Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/ZKZl2gpARLeljSHzLz55SamKk3o.roa (download)

Subject key identifier:   64:A6:65:DA:0A:40:44:B7:A5:8D:21:F3:2F:3E:79:49:A9:8A:93:7A 
Authority key identifier: AD:12:DA:A3:84:88:8B:52:47:DF:71:29:65:80:3F:0D:3F:A8:98:9D
asID:                     AS0
Prefixes:
    1: 2a06:7380::/29 (max: 29)
    2: 2a0a:db80::/29 (max: 29)
    3: 2a0b:6500::/29 (max: 29)
    4: 2a07:4980::/29 (max: 29)
    5: 2a07:ec40::/29 (max: 29)
    6: 2a06:7d00::/29 (max: 29)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/ZKZl2gpARLeljSHzLz55SamKk3o.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133039 (0x207af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad12daa384888b5247df712965803f0d3fa8989d
        Validity
            Not Before: Feb 10 10:14:43 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=64a665da0a4044b7a58d21f32f3e7949a98a937a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:3e:4b:65:3e:d7:3d:52:48:fb:ff:cf:3a:
                    86:e4:bc:c8:5b:f8:cf:bf:97:88:0f:a6:72:cc:71:
                    62:93:a6:f3:1d:46:e7:0b:f0:8d:05:5e:92:44:97:
                    42:e6:16:6e:7e:71:33:d8:3b:6f:e3:78:93:73:7b:
                    b3:0f:64:af:37:7f:19:e3:92:d9:02:1b:35:4f:a5:
                    ce:16:fd:43:e0:12:42:ee:5a:cb:f6:67:d9:7a:79:
                    1e:70:f0:23:a7:97:fc:b8:f3:65:34:a8:d0:f7:9f:
                    7f:c4:d3:49:d6:e1:2e:b4:0e:83:f5:c7:c7:0b:13:
                    a7:6e:2a:a1:40:6f:76:3f:e2:df:3c:19:c1:51:16:
                    2d:68:66:2f:75:58:f6:53:3f:ff:13:10:af:e5:44:
                    e1:c4:35:3b:0e:45:f0:b8:1e:ba:8d:42:fe:32:fa:
                    bb:a3:5a:72:27:21:b2:80:3a:88:6b:42:78:03:38:
                    42:2b:3d:d7:34:0d:a8:68:a4:d5:d3:c8:3f:2c:79:
                    c7:a0:9c:f1:6a:fc:7e:63:f5:13:fa:cd:19:ea:5d:
                    86:9a:10:db:fe:b1:7e:b6:20:78:e6:14:88:67:40:
                    e0:04:53:e1:2e:f1:24:d3:17:17:45:e6:40:3b:e3:
                    89:6f:e3:dd:65:7c:6d:36:a0:c0:af:8d:b7:ac:17:
                    7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                64:A6:65:DA:0A:40:44:B7:A5:8D:21:F3:2F:3E:79:49:A9:8A:93:7A
            X509v3 Authority Key Identifier: 
                keyid:AD:12:DA:A3:84:88:8B:52:47:DF:71:29:65:80:3F:0D:3F:A8:98:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRLao4SIi1JH33EpZYA_DT-omJ0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/ZKZl2gpARLeljSHzLz55SamKk3o.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/rRLao4SIi1JH33EpZYA_DT-omJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0200....0*...*.s....*.}....*.I....*..@...*
.....*.e.
    Signature Algorithm: sha256WithRSAEncryption
         19:74:ff:0a:7e:13:7a:e9:9a:f8:d0:8b:2b:dd:8e:20:58:fe:
         fc:db:c7:6e:87:7e:e8:ad:2d:21:e5:db:ca:0f:c0:13:6f:fd:
         54:03:71:2f:03:c3:0f:86:5c:b1:a9:c2:80:e6:3e:7f:93:fd:
         bd:7a:f6:e3:07:03:a0:a7:46:5d:4d:9b:18:9c:9f:22:7b:de:
         22:fb:d2:d6:d9:31:d5:80:87:5c:74:59:72:27:92:7f:f7:d1:
         f1:71:50:39:82:5d:42:72:04:c9:7c:26:fc:04:f0:0e:78:c4:
         0a:1b:6a:04:3f:fb:60:69:6f:51:71:c0:07:4b:f2:7d:0d:1b:
         99:ba:51:09:54:35:97:bc:23:8e:95:aa:73:4f:5a:1f:d3:bb:
         bd:23:d9:56:b7:d9:66:79:1a:c7:0d:05:33:e3:cc:88:2e:c9:
         66:70:2c:cd:90:79:5b:9b:0c:ef:a5:8d:78:3f:40:68:9b:8d:
         e7:43:e7:c9:5e:59:6d:ee:6a:04:d5:d4:fb:00:c0:bd:70:54:
         b9:09:a1:9b:05:86:78:f7:22:fe:73:b7:94:bf:72:c2:20:44:
         a5:b9:b7:c3:ac:59:11:e1:75:8f:51:c3:04:82:28:b5:c4:b8:
         68:e6:17:c5:65:41:f6:11:6b:7c:96:bc:f4:af:be:be:a4:06:
         a6:3b:fb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:25:18 2021 by LibreSSL & rpki-client.