Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/HV-Kt_2146bD5rQc3JXOMTavXjk.roa (download)

Subject key identifier:   1D:5F:8A:B7:FD:B5:E3:A6:C3:E6:B4:1C:DC:95:CE:31:36:AF:5E:39 
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
asID:                     AS48025
Prefixes:
    1: 2001:678:c98::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/HV-Kt_2146bD5rQc3JXOMTavXjk.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45341598 (0x2b3db9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
        Validity
            Not Before: Jan  1 02:54:55 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=1d5f8ab7fdb5e3a6c3e6b41cdc95ce3136af5e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:48:83:77:e4:0b:00:de:c6:94:45:46:7a:
                    65:29:f0:45:42:93:68:da:26:47:16:c5:53:0e:3a:
                    e7:9f:c1:7a:e5:03:ca:d5:b5:f2:84:51:11:47:32:
                    cf:28:9b:c5:76:33:a8:7c:46:40:4e:c5:07:fd:0b:
                    5e:10:dd:2a:23:b7:ba:4e:a5:19:b4:05:23:2e:e7:
                    d2:7d:62:b3:c2:87:de:1d:14:66:ab:ba:5f:b7:f0:
                    cf:e6:d3:b6:9b:ca:69:0d:b7:f1:68:5e:7f:c2:e9:
                    76:db:76:cb:06:4c:26:e1:b1:66:c2:7b:5a:34:31:
                    90:57:6d:bf:9a:b1:08:01:a7:46:47:f6:91:05:c5:
                    55:da:3c:92:77:87:ea:6a:30:77:5a:bc:92:63:93:
                    f5:b5:00:80:24:7a:41:b9:21:20:18:5b:c5:42:3e:
                    98:2c:f2:14:0f:91:03:81:0c:ad:3d:1e:b1:29:8c:
                    bc:c3:1b:66:c0:45:c8:d1:9b:8b:8f:00:4e:07:00:
                    be:c8:ea:af:e4:e6:94:9a:38:20:5d:3b:f6:2c:95:
                    c7:50:e7:8d:66:55:2e:5e:75:4e:55:3c:4c:4c:36:
                    34:91:34:c1:1a:62:66:a0:d0:67:e5:71:ff:50:df:
                    7d:d4:7c:0a:86:5a:4f:07:cd:55:15:8d:05:d4:9f:
                    da:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1D:5F:8A:B7:FD:B5:E3:A6:C3:E6:B4:1C:DC:95:CE:31:36:AF:5E:39
            X509v3 Authority Key Identifier: 
                keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/HV-Kt_2146bD5rQc3JXOMTavXjk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.... ..x..
    Signature Algorithm: sha256WithRSAEncryption
         53:c6:69:72:ea:8c:05:0d:1b:3d:a3:1d:51:06:73:57:ca:7d:
         5b:fb:ec:23:16:ca:f8:cc:6d:7d:57:91:89:25:19:63:c1:4a:
         a8:b7:04:1c:83:ab:28:fc:b8:dc:c2:9f:ff:14:bc:9b:06:b3:
         ea:4c:99:64:4d:59:83:19:49:cc:32:43:83:34:1c:b5:b1:91:
         d1:2b:66:c8:d5:c2:f3:84:9e:c7:63:0e:f4:95:13:28:6c:53:
         f7:87:af:a5:98:64:59:f0:c1:12:10:57:61:be:ae:ab:c0:d9:
         1d:c9:e6:c4:54:e3:94:65:df:67:36:34:5c:a0:43:1d:b9:ac:
         09:ee:b8:f7:81:67:93:18:95:dc:0c:93:5d:6d:ec:cd:b3:ac:
         d9:d2:5e:2c:a9:54:29:d0:ab:39:aa:f7:4f:d9:1b:4e:93:67:
         00:d1:5f:f9:2e:b9:45:d7:1c:6d:45:9c:f6:94:8e:6b:36:44:
         da:3c:ed:a2:5f:98:fd:4f:86:76:86:74:11:82:ee:2b:d9:6c:
         88:b2:c3:00:8d:ba:6d:a5:fa:94:92:2e:19:26:46:ee:45:77:
         66:cf:73:b8:8e:71:e6:c0:75:c3:ae:44:c5:8e:f5:ee:6e:97:
         76:7b:99:da:ac:5e:9c:4c:c2:0c:ae:ba:5f:39:b1:1c:21:8c:
         46:87:68:38
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEArPbnjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NjJhZjMzMDJmNmE0OWY3ZWI2OTFhYzQ5NTllMWFjZjk1ZGI2Y2U3MB4XDTIxMDEw
MTAyNTQ1NVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWQ1ZjhhYjdmZGI1
ZTNhNmMzZTZiNDFjZGM5NWNlMzEzNmFmNWUzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALmoSIN35AsA3saURUZ6ZSnwRUKTaNomRxbFUw4655/BeuUD
ytW18oRREUcyzyibxXYzqHxGQE7FB/0LXhDdKiO3uk6lGbQFIy7n0n1is8KH3h0U
Zqu6X7fwz+bTtpvKaQ238Whef8Lpdtt2ywZMJuGxZsJ7WjQxkFdtv5qxCAGnRkf2
kQXFVdo8kneH6mowd1q8kmOT9bUAgCR6QbkhIBhbxUI+mCzyFA+RA4EMrT0esSmM
vMMbZsBFyNGbi48ATgcAvsjqr+TmlJo4IF079iyVx1DnjWZVLl51TlU8TEw2NJE0
wRpiZqDQZ+Vx/1DffdR8CoZaTwfNVRWNBdSf2uMCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQdX4q3/bXjpsPmtBzclc4xNq9eOTAfBgNVHSMEGDAWgBQWKvMwL2pJ9+tp
GsSVnhrPldts5zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZpcnpNQzlxU2ZmcmFSckVsWjRhejVYYmJPYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzkvN2RiMDYxLTBiY2EtNGIwZS05NDgzLWU3NzVkNWZhYTllMy8x
L0hWLUt0XzIxNDZiRDVyUWMzSlhPTVRhdlhqay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkv
N2RiMDYxLTBiY2EtNGIwZS05NDgzLWU3NzVkNWZhYTllMy8xL0ZpcnpNQzlxU2Zm
cmFSckVsWjRhejVYYmJPYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngMmDANBgkqhkiG9w0BAQsF
AAOCAQEAU8ZpcuqMBQ0bPaMdUQZzV8p9W/vsIxbK+MxtfVeRiSUZY8FKqLcEHIOr
KPy43MKf/xS8mwaz6kyZZE1ZgxlJzDJDgzQctbGR0StmyNXC84Sex2MO9JUTKGxT
94evpZhkWfDBEhBXYb6uq8DZHcnmxFTjlGXfZzY0XKBDHbmsCe6494FnkxiV3AyT
XW3szbOs2dJeLKlUKdCrOar3T9kbTpNnANFf+S65RdccbUWc9pSOazZE2jztol+Y
/U+GdoZ0EYLuK9lsiLLDAI26baX6lJIuGSZG7kV3Zs9zuI5x5sB1w65ExY717m6X
dnuZ2qxenEzCDK66XzmxHCGMRodoOA==
-----END CERTIFICATE-----

Generated at Tue Jul 27 11:32:11 2021 by LibreSSL & rpki-client.