Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/c5/f555de-f0fa-418f-88db-c9518e44c958/1/JBD_wF4Becglo0Orxp4ntdioEnI.roa (download)

Subject key identifier:   24:10:FF:C0:5E:01:79:C8:25:A3:43:AB:C6:9E:27:B5:D8:A8:12:72 
Authority key identifier: B3:20:4F:A8:ED:C8:59:9B:B0:B6:44:F7:FD:89:E7:34:01:FB:B7:A9
asID:                     AS174
Prefixes:
    1: 2a0f:db82::/32 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/c5/f555de-f0fa-418f-88db-c9518e44c958/1/JBD_wF4Becglo0Orxp4ntdioEnI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91822679 (0x5791a57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3204fa8edc8599bb0b644f7fd89e73401fbb7a9
        Validity
            Not Before: May 19 11:53:02 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2410ffc05e0179c825a343abc69e27b5d8a81272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:85:43:00:70:14:eb:bb:2a:d5:da:60:fe:
                    25:38:56:fb:fa:54:55:8f:d4:4e:5b:66:26:82:8d:
                    69:3b:80:f4:17:b2:51:bb:e7:77:eb:68:75:63:49:
                    cb:bb:a9:e9:9c:44:b9:ee:bf:e3:a2:df:d5:8a:e8:
                    8a:7d:7e:56:c4:92:af:96:c9:35:8e:a0:ba:b3:7c:
                    8c:5e:40:0a:8b:fd:9f:e7:b4:c7:05:c8:0f:6d:64:
                    98:59:5a:e7:77:20:2a:a6:5e:fa:a4:cc:41:7a:83:
                    61:e5:e8:3f:e5:4a:08:c5:8e:6e:5f:11:8c:81:76:
                    f0:96:44:e2:c3:6a:95:e0:b3:0b:14:8b:98:2e:5d:
                    90:15:e2:9e:26:26:1e:3f:bf:59:e8:f9:d0:74:99:
                    7c:9c:76:31:47:1e:16:d0:2a:35:cc:0e:c5:60:97:
                    87:d9:1f:d9:93:08:2e:1e:c2:c9:cd:08:b1:79:28:
                    f1:59:dc:27:a6:4c:f4:11:5b:f0:f5:8c:dd:54:56:
                    d7:98:35:e9:1b:8a:c6:e1:e9:63:5a:f0:eb:12:f1:
                    46:5e:26:27:7f:85:76:d9:2e:ac:ff:9a:4a:a2:6a:
                    c4:1d:8b:7e:12:d1:70:93:4a:c2:5b:18:ea:e8:bf:
                    44:b2:9e:d9:2e:bb:13:d3:95:6a:ef:e5:e7:cb:a1:
                    22:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                24:10:FF:C0:5E:01:79:C8:25:A3:43:AB:C6:9E:27:B5:D8:A8:12:72
            X509v3 Authority Key Identifier: 
                keyid:B3:20:4F:A8:ED:C8:59:9B:B0:B6:44:F7:FD:89:E7:34:01:FB:B7:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syBPqO3IWZuwtkT3_YnnNAH7t6k.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f555de-f0fa-418f-88db-c9518e44c958/1/JBD_wF4Becglo0Orxp4ntdioEnI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f555de-f0fa-418f-88db-c9518e44c958/1/syBPqO3IWZuwtkT3_YnnNAH7t6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:db82::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:aa:fb:3a:e9:0a:88:44:6f:40:73:e8:49:43:5e:48:3d:a7:
         2e:20:da:23:50:b2:be:d4:01:db:81:89:99:8d:47:75:62:a0:
         c5:fe:3b:17:a5:f2:63:db:5c:32:d3:07:54:34:fc:f2:d0:db:
         fe:5b:b8:58:42:89:ac:4f:03:85:85:b8:67:ec:2b:23:35:88:
         12:dc:53:f8:a8:d6:43:0b:56:93:a2:b5:68:7a:08:78:d3:e8:
         d0:33:87:62:ed:7a:e7:3f:c2:d3:d7:14:d9:fc:95:ae:83:22:
         a1:f3:59:a8:ba:74:d8:08:02:1e:84:64:90:22:ba:10:1b:34:
         ab:0c:1e:94:9e:56:2b:a1:34:b1:1f:a7:5b:42:fb:81:55:9b:
         a2:e4:90:3f:b1:df:98:5a:f6:92:ef:6b:cd:42:47:8b:5f:2c:
         90:4e:e5:0e:b7:c5:a9:2f:ae:fa:3b:e5:26:b1:75:73:31:f3:
         28:1f:2e:fa:d8:38:13:fa:4f:e6:56:58:24:50:cc:5b:d0:a2:
         a7:6e:5f:b2:33:7c:4d:b3:3f:69:b1:e8:8d:3b:20:d1:75:93:
         d3:21:78:33:d3:31:0f:b3:45:88:64:4a:1f:6e:97:c0:54:73:
         54:bc:f4:66:fc:27:85:ea:9c:ef:1d:1b:e7:cf:91:c9:89:f5:
         00:78:87:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 12:10:47 2021 by LibreSSL & rpki-client.