Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/hb8s6dIwkF8I3Lrwy0_eeAoZO_g.roa (download)

Subject key identifier:   85:BF:2C:E9:D2:30:90:5F:08:DC:BA:F0:CB:4F:DE:78:0A:19:3B:F8 
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
asID:                     AS0
Prefixes:
    1: 2a0f:3787::/32 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/hb8s6dIwkF8I3Lrwy0_eeAoZO_g.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74486897 (0x4709471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
        Validity
            Not Before: Feb  4 01:00:46 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=85bf2ce9d230905f08dcbaf0cb4fde780a193bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:57:38:37:c4:a2:66:4d:84:f0:1d:26:70:ee:
                    01:9d:0e:de:c9:39:d5:a0:1e:01:5a:1c:32:ad:48:
                    d3:a9:99:b7:f2:22:c9:7e:59:79:74:0b:1e:74:5a:
                    63:8a:0b:a0:96:b8:41:0e:a6:dc:56:37:24:83:67:
                    d5:07:e5:dc:6f:21:97:cf:89:aa:dc:f9:29:5c:2d:
                    44:0c:3a:d7:e3:4d:7a:0b:f5:87:bc:16:5c:44:2e:
                    d4:8e:44:ac:41:1d:b5:70:ae:a5:71:95:00:52:ed:
                    36:10:a9:4d:e1:f9:de:9c:39:fd:69:9b:88:d5:4d:
                    f5:4b:d9:95:2b:cb:1c:d1:eb:a8:0d:39:aa:1e:10:
                    13:e0:f7:bf:d6:fc:7b:9a:25:14:e7:8f:8a:ca:65:
                    63:fd:c2:ef:ad:86:bd:80:e9:1c:47:27:75:05:4b:
                    5f:e3:d6:89:e0:77:8c:8d:db:ba:c2:72:fd:8d:10:
                    bd:c3:40:18:1f:ac:ad:d3:cc:26:d3:0a:5e:54:6e:
                    71:94:10:e3:76:2a:d3:f2:8e:23:aa:0b:be:1b:5e:
                    53:1d:81:3d:4c:48:d8:c7:a1:71:b5:24:bd:ab:c9:
                    4c:3a:82:d9:bb:19:3a:6d:7e:d0:38:e3:4e:00:08:
                    c1:f9:88:00:49:c4:71:b2:95:ed:54:fa:54:13:9a:
                    19:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                85:BF:2C:E9:D2:30:90:5F:08:DC:BA:F0:CB:4F:DE:78:0A:19:3B:F8
            X509v3 Authority Key Identifier: 
                keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/hb8s6dIwkF8I3Lrwy0_eeAoZO_g.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0
....0....*.7.
    Signature Algorithm: sha256WithRSAEncryption
         aa:f6:1d:47:18:d1:82:6e:b5:20:98:d6:e8:f2:92:13:35:94:
         35:16:cb:1e:62:e6:70:c2:8a:c8:50:3b:94:b8:ec:b8:c2:5b:
         a7:cf:75:ec:a0:52:f0:40:7a:85:56:9e:c5:6c:38:02:65:fd:
         4f:9c:89:56:40:89:7a:d4:ed:ec:61:f4:35:2b:6b:d1:59:89:
         40:3e:2f:46:2f:83:1e:e2:14:08:19:74:6e:5b:ee:44:24:64:
         17:b2:a3:c2:01:20:aa:69:c3:79:34:c6:41:1c:39:05:d0:f5:
         e0:f7:bc:6f:87:85:48:c9:1c:e0:e2:91:da:e4:23:8f:e5:97:
         f9:10:85:70:10:f8:cc:39:cd:94:9a:b3:f9:43:50:57:0a:2b:
         3f:a0:bc:e5:62:cf:fd:88:3d:27:7e:9e:aa:3d:f3:3f:5b:a0:
         3f:bd:09:2a:cf:94:d0:cc:26:cc:16:c8:60:c4:f0:71:50:2a:
         0a:c2:95:f9:be:ce:83:0e:35:e3:1b:a3:d0:a3:ba:10:3c:fc:
         95:ce:98:4f:e9:2e:c8:2f:2c:31:f4:80:45:4f:c2:34:5e:b1:
         f8:5b:91:70:72:01:f5:bb:ea:36:d2:9a:df:8c:0e:f1:a5:0e:
         ce:f5:aa:66:10:8b:93:a2:78:26:36:d1:13:5a:39:54:5d:47:
         57:e5:fa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 07:20:36 2021 by LibreSSL & rpki-client.