:3f:1d:c9:c6:7e:dc:b0:e1:fe:
         2e:e5:c6:63:c0:af:cc:3c:ae:a2:d7:06:5d:87:56:7c:8d:84:
         10:20:22:8a
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEC9smvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YWM0NjZjYzg5ZjlkYjRlMzFjNTQwMGQyYWU3YTJiZmZkYjIyNTQ3MB4XDTIxMDEw
MTA3NDA0MVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTFjY2RmMmEzZDgy
NzI5MmQxYjMxOWY3YTJlNjg2ZjIwMzI0ZTRkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJgRKQe3J4e9kYadSB8eOuDm1LcUXWkkItw8BQFSPd/WaXMt
91kVH9t9VkrVyqiONAbHShEOZQhy6yXWrc+hbsheJSpGx4rFqHrE+TB+lZfrJEEv
fDhn0qZ8Y98eDv8ustMF7yjaoF1g3XDLVgeQ5lDVoh+bYp6U9xiZYv98WjYlEqEW
b+qe2AIhqwbRctwrBPrCXEJ+AQG6JSNQF4YI2MUtc3HlnmaLntkDNW0IclDELOoZ
kX5itOofqTO9M1oNLXMNCtyMFBCBALeR/VSJ7mJa1dnh8QM8e8l5rifDy7KlY7Oo
OjelIG+0fC8AI+5yZcneMMt37KIXbt9nzSCVi08CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQRzN8qPYJyktGzGfei5obyAyTk1DAfBgNVHSMEGDAWgBRaxGbMifnbTjHF
QA0q56K//bIlRzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dzUm16SW41MjA0eHhVQU5LdWVpdl8yeUpVYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmQvZTI5Yzg3LTQ2ODMtNDQzZS04ODNmLTlhYmQxYWE2NGJlMS8x
L0VjemZLajJDY3BMUnN4bjNvdWFHOGdNazVOUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQv
ZTI5Yzg3LTQ2ODMtNDQzZS04ODNmLTlhYmQxYWE2NGJlMS8xL1dzUm16SW41MjA0
eHhVQU5LdWVpdl8yeUpVYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoGZUAgAwMHACoGZUEgAzANBgkq
hkiG9w0BAQsFAAOCAQEAIguKa6LYmynUb8OAQVq6/NbZEH0kxwgmJd/ve4oO0ZBG
4oCjNMI0IKGUSWm7CVqCMlYzrCZaOGf+acm01lUw8tV2ac3XMahOy/4fhGJM5hNZ
DBqTaleovuWiMIG2GT6MpRQpO8q6SjR0EfogPKYv0tRrmiB/V2RX7davtKrvXs9+
Er04LVdK6q8AYIqj8NHSO29LAt7BKZq32Skje94YQ8HJoVcSq0Z6kigvU9zwPMqR
2RPgN2HgtgysMKAm4Wfk1oamnv6DtGMC8NxMhfS5u5f02uiY6yCfMqc/X7DNw0Ij
Px3Jxn7csOH+LuXGY8CvzDyuotcGXYdWfI2EECAiig==
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:35:42 2021 by LibreSSL & rpki-client.