Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/cd/9f8fbe-b2e8-472d-9ebc-0b9885863ebf/1/H4FD_RpaJuCzLm5DOnzLvmZ48so.roa (download)

Subject key identifier:   1F:81:43:FD:1A:5A:26:E0:B3:2E:6E:43:3A:7C:CB:BE:66:78:F2:CA 
Authority key identifier: 18:F4:EE:88:58:4D:6D:FD:9E:3A:A9:BC:20:1C:50:F4:4E:35:3D:9C
asID:                     AS6939
Prefixes:
    1: 2001:678:a90::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/cd/9f8fbe-b2e8-472d-9ebc-0b9885863ebf/1/H4FD_RpaJuCzLm5DOnzLvmZ48so.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85062591 (0x511f3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f4ee88584d6dfd9e3aa9bc201c50f44e353d9c
        Validity
            Not Before: Jan  1 03:40:37 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=1f8143fd1a5a26e0b32e6e433a7ccbbe6678f2ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c4:a1:c8:d0:da:ae:51:59:78:66:29:99:13:
                    3b:e3:08:68:b6:d4:0a:cf:3f:0b:b1:55:5d:8a:de:
                    4b:0f:c7:60:c3:c2:fd:bf:0d:5f:72:e8:c4:1e:01:
                    79:4f:02:68:b8:1b:53:ea:79:97:ba:ab:17:4f:fa:
                    b2:5d:d0:f5:e1:f5:b3:bc:fe:3b:7b:8c:cd:72:78:
                    55:7d:e2:bf:b3:4a:47:ef:2f:26:e9:ac:f0:9b:0b:
                    b2:0b:da:37:60:d4:26:bf:66:12:8c:c2:27:90:65:
                    75:7a:74:10:7b:3f:14:da:4a:57:09:6e:9b:ab:91:
                    40:10:aa:f8:09:e0:c0:93:f5:dc:60:39:e8:8f:35:
                    bc:89:2b:af:71:98:be:d2:a5:b5:da:4a:bd:39:20:
                    b2:37:49:14:a9:14:31:8e:19:e3:7e:77:92:5c:92:
                    75:9c:bb:25:62:95:a4:91:34:ae:b8:99:a2:fd:c9:
                    55:5e:f6:e1:bc:bd:ea:d4:0a:6c:05:a8:9a:e5:58:
                    71:54:9d:0b:40:65:f0:37:b3:8b:f7:55:99:94:4c:
                    1d:da:50:55:3e:87:d9:e2:82:0b:21:5a:27:1d:84:
                    67:66:0c:cc:ec:67:77:f1:b4:9f:77:a6:72:e3:11:
                    f7:99:86:08:69:c4:5e:2d:27:f7:d8:83:d9:91:f8:
                    0d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1F:81:43:FD:1A:5A:26:E0:B3:2E:6E:43:3A:7C:CB:BE:66:78:F2:CA
            X509v3 Authority Key Identifier: 
                keyid:18:F4:EE:88:58:4D:6D:FD:9E:3A:A9:BC:20:1C:50:F4:4E:35:3D:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPTuiFhNbf2eOqm8IBxQ9E41PZw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9f8fbe-b2e8-472d-9ebc-0b9885863ebf/1/H4FD_RpaJuCzLm5DOnzLvmZ48so.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9f8fbe-b2e8-472d-9ebc-0b9885863ebf/1/GPTuiFhNbf2eOqm8IBxQ9E41PZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:a90::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:38:f9:b2:6e:6d:ab:45:0a:08:73:cc:25:29:c7:19:cd:49:
