Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/ce/39f602-d80c-4a0f-99cd-48d103be306d/1/cKBbc9FBPFNyD8PSsuKx16BLFnc.roa (download)

Subject key identifier:   70:A0:5B:73:D1:41:3C:53:72:0F:C3:D2:B2:E2:B1:D7:A0:4B:16:77 
Authority key identifier: 6F:D4:AC:45:01:0E:11:F7:31:DE:BD:CC:13:F8:EA:B4:22:87:F5:3F
asID:                     AS174
Prefixes:
    1: 2a0e:2d44::/32 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/ce/39f602-d80c-4a0f-99cd-48d103be306d/1/cKBbc9FBPFNyD8PSsuKx16BLFnc.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72663081 (0x454c029)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fd4ac45010e11f731debdcc13f8eab42287f53f
        Validity
            Not Before: May 15 10:01:01 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=70a05b73d1413c53720fc3d2b2e2b1d7a04b1677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:18:10:d7:84:4a:e5:e6:96:b9:ba:71:ab:d1:
                    4d:4b:db:42:7a:54:e7:a3:de:da:e3:26:3f:c8:ac:
                    e1:f7:90:d7:50:8b:27:44:14:a5:90:15:a2:8d:a4:
                    89:ed:16:c5:cd:99:75:63:ab:5d:aa:f9:db:8c:d5:
                    46:38:25:b1:20:ee:25:05:91:a7:9f:b1:5c:87:6c:
                    5d:20:38:55:ac:9d:4b:d7:55:70:32:7c:ba:25:fa:
                    05:84:45:44:1c:f0:1a:51:19:1d:c9:89:d7:06:50:
                    f9:fe:0f:06:35:9d:f1:0b:b9:8a:02:a8:00:39:56:
                    dc:35:d1:02:c4:73:7e:09:f0:5d:6d:2f:10:a8:08:
                    47:f5:48:b3:1c:dc:ab:41:5b:a2:54:f4:2d:b5:b0:
                    37:15:50:db:54:63:1a:88:86:b1:a2:82:c6:fa:1a:
                    ae:58:58:0f:de:16:b2:80:35:b7:36:98:f8:29:1e:
                    3a:17:8a:5f:d4:79:2c:64:32:00:fa:d9:84:fc:0f:
                    45:5a:ef:f2:0d:86:a4:f5:4c:f4:0d:20:8b:e7:df:
                    b6:a9:b4:fa:2e:37:cc:10:00:43:53:37:53:54:12:
                    9c:38:ad:b2:51:6c:7c:26:8f:55:b3:c3:34:13:83:
                    cc:0b:1e:5b:2d:1d:33:25:09:eb:83:c9:5f:c0:4b:
                    da:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                70:A0:5B:73:D1:41:3C:53:72:0F:C3:D2:B2:E2:B1:D7:A0:4B:16:77
            X509v3 Authority Key Identifier: 
                keyid:6F:D4:AC:45:01:0E:11:F7:31:DE:BD:CC:13:F8:EA:B4:22:87:F5:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9SsRQEOEfcx3r3ME_jqtCKH9T8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39f602-d80c-4a0f-99cd-48d103be306d/1/cKBbc9FBPFNyD8PSsuKx16BLFnc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39f602-d80c-4a0f-99cd-48d103be306d/1/b9SsRQEOEfcx3r3ME_jqtCKH9T8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:2d44::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:cc:2a:82:8d:66:20:64:c1:4f:f2:fe:57:37:9b:3a:98:5c:
         62:2f:32:10:a9:67:7d:0c:1e:b7:8a:6f:fb:23:62:c6:bd:9b:
         f3:c5:7a:94:02:ac:12:df:1b:9b:57:38:3f:16:b4:67:8e:2e:
         b9:69:59:c7:23:9f:7b:55:a2:88:41:33:90:25:4b:25:4a:f1:
         8a:07:c4:9f:91:70:5e:91:ec:df:94:20:57:33:4e:2c:66:e5:
         9e:e5:05:6d:84:fb:46:f9:68:f3:0b:f5:23:3f:1a:10:c8:ab:
         1a:32:c6:7c:b3:d6:e5:de:07:72:95:7d:89:22:e2:45:9b:ad:
         31:8c:6c:dd:30:39:53:49:51:ed:2e:68:21:a4:8e:ff:a9:e4:
         1a:c5:24:6f:bb:ed:96:15:32:9c:7f:0c:a7:05:41:c1:49:8c:
         23:9d:22:7b:3d:91:fb:9a:d4:58:53:51:47:64:bf:d2:71:b8:
         bb:6d:00:10:b4:60:e9:ac:7a:40:8e:45:f4:16:19:f1:bf:ac:
         7b:96:78:2d:0b:18:68:8b:7e:ad:ba:f6:b1:7b:8a:dc:60:e0:
         11:89:62:5a:c5:42:35:2a:96:33:eb:00:d5:fa:ef:12:53:d6:
         64:3e:ef:3b:a6:d6:f2:7d:90:91:e0:66:11:da:d0:98:dd:81:
         8f:a6:f1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 12:11:40 2021 by LibreSSL & rpki-client.