Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/8Q3oZd0gQnvMT1kdfWNnu3I1Se8.roa (download)

Subject key identifier:   F1:0D:E8:65:DD:20:42:7B:CC:4F:59:1D:7D:63:67:BB:72:35:49:EF 
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
asID:                     AS26636
Prefixes:
    1: 2a09:140::/29 (max: 29)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/8Q3oZd0gQnvMT1kdfWNnu3I1Se8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91685577 (0x57702c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
        Validity
            Not Before: Mar 24 13:29:49 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f10de865dd20427bcc4f591d7d6367bb723549ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f3:aa:42:42:b7:b9:6d:4b:02:11:88:7c:f7:
                    c6:fe:78:b4:11:5f:7a:c9:12:13:d4:82:ac:80:d4:
                    4a:ea:e9:10:d1:f9:51:b4:2f:03:6c:5f:c5:fd:9b:
                    ed:c7:0a:31:6c:3d:97:3e:74:e7:f1:4c:78:8c:8f:
                    e5:42:d7:e5:7d:cf:32:6c:24:52:c0:5c:5c:23:90:
                    75:74:a7:6f:2a:5d:5c:ff:0e:5f:bc:de:23:3c:6a:
                    54:ce:16:e0:0f:f7:c6:a4:e7:5e:e7:0d:59:08:6a:
                    69:8a:9f:c0:b4:76:cd:91:c1:0e:6a:df:d0:b8:12:
                    e7:f6:40:e1:01:52:39:83:b2:80:30:1e:6e:68:bd:
                    b4:48:b5:cf:16:90:fe:4e:be:07:d6:f8:a7:54:e3:
                    7a:e6:ad:81:56:f9:a5:96:f6:0b:b5:8d:fd:ae:9e:
                    97:3d:c2:97:dc:40:dc:ed:72:2b:62:d3:46:b4:9e:
                    09:9d:cc:c7:88:e2:77:d9:dc:09:89:f8:5b:d9:bd:
                    20:ab:03:6f:b8:ae:f6:d8:c1:35:2c:a3:05:2b:17:
                    60:a7:62:df:a0:a3:30:ea:a1:3d:34:54:19:5c:dc:
                    ff:68:00:e3:d7:e9:78:98:47:13:04:84:e0:4d:eb:
                    f8:72:b5:18:de:0b:6a:f5:73:4e:46:5f:c7:a2:3f:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F1:0D:E8:65:DD:20:42:7B:CC:4F:59:1D:7D:63:67:BB:72:35:49:EF
            X509v3 Authority Key Identifier: 
                keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/8Q3oZd0gQnvMT1kdfWNnu3I1Se8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:140::/29

    Signature Algorithm: sha256WithRSAEncryption
         53:a7:e0:8e:b3:00:63:5e:9b:51:85:ea:52:9e:00:11:a1:02:
         16:43:03:bb:5b:23:c7:c6:65:d5:f5:ef:e8:1e:a5:6e:03:dd:
         b3:51:dd:8a:e8:90:6a:66:9b:87:b8:66:f4:fe:2a:f7:50:6b:
         46:2b:32:cf:19:38:18:16:ef:c2:ab:13:88:c9:77:12:b3:21:
         32:ed:dd:69:53:36:bc:74:44:a5:ec:0b:12:e2:2b:6a:7e:c2:
         17:e6:6f:5f:94:fb:83:50:dc:08:c8:33:ae:5f:1c:fb:05:51:
         0a:4e:60:8c:30:6a:dd:0d:68:cc:67:e1:83:78:94:b5:df:f1:
         0f:cf:9f:94:7c:4e:66:7b:b6:20:1c:18:5b:3d:c9:2e:f8:6f:
         2c:cd:05:4e:3a:da:a8:b7:bf:88:58:20:55:16:a6:76:13:11:
         81:bb:b1:94:0b:53:8c:21:bd:39:59:50:27:fa:21:d5:c0:25:
         f8:c9:5d:dc:a7:6a:80:c9:bd:99:ba:b4:ed:e1:64:7b:12:69:
         74:5a:6f:48:30:77:b6:1e:97:64:64:4a:2a:0e:02:5d:d4:46:
         ad:99:28:41:c0:c7:1c:dc:10:cd:8b:d9:3b:00:3c:db:e1:e5:
         a2:80:a0:5b:e4:db:4e:7f:71:e3:9e:7d:5c:e9:a2:21:c7:0c:
         80:ae:a8:1a
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEBXcCyTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
Mjc2MDNhOTNiY2EzMWIwMThmNTExZjZkNGIwYjc1NDZlOTYzMzYyMB4XDTIxMDMy
NDEzMjk0OVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjEwZGU4NjVkZDIw
NDI3YmNjNGY1OTFkN2Q2MzY3YmI3MjM1NDllZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANfzqkJCt7ltSwIRiHz3xv54tBFfeskSE9SCrIDUSurpENH5
UbQvA2xfxf2b7ccKMWw9lz505/FMeIyP5ULX5X3PMmwkUsBcXCOQdXSnbypdXP8O
X7zeIzxqVM4W4A/3xqTnXucNWQhqaYqfwLR2zZHBDmrf0LgS5/ZA4QFSOYOygDAe
bmi9tEi1zxaQ/k6+B9b4p1TjeuatgVb5pZb2C7WN/a6elz3Cl9xA3O1yK2LTRrSe
CZ3Mx4jid9ncCYn4W9m9IKsDb7iu9tjBNSyjBSsXYKdi36CjMOqhPTRUGVzc/2gA
49fpeJhHEwSE4E3r+HK1GN4LavVzTkZfx6I/E+0CAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBTxDehl3SBCe8xPWR19Y2e7cjVJ7zAfBgNVHSMEGDAWgBSCdgOpO8oxsBj1
EfbUsLdUbpYzYjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2duWURxVHZLTWJBWTlSSDIxTEMzVkc2V00ySS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWIvOTFhZjY2LWQzOTQtNDJmYS1hMGM2LWIxNmNiNGRmYWRkMy8x
LzhRM29aZDBnUW52TVQxa2RmV05udTNJMVNlOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIv
OTFhZjY2LWQzOTQtNDJmYS1hMGM2LWIxNmNiNGRmYWRkMy8xL2duWURxVHZLTWJB
WTlSSDIxTEMzVkc2V00ySS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoJAUAwDQYJKoZIhvcNAQELBQAD
ggEBAFOn4I6zAGNem1GF6lKeABGhAhZDA7tbI8fGZdX17+gepW4D3bNR3YrokGpm
m4e4ZvT+KvdQa0YrMs8ZOBgW78KrE4jJdxKzITLt3WlTNrx0RKXsCxLiK2p+whfm
b1+U+4NQ3AjIM65fHPsFUQpOYIwwat0NaMxn4YN4lLXf8Q/Pn5R8TmZ7tiAcGFs9
yS74byzNBU462qi3v4hYIFUWpnYTEYG7sZQLU4whvTlZUCf6IdXAJfjJXdynaoDJ
vZm6tO3hZHsSaXRab0gwd7Yel2RkSioOAl3URq2ZKEHAxxzcEM2L2TsAPNvh5aKA
oFvk205/ceOefVzpoiHHDICuqBo=
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:49:06 2021 by LibreSSL & rpki-client.