Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/1-3ii-8CFQ5JDp0-2_bcrnYmQLA0.roa (download)

Subject key identifier:   FB:78:A2:FB:C0:85:43:92:43:A7:4F:B6:FD:B7:2B:9D:89:90:2C:0D 
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
asID:                     AS133480
Prefixes:
    1: 2a0e:1cc0:2::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/1-3ii-8CFQ5JDp0-2_bcrnYmQLA0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82684434 (0x4edaa12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: Jan  1 00:19:49 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=fb78a2fbc085439243a74fb6fdb72b9d89902c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:74:de:1d:b6:a2:70:ca:1b:33:b1:82:f0:
                    96:84:1e:23:c7:cc:03:05:dc:bc:ec:2f:98:6f:83:
                    96:ea:83:e0:9d:f6:8d:59:b4:fb:90:12:d4:0d:00:
                    c4:54:cb:a5:7c:b9:e8:93:49:bf:65:ab:ca:ac:b3:
                    93:29:57:5c:d7:01:5f:62:e0:4f:45:f7:a7:a4:1c:
                    d2:52:eb:e4:b1:dc:17:f8:a4:db:ae:18:9d:21:6b:
                    52:8d:5a:7c:04:23:08:ed:02:f2:3c:95:78:ab:39:
                    b0:2b:e5:4f:53:11:7d:94:71:30:5b:5a:13:b6:3e:
                    a5:48:91:f7:dc:60:40:55:6f:9a:ee:2c:45:47:27:
                    db:a0:7b:58:81:35:de:2f:13:5a:f6:de:71:0f:70:
                    f4:26:1c:48:6f:83:66:f4:ec:77:10:69:02:54:9d:
                    03:c2:ab:6a:f8:a2:6e:88:4f:a5:09:f3:90:8b:de:
                    6a:79:d1:b3:f1:20:ae:03:91:5f:7d:e7:c4:3a:e1:
                    90:9d:31:f0:8d:f1:fb:62:89:63:ce:3f:d2:12:a4:
                    79:63:38:d8:14:d5:4f:81:dd:e6:96:96:15:b3:92:
                    28:b9:ae:13:25:0a:aa:3c:f4:e4:53:94:d2:22:4a:
                    db:55:63:3d:5a:0f:5b:fa:af:97:2e:91:e0:1b:f5:
                    0f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FB:78:A2:FB:C0:85:43:92:43:A7:4F:B6:FD:B7:2B:9D:89:90:2C:0D
            X509v3 Authority Key Identifier: 
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/1-3ii-8CFQ5JDp0-2_bcrnYmQLA0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....*.....
    Signature Algorithm: sha256WithRSAEncryption
         19:e5:f7:91:a7:21:fd:a2:68:ae:ee:86:96:f4:7e:c5:c7:3c:
         ac:c2:ed:7b:e4:96:c1:08:01:e5:2e:a4:4e:23:43:7b:4d:9c:
         3f:af:cd:a2:9b:99:e2:91:ed:bd:a0:a7:b8:a7:7f:c7:3c:56:
         34:32:30:49:b3:b2:bf:bb:1a:5b:2f:98:94:2e:15:90:9f:64:
         2b:66:49:23:63:09:ab:ba:50:5e:58:34:a5:da:85:dd:93:b1:
         54:0e:64:a0:22:09:08:04:c5:fa:6c:ac:78:6c:04:24:30:4b:
         4a:ec:ed:c3:4c:7e:3e:9b:f8:8e:5d:8d:9a:9a:f0:44:81:89:
         7c:c3:17:ae:c5:49:82:5b:34:8f:51:eb:64:42:42:ad:ed:d4:
         19:e9:7f:2e:ef:bd:fb:4d:0a:34:cf:71:de:cd:b1:25:2c:fb:
         50:dd:ca:88:10:9d:7d:70:dd:61:a0:20:83:d9:72:b6:3b:e6:
         96:38:e6:08:8e:3f:8b:58:b1:91:1b:d0:57:67:6b:23:be:04:
         22:84:ba:5a:1d:fb:c3:ac:6a:44:50:5b:fd:76:6d:ec:dc:8b:
         4f:93:69:17:b8:f2:a8:dc:ac:a8:d7:96:e6:60:1c:f8:79:9d:
         1e:06:bd:7f:e1:74:9e:be:90:8b:41:81:c6:a3:86:b4:20:6a:
         ec:2c:76:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Aug 1 21:53:00 2021 by LibreSSL & rpki-client.