Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/WRCtkzBYB_aVzThDSc9xutgiFfY.roa (download)

Subject key identifier:   59:10:AD:93:30:58:07:F6:95:CD:38:43:49:CF:71:BA:D8:22:15:F6 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS133295
Prefixes:
    1: 2a06:7a02::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/WRCtkzBYB_aVzThDSc9xutgiFfY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262762986 (0xfa971ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 06:55:07 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5910ad93305807f695cd384349cf71bad82215f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0e:77:ce:74:e3:80:3f:96:3c:b7:1e:74:2c:
                    31:c0:b5:1f:20:f2:27:ab:34:71:9f:fd:28:67:97:
                    6e:e7:2c:2c:a0:15:c2:00:bb:bc:de:22:16:eb:97:
                    aa:23:be:50:cc:09:f2:3c:b7:49:41:1d:bc:ae:82:
                    73:1b:08:46:8e:a7:2d:17:4c:f1:bf:a4:f8:87:8c:
                    ef:9b:06:4f:70:26:f3:bf:de:04:cb:3e:70:18:51:
                    0f:4f:38:d0:0f:6b:b4:56:84:4e:db:9b:e3:71:3e:
                    9b:23:a8:86:50:00:cf:d3:48:55:8a:b3:87:61:20:
                    95:be:34:37:9a:8d:ad:44:ec:64:43:ef:74:c0:29:
                    e1:81:77:43:60:5d:2b:79:ab:13:09:61:e0:55:95:
                    75:e2:47:ce:43:0e:4e:c7:a4:19:60:4d:d6:4e:c6:
                    df:b2:c3:06:69:b3:fb:b1:17:63:3c:5a:58:4b:57:
                    d7:67:c1:e6:79:52:0e:aa:3a:5e:0c:db:23:20:f9:
                    90:2c:25:a6:30:60:9c:e6:64:e8:c2:7f:42:0f:a6:
                    05:73:b0:d8:e4:34:58:39:1c:ba:60:47:d3:37:b2:
                    c6:e3:62:cd:30:cf:3b:fe:e9:2e:ed:57:b8:8d:1b:
                    f5:80:39:d6:38:5b:b5:16:db:1b:7c:d3:c0:80:6f:
                    ad:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                59:10:AD:93:30:58:07:F6:95:CD:38:43:49:CF:71:BA:D8:22:15:F6
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/WRCtkzBYB_aVzThDSc9xutgiFfY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....*.z...
    Signature Algorithm: sha256WithRSAEncryption
         86:52:49:4a:c7:c0:43:7c:fa:8b:eb:fe:41:4a:b7:0f:a3:c7:
         8a:96:1b:23:85:17:9b:46:35:e4:29:7f:97:43:6b:90:03:7e:
         86:a5:49:d2:56:b8:74:41:88:fa:8a:03:de:ef:54:79:7a:ca:
         dc:97:93:15:64:e2:54:10:a8:2b:8c:cf:d3:56:8e:c3:aa:8b:
         27:06:35:b9:bc:9b:d9:af:9d:5e:6f:5c:1b:83:9a:8a:96:a5:
         35:8b:d5:f6:8e:2a:e1:76:aa:37:c7:4a:ff:e5:a5:71:15:2e:
         fd:f0:85:d6:8c:ea:12:4c:32:a5:da:84:fb:36:ea:04:30:48:
         11:9e:66:c3:63:b7:cf:cd:2e:1a:2f:ac:36:a1:cd:bb:d3:bc:
         5c:6d:07:e6:d6:dd:78:f4:77:0c:4a:2b:f0:19:22:53:30:72:
         ee:1c:45:2b:ae:11:e0:5f:d1:5c:ab:e0:f9:b0:85:c6:41:2e:
         ff:16:d5:f0:f0:c5:c4:7a:b2:91:44:49:c1:47:c8:4d:4e:d1:
         cf:5f:7d:82:dd:7a:fa:27:51:9b:2d:5e:d4:81:e7:32:5d:2b:
         54:47:7a:2d:1d:11:80:4e:fb:14:2b:37:64:37:20:89:02:a1:
         8e:f3:84:63:0a:ba:e2:2a:80:55:0e:38:6a:0e:b7:41:28:27:
         bf:1a:f2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Jul 23 09:39:22 2021 by LibreSSL & rpki-client.