         f9:7b:0d:8e:26:6a:6d:c8:9f:cc:5c:d2:41:47:f3:8e:7e:f3:
         31:fe:c7:01:88:f7:84:cf:7a:69:81:19:62:5d:d5:73:8e:2e:
         31:47:9e:66:b3:3d:83:77:29:82:3a:5c:3c:61:8a:6c:c3:42:
         32:8f:e4:ab:37:77:ef:86:74:54:ab:36:63:89:67:6d:ee:c5:
         49:c3:f3:62:c8:b3:70:d3:84:8c:f1:92:8b:ba:cb:02:22:a1:
         9f:8e:f1:62:5a:b7:19:14:a2:c6:d9:f7:a2:c7:42:72:62:eb:
         92:81:60:73:f3:45:0c:ee:de:9f:e7:1f:a5:69:77:53:54:18:
         72:02:f3:2a:01:21:fe:7a:d3:91:66:c8:b1:7f:66:79:d9:bb:
         54:ac:4f:e4:d3:e7:0e:41:75:2d:55:e5:f0:ad:ca:f3:f4:6e:
         58:c0:ad:f8:b4:ef:21:4e:bc:ce:36:95:3c:4c:df:97:c4:ee:
         c5:f1:42:3e:54:fc:2b:6c:d2:a6:59:af:47:4a:e9:0e:7f:b9:
         3d:25:ee:7d:8f:c8:0d:34:6c:31:f7:75:aa:48:d2:a5:51:4a:
         34:e3:16:6d:7d:06:99:b8:a4:bd:06:2e:3b:a4:32:2e:da:ab:
         ed:bd:58:71
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBRHzvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OGY0ZWU4ODU4NGQ2ZGZkOWUzYWE5YmMyMDFjNTBmNDRlMzUzZDljMB4XDTIxMDEw
MTAzNDAzN1oXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWY4MTQzZmQxYTVh
MjZlMGIzMmU2ZTQzM2E3Y2NiYmU2Njc4ZjJjYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIvEocjQ2q5RWXhmKZkTO+MIaLbUCs8/C7FVXYreSw/HYMPC
/b8NX3LoxB4BeU8CaLgbU+p5l7qrF0/6sl3Q9eH1s7z+O3uMzXJ4VX3iv7NKR+8v
Jums8JsLsgvaN2DUJr9mEozCJ5BldXp0EHs/FNpKVwlum6uRQBCq+AngwJP13GA5
6I81vIkrr3GYvtKltdpKvTkgsjdJFKkUMY4Z4353klySdZy7JWKVpJE0rriZov3J
VV724by96tQKbAWomuVYcVSdC0Bl8Dezi/dVmZRMHdpQVT6H2eKCCyFaJx2EZ2YM
zOxnd/G0n3emcuMR95mGCGnEXi0n99iD2ZH4DSsCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQfgUP9Glom4LMubkM6fMu+ZnjyyjAfBgNVHSMEGDAWgBQY9O6IWE1t/Z46
qbwgHFD0TjU9nDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dQVHVpRmhOYmYyZU9xbThJQnhROUU0MVBady5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2QvOWY4ZmJlLWIyZTgtNDcyZC05ZWJjLTBiOTg4NTg2M2ViZi8x
L0g0RkRfUnBhSnVDekxtNURPbnpMdm1aNDhzby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Qv
OWY4ZmJlLWIyZTgtNDcyZC05ZWJjLTBiOTg4NTg2M2ViZi8xL0dQVHVpRmhOYmYy
ZU9xbThJQnhROUU0MVBady5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngKkDANBgkqhkiG9w0BAQsF
AAOCAQEAQzj5sm5tq0UKCHPMJSnHGc1J+XsNjiZqbcifzFzSQUfzjn7zMf7HAYj3
hM96aYEZYl3Vc44uMUeeZrM9g3cpgjpcPGGKbMNCMo/kqzd374Z0VKs2Y4lnbe7F
ScPzYsizcNOEjPGSi7rLAiKhn47xYlq3GRSixtn3osdCcmLrkoFgc/NFDO7en+cf
pWl3U1QYcgLzKgEh/nrTkWbIsX9medm7VKxP5NPnDkF1LVXl8K3K8/RuWMCt+LTv
IU68zjaVPEzfl8TuxfFCPlT8K2zSplmvR0rpDn+5PSXufY/IDTRsMfd1qkjSpVFK
NOMWbX0GmbikvQYuO6QyLtqr7b1YcQ==
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:03:58 2021 by LibreSSL & rpki-client.