Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/PRKkpPMmiuMYLoNXQKvM5TqzyOI.roa (download)

Subject key identifier:   3D:12:A4:A4:F3:26:8A:E3:18:2E:83:57:40:AB:CC:E5:3A:B3:C8:E2 
Authority key identifier: 81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12
asID:                     AS999999
Prefixes:
    1: 2001:678:d44:2::/64 (max: 64)
    2: 2001:678:d44:100::/64 (max: 64)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/PRKkpPMmiuMYLoNXQKvM5TqzyOI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41766467 (0x27d4e43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81413f5afc6443e8d2343518ac0b19fd30ba3c12
        Validity
            Not Before: Feb 13 15:58:57 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3d12a4a4f3268ae3182e835740abcce53ab3c8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:39:8b:55:9b:67:12:13:cc:e2:f5:e5:b4:c4:
                    3f:13:49:2e:6c:fa:fe:68:9a:c2:47:a6:6c:dc:e0:
                    2a:49:18:dd:ca:b0:55:8e:a0:f2:ea:3f:a2:0c:f0:
                    55:e4:97:40:fe:e4:97:6f:82:82:e2:f7:f2:ba:07:
                    56:c7:9c:f0:a0:89:ad:16:0b:b4:35:7e:b2:cd:47:
                    a2:02:b3:74:17:d5:3b:55:6a:10:38:51:ef:52:da:
                    6e:cd:36:50:36:64:31:26:6a:e3:aa:c0:4f:4c:ad:
                    fd:58:69:ab:7c:5a:8a:30:de:88:bc:5c:54:45:e8:
                    13:6e:ef:89:09:00:57:5a:42:1b:86:3c:e3:23:2a:
                    68:63:9d:01:ab:b4:aa:b4:de:b3:49:97:c7:7f:54:
                    77:65:50:e9:23:e2:ac:62:eb:69:24:cf:f3:37:79:
                    cb:27:32:5a:ad:12:ac:ab:16:9b:01:af:51:08:3b:
                    52:f7:08:9b:28:e1:0f:60:80:95:19:45:92:7f:64:
                    df:e3:d8:a8:1b:15:e8:af:9c:7e:32:23:19:e5:c5:
                    3d:a5:b6:66:18:25:f1:86:a9:5d:8c:9b:3a:d6:f6:
                    e4:7b:0f:d0:ec:c3:7a:b2:6b:0a:9b:1e:d1:98:fe:
                    9e:6c:a6:15:a6:2d:43:5a:f0:1a:b2:6f:ff:16:57:
                    e9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3D:12:A4:A4:F3:26:8A:E3:18:2E:83:57:40:AB:CC:E5:3A:B3:C8:E2
            X509v3 Authority Key Identifier: 
                keyid:81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/PRKkpPMmiuMYLoNXQKvM5TqzyOI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d44:2::/64
                  2001:678:d44:100::/64

    Signature Algorithm: sha256WithRSAEncryption
         28:e9:8b:58:de:85:c8:6b:75:37:98:d5:9b:42:a1:79:a0:d7:
         3a:20:00:4d:48:c7:e6:70:07:1c:65:27:49:6f:5b:e0:25:dc:
         c5:3c:ed:f1:b1:be:64:b6:95:66:b3:c7:8f:31:cd:db:98:74:
         f9:2f:e2:9b:f9:4f:ad:b3:5a:a7:18:50:c8:d5:5d:36:fe:c5:
         f8:70:c6:3d:ba:c7:08:68:dc:6f:ce:5f:07:fd:86:ca:aa:72:
         32:93:df:0f:78:52:67:c3:08:f0:6e:e8:b2:b8:2c:f9:2b:24:
         71:e0:46:53:94:2c:81:3a:02:a3:7f:c6:a4:1b:47:ed:c3:25:
         26:fa:6f:98:1d:49:0f:e1:29:5c:57:05:ca:51:03:d3:14:59:
         51:ca:1d:b8:23:8f:bf:25:89:63:8b:ac:db:e1:bd:64:23:99:
         cb:df:09:bf:bd:b5:94:74:68:c9:08:c3:a3:7d:c1:5f:68:e4:
         4f:73:24:9b:55:39:29:e1:af:e7:d5:cc:fd:db:a4:1f:8c:f1:
         3d:2b:39:8a:9a:57:05:da:cd:23:5b:a4:e0:02:f9:38:47:06:
         83:2d:64:69:e1:4f:de:9c:f8:0a:82:c8:a4:81:d2:bf:48:72:
         65:7b:44:88:45:20:14:06:ca:07:4e:1d:32:0f:00:c1:5e:70:
         3b:64:40:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:00:11 2021 by LibreSSL & rpki-client.