Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/v12SkHgDlvpg0Cy8Uu9ryYG03QM.roa (download)

Subject key identifier:   BF:5D:92:90:78:03:96:FA:60:D0:2C:BC:52:EF:6B:C9:81:B4:DD:03 
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
asID:                     AS0
Prefixes:
    1: 195.42.144.0/23 (max: 32)
    2: 2001:7f8:43::/48 (max: 128)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/v12SkHgDlvpg0Cy8Uu9ryYG03QM.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867366978 (0x33b2f842)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: Jan  1 02:52:35 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=bf5d9290780396fa60d02cbc52ef6bc981b4dd03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d2:f1:ae:be:2a:8c:06:fc:30:68:e6:91:2d:
                    a4:38:43:7c:f6:c0:fc:1e:02:b5:31:aa:29:fb:ef:
                    29:f1:2a:4b:1e:04:8f:e8:22:55:55:d6:1e:9e:c1:
                    ad:0e:0f:9a:77:1f:97:98:c4:b7:fc:72:6d:7b:0a:
                    f5:ff:e0:58:1d:eb:97:fb:f5:67:55:c2:56:dc:da:
                    6b:ad:d5:54:ce:e9:25:1e:59:8a:ce:22:a2:ff:b9:
                    c2:d4:9e:f5:91:62:3c:a3:59:b4:d3:1d:f7:a9:ae:
                    30:0a:12:dc:f2:8d:36:a6:fe:20:cb:e3:7c:87:08:
                    54:b4:39:a6:18:02:35:da:a6:d8:c2:fa:a5:e8:7f:
                    fc:44:69:7a:30:5b:91:67:33:75:ac:87:f5:e0:02:
                    12:68:53:68:2e:e4:7c:ba:cf:ed:4c:11:82:4a:4f:
                    ee:70:3c:bd:f2:a3:39:74:9d:3f:98:ee:e9:16:7f:
                    e6:fe:e4:c6:21:25:7e:0d:e6:d2:39:ae:47:af:97:
                    53:91:98:54:29:bc:70:87:0e:e8:47:bc:fb:92:d5:
                    ca:0c:ab:36:31:44:ba:75:00:d1:51:c4:4b:32:2b:
                    aa:52:94:12:a4:19:44:1e:04:e4:26:18:74:7a:71:
                    76:7d:85:e8:f0:57:b3:58:04:72:f4:11:2e:84:d9:
                    fe:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BF:5D:92:90:78:03:96:FA:60:D0:2C:BC:52:EF:6B:C9:81:B4:DD:03
            X509v3 Authority Key Identifier: 
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/v12SkHgDlvpg0Cy8Uu9ryYG03QM.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....*.0.....0.... ....C
    Signature Algorithm: sha256WithRSAEncryption
         82:13:d4:69:9f:6f:65:31:db:02:8a:5d:88:06:4d:ff:80:e3:
         1b:bb:c6:3b:2a:a2:e4:38:d5:91:e1:21:cc:79:3d:5a:99:ab:
         3c:9a:9d:c1:b2:57:40:97:6a:bb:84:50:8d:b4:3f:20:21:6f:
         c9:29:2b:b8:3e:e2:6a:bc:3e:75:c1:b4:50:27:60:21:97:41:
         e3:3d:c7:91:ec:08:ff:29:9e:2d:69:09:af:ef:2f:09:54:be:
         d8:95:48:3f:8d:53:2e:3b:7a:11:b1:c4:78:79:c7:f9:20:b7:
         16:1c:ec:c2:5b:6a:b8:8e:cf:df:4c:e6:c2:03:46:9e:dd:bc:
         98:7b:be:58:66:6f:4e:03:4c:bd:c3:9d:57:fd:cf:26:3a:ad:
         db:8e:15:5f:85:50:db:d3:2e:d2:3c:0b:20:a5:c5:7b:fd:75:
         8e:5f:9c:3b:b7:32:28:92:90:24:cc:0e:ed:0d:96:08:54:ae:
         9a:b9:da:b0:18:a2:de:a9:ec:bd:9f:fd:93:44:90:e3:62:ca:
         03:28:9a:d5:ce:ac:e1:b1:d4:dd:43:c2:dc:79:55:75:b2:32:
         d5:b7:53:41:67:90:8c:da:a7:59:ec:16:56:ce:c4:89:7a:b7:
         f7:b0:52:d9:e6:cc:be:be:e9:40:dc:6e:29:68:a5:3e:c4:09:
         d6:9b:3d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jun 12 09:29:30 2021 by LibreSSL & rpki-client.