Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/VB5_-FnPmKMLATniIzyFfyERGjk.roa (download)

Subject key identifier:   54:1E:7F:F8:59:CF:98:A3:0B:01:39:E2:23:3C:85:7F:21:11:1A:39 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS198127
Prefixes:
    1: 2a00:e200:104::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/VB5_-FnPmKMLATniIzyFfyERGjk.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96554338 (0x5c14d62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 02:43:29 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=541e7ff859cf98a30b0139e2233c857f21111a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9f:6d:ed:d8:2e:cd:b3:64:0e:8b:b4:47:ee:
                    87:de:44:73:ac:ed:4b:48:72:c2:cc:ca:3e:b4:40:
                    87:be:56:f9:ac:46:00:ec:c4:e3:8c:bb:7e:cd:3a:
                    b8:09:d8:d4:93:c3:9a:78:4e:af:9f:65:60:d7:0c:
                    37:2a:e6:44:86:85:4c:f4:a4:a7:df:63:cc:e8:60:
                    7e:66:82:02:7f:9c:91:a5:c4:75:05:45:06:fd:ae:
                    d7:24:66:fc:51:b7:a9:1e:f5:63:88:71:97:05:87:
                    7c:6e:db:4b:2c:81:ba:d2:d9:82:d0:c2:a6:c8:bc:
                    d1:8c:93:28:54:92:74:fc:aa:6b:6e:cc:18:f9:a9:
                    bf:70:4a:a3:17:fc:00:f2:71:dc:03:db:88:c7:be:
                    1d:41:ea:79:ed:44:dd:8f:ee:d5:83:43:4c:95:cc:
                    99:6a:52:55:ef:e8:ac:8c:7e:70:bd:05:1c:e6:ba:
                    cd:7e:eb:e7:c1:44:c1:86:04:e2:7e:f2:65:ee:f3:
                    fb:9e:0d:bf:a5:8e:11:97:8c:8d:f0:f1:2f:67:53:
                    52:fd:a6:04:c7:8e:05:79:91:a6:e0:a0:ae:cf:16:
                    9f:20:fd:16:30:76:e3:b2:ee:4b:9d:57:19:fc:08:
                    f4:36:67:ea:82:1d:3b:a6:5f:16:72:c2:a3:be:ac:
                    53:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                54:1E:7F:F8:59:CF:98:A3:0B:01:39:E2:23:3C:85:7F:21:11:1A:39
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/VB5_-FnPmKMLATniIzyFfyERGjk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:e200:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:84:c9:21:5a:ee:ce:44:48:4b:7e:60:4d:ea:5e:cb:d9:0b:
         38:e7:77:9c:fe:09:ec:50:24:95:2e:cd:98:7a:33:69:85:8c:
         49:1a:dd:08:56:4e:05:41:b0:bd:75:d7:9f:9d:92:8e:33:66:
         38:db:96:19:cb:fd:7a:53:4b:28:90:f7:62:5d:1b:af:cf:e2:
         bf:b2:c1:a4:e8:64:d6:1d:82:62:74:ed:30:90:dd:12:2a:91:
         69:d8:55:d6:fc:6c:11:41:28:f5:be:05:dc:64:de:02:47:d5:
         14:a3:5e:8d:31:f4:dc:54:17:d0:ef:c2:db:7f:37:0d:26:bc:
         d0:3a:4e:bf:15:01:db:06:14:38:80:7f:7e:3b:2d:ab:a6:ed:
         3d:12:af:31:36:cb:27:e4:67:10:2f:b4:b9:86:35:eb:02:f5:
         3a:cd:c4:93:3a:79:a3:3c:06:39:71:0d:23:5e:fd:4a:d4:1a:
         d2:db:d9:67:23:1b:10:cb:03:8e:b3:6d:eb:af:54:7c:db:4c:
         6d:38:53:63:7d:e0:ec:df:22:8f:8d:b0:20:49:3e:39:65:27:
         f7:fa:cc:91:cd:fd:6b:26:ac:b1:f3:b4:1f:48:d7:44:d5:d5:
         db:09:10:85:b3:cb:0e:17:27:75:d9:43:3c:93:c3:67:0f:21:
         58:88:5f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:51:58 2021 by LibreSSL & rpki-client.