Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/o8G0eWZ7qn33CT1KHg42m9v4ovY.roa (download)

Subject key identifier:   A3:C1:B4:79:66:7B:AA:7D:F7:09:3D:4A:1E:0E:36:9B:DB:F8:A2:F6 
Authority key identifier: 81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12
asID:                     AS999999
Prefixes:
    1: 2001:678:d44:2::/64 maxlen: 64
    2: 2001:678:d44:100::/64 maxlen: 64

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/o8G0eWZ7qn33CT1KHg42m9v4ovY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90909230 (0x56b2a2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81413f5afc6443e8d2343518ac0b19fd30ba3c12
        Validity
            Not Before: Jan  1 03:54:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a3c1b479667baa7df7093d4a1e0e369bdbf8a2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f2:81:9a:2f:be:b6:22:96:5d:1e:b2:6b:a8:
                    78:8f:b3:63:86:41:2a:b3:e5:14:7b:a1:c5:79:1a:
                    8c:c9:2a:5f:46:f9:70:34:c6:70:35:35:14:1b:91:
                    05:5c:da:74:eb:77:7f:58:eb:03:73:61:e3:97:cc:
                    96:dd:c7:4f:59:24:73:f3:79:d9:7d:e4:2d:e4:98:
                    55:b3:b3:20:93:e1:c9:c7:90:f3:8f:40:96:42:34:
                    28:2e:b9:5a:b2:96:92:e8:fc:04:35:7b:fd:0c:93:
                    d6:f6:55:f6:24:d4:19:d3:ce:20:15:1c:0e:1a:7d:
                    3e:cc:67:42:55:8a:6e:93:d5:a9:0b:55:d7:b8:a0:
                    d4:80:78:18:a8:ba:05:7c:49:2c:55:b6:b2:3e:f1:
                    e6:6f:af:62:b2:a6:01:42:45:a1:e2:d6:72:64:0e:
                    1c:6b:a5:15:49:8f:60:22:a5:1c:a6:3d:e6:dd:28:
                    b9:76:e4:ee:c9:92:2a:6a:ba:8e:84:37:d2:88:9a:
                    af:31:a2:0e:97:ce:62:de:7a:e6:41:e5:cf:ad:36:
                    9f:80:11:ae:a4:92:5f:f2:66:f9:36:ef:81:9c:65:
                    9a:a2:19:15:53:a8:22:ae:0e:24:c0:f8:30:99:02:
                    95:39:d7:83:58:19:85:0c:91:0e:8e:90:c5:d2:47:
                    40:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A3:C1:B4:79:66:7B:AA:7D:F7:09:3D:4A:1E:0E:36:9B:DB:F8:A2:F6
            X509v3 Authority Key Identifier: 
                keyid:81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/o8G0eWZ7qn33CT1KHg42m9v4ovY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d44:2::/64
                  2001:678:d44:100::/64

    Signature Algorithm: sha256WithRSAEncryption
         ab:08:8b:54:d9:0c:2b:ac:46:41:59:f4:3c:ed:d8:1f:c0:cc:
         2e:a1:f4:c0:23:13:4c:a9:30:7a:c5:fe:f9:84:99:5e:31:0b:
         5a:2b:3a:1e:76:27:8f:00:9e:70:2e:89:76:11:b3:74:87:c4:
         9a:44:5c:6a:ea:ca:95:f1:e3:f9:40:6e:08:37:26:41:13:0a:
         a1:e2:04:60:48:6f:f9:57:97:d1:30:50:a0:9e:bd:af:d1:4a:
         22:2c:87:90:f8:41:11:36:11:5b:6d:11:72:e1:e8:a8:38:26:
         22:cf:0e:68:9d:80:6e:99:27:eb:aa:76:f0:e4:c2:fa:a6:1b:
         98:3a:90:6d:6b:46:e9:00:9d:13:fc:08:4a:2f:2e:fb:b8:95:
         80:5d:6f:9b:7f:75:82:1b:89:c2:66:44:00:a5:4e:7b:88:74:
         14:d3:32:5c:49:00:bc:0a:2e:5b:41:e1:ff:c5:69:81:ab:68:
         ae:27:c6:5e:e7:f2:b7:d4:19:b9:30:ab:e5:b5:2b:a0:9b:16:
         26:48:a6:ea:36:85:70:5a:5e:2c:77:74:63:7b:98:82:1a:a3:
         2d:2c:15:69:8e:0e:41:36:c3:26:50:11:58:4f:cc:8a:e3:74:
         28:a1:16:00:50:99:3c:d7:31:02:7d:31:17:75:81:97:dc:6a:
         ef:13:23:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 06:29:43 2022 by LibreSSL & rpki-client.