Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/82/521a6f-27f8-47e1-8f27-dcdf7dcd95f8/1/UZ6_-bKr3TVZVV9Q2E-r0fJwzmc.roa (download)

Subject key identifier:   51:9E:BF:F9:B2:AB:DD:35:59:55:5F:50:D8:4F:AB:D1:F2:70:CE:67 
Authority key identifier: 0B:92:F9:E0:08:87:05:AE:94:C5:28:0E:02:EE:14:CE:3A:51:1A:46
asID:                     AS174
Prefixes:
    1: 2a0b:ec85::/32 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/82/521a6f-27f8-47e1-8f27-dcdf7dcd95f8/1/UZ6_-bKr3TVZVV9Q2E-r0fJwzmc.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115033826 (0x6db46e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b92f9e0088705ae94c5280e02ee14ce3a511a46
        Validity
            Not Before: May 15 10:00:17 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=519ebff9b2abdd3559555f50d84fabd1f270ce67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7f:4b:0e:bb:37:f0:bc:a1:7a:d1:8c:de:50:
                    48:a4:cb:ee:83:a0:13:d3:33:4b:06:ec:74:44:89:
                    c4:6f:40:fa:f7:1e:21:45:04:2a:7a:60:9c:41:f1:
                    f4:32:d2:d5:a7:f7:29:13:b7:38:b3:78:76:17:af:
                    60:65:c2:55:97:2a:83:94:26:2f:2d:e8:e9:23:f4:
                    67:a1:c2:f8:93:c1:e2:b1:1a:b4:77:75:9d:d4:42:
                    5e:2c:70:31:db:45:63:17:ec:fc:c6:70:cb:10:20:
                    44:74:a3:dc:74:89:07:54:38:16:ad:3d:c3:06:da:
                    22:9a:e7:d3:e7:ae:4e:cd:85:b1:30:c0:51:9d:e3:
                    c0:09:a4:73:c2:f9:e4:26:65:b9:17:d4:98:68:22:
                    67:b6:1b:cf:b0:45:10:2d:cf:5d:03:f0:cb:e9:f6:
                    ef:09:07:a5:f5:4b:3a:65:52:7f:ad:06:24:47:1a:
                    a0:8a:21:2a:f0:54:14:38:ca:7c:a3:f1:fb:d4:0f:
                    6f:4a:bd:5b:81:c9:54:e7:48:7a:e5:70:16:ff:c9:
                    3b:6d:e8:ba:33:41:7e:1e:2c:99:f9:b4:2e:fa:86:
                    55:49:d7:38:d8:bd:45:b8:9e:a6:33:44:63:86:05:
                    21:7f:9d:3b:e2:84:a1:8e:1f:fb:07:34:0d:f3:2f:
                    fb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                51:9E:BF:F9:B2:AB:DD:35:59:55:5F:50:D8:4F:AB:D1:F2:70:CE:67
            X509v3 Authority Key Identifier: 
                keyid:0B:92:F9:E0:08:87:05:AE:94:C5:28:0E:02:EE:14:CE:3A:51:1A:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5L54AiHBa6UxSgOAu4UzjpRGkY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/521a6f-27f8-47e1-8f27-dcdf7dcd95f8/1/UZ6_-bKr3TVZVV9Q2E-r0fJwzmc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/521a6f-27f8-47e1-8f27-dcdf7dcd95f8/1/C5L54AiHBa6UxSgOAu4UzjpRGkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:ec85::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:c8:f8:09:48:e6:ba:31:46:96:16:8f:cd:12:be:22:f7:c1:
         b3:61:22:92:c6:5a:66:04:56:b9:e2:65:46:f9:84:0a:7e:34:
         59:3c:dc:69:1b:d5:de:80:86:6d:12:67:6b:93:1f:68:a5:27:
         b2:21:f5:70:f6:ee:d7:a1:43:70:da:f6:09:01:6f:f1:74:47:
         6d:bb:35:22:8c:e6:f6:22:58:d3:20:f2:de:83:67:2e:1d:74:
         36:6e:a0:9b:e9:e9:85:aa:5a:6e:56:19:c8:0c:e9:f9:41:23:
         a8:30:cf:b2:99:21:ad:58:02:69:0c:a3:99:63:c4:0d:a7:95:
         39:c9:08:19:d9:8b:d9:e8:ab:5e:85:39:da:6a:f6:ac:4c:bd:
         7f:6f:92:1e:06:e8:4a:24:04:46:17:45:d6:6d:e1:1d:85:db:
         2d:44:46:8f:08:f5:bb:3f:a6:99:e6:d4:ab:28:e4:db:b3:31:
         92:16:b4:2a:09:3f:7e:bd:30:47:be:12:42:3f:de:2b:a3:62:
         fa:74:57:ff:e7:31:1e:6e:1e:2a:a8:76:9f:ad:64:be:5c:03:
         85:27:a4:33:73:ac:8b:94:15:ed:9e:3b:d2:f0:fa:c3:ea:e7:
         e1:02:3f:ea:f8:64:21:5f:b2:da:18:29:54:aa:0e:e9:42:d6:
         0b:6c:ca:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 12:03:33 2021 by LibreSSL & rpki-client.