Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d9/7ef22f-d506-4fc7-a435-e3b48b5f6245/1/QYQIntVi-ZFokG-FVkw6ZmZ70_o.roa (download)

Subject key identifier:   41:84:08:9E:D5:62:F9:91:68:90:6F:85:56:4C:3A:66:66:7B:D3:FA 
Authority key identifier: 8B:19:50:2F:B4:FC:9D:E7:93:45:37:A6:5E:4E:F0:6C:A3:F3:92:CB
asID:                     AS8283
Prefixes:
    1: 2001:67c:2ba8::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d9/7ef22f-d506-4fc7-a435-e3b48b5f6245/1/QYQIntVi-ZFokG-FVkw6ZmZ70_o.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33736638 (0x202c7be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b19502fb4fc9de7934537a65e4ef06ca3f392cb
        Validity
            Not Before: Mar 14 10:01:55 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=4184089ed562f99168906f85564c3a66667bd3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1d:e8:04:bd:76:ee:ad:7b:96:4f:de:29:d1:
                    48:bd:66:44:26:bd:f5:9d:8f:28:de:69:22:c2:c0:
                    54:64:65:33:d5:b2:33:10:e7:04:5f:4c:cf:ea:72:
                    d0:5c:88:24:5c:fb:c6:ed:90:de:a3:82:3a:68:c7:
                    ae:6d:91:00:d3:22:c1:00:c8:54:15:80:68:95:61:
                    ae:d1:16:c1:b9:9a:82:aa:a2:bf:e4:43:80:16:9f:
                    6d:58:a0:e7:e6:cf:bd:b6:af:ca:0e:0f:ec:8b:1f:
                    02:77:3b:56:b5:e9:d6:97:95:f5:96:bc:7f:e9:73:
                    9f:4d:b6:1f:0f:e7:40:d5:ca:97:0f:de:89:54:8e:
                    d2:f5:ce:c5:f7:4d:18:79:be:b4:13:b3:ff:74:19:
                    e5:df:d9:a4:04:ba:42:2a:e3:e8:fd:ff:ab:fa:0b:
                    5d:b1:91:c2:5b:92:3d:54:17:7b:48:1b:a9:ad:81:
                    5c:b8:14:55:25:af:02:52:2f:99:fb:a8:0f:46:94:
                    5f:50:bd:da:5c:95:00:83:4d:49:74:7c:35:d2:3b:
                    4f:9d:70:24:a3:f4:9c:25:78:13:35:69:47:ea:03:
                    be:2d:29:8e:8b:a8:e2:39:f4:74:c8:f1:20:fb:0b:
                    85:7a:f0:f7:eb:32:1f:b3:0e:2e:3a:8e:4b:1c:4e:
                    4f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                41:84:08:9E:D5:62:F9:91:68:90:6F:85:56:4C:3A:66:66:7B:D3:FA
            X509v3 Authority Key Identifier: 
                keyid:8B:19:50:2F:B4:FC:9D:E7:93:45:37:A6:5E:4E:F0:6C:A3:F3:92:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixlQL7T8neeTRTemXk7wbKPzkss.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7ef22f-d506-4fc7-a435-e3b48b5f6245/1/QYQIntVi-ZFokG-FVkw6ZmZ70_o.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7ef22f-d506-4fc7-a435-e3b48b5f6245/1/ixlQL7T8neeTRTemXk7wbKPzkss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.... ..|+.
    Signature Algorithm: sha256WithRSAEncryption
         09:93:7f:1d:32:48:05:f4:06:14:9b:4c:95:61:6f:ee:1e:00:
         3b:4a:b4:2a:e9:14:4e:61:72:d5:75:d4:14:b8:b8:7d:63:69:
         13:1c:1b:28:e4:65:b0:eb:6a:cb:3b:45:95:7a:07:1e:d0:c7:
         2c:c1:75:0f:61:fd:ec:29:65:70:19:e2:f2:5a:26:44:ce:2c:
         9e:9e:eb:1c:88:6f:9a:b3:f3:5f:86:28:fe:cc:cb:2e:50:e3:
         e9:e3:22:46:2d:8e:64:5e:2f:73:f3:28:d7:09:64:32:7b:ad:
         48:a1:dc:6d:ab:f5:a0:ad:1d:b4:24:c0:ce:d6:5e:e3:7d:65:
         b1:d8:b4:07:19:56:67:37:98:0e:2a:6a:96:d1:29:0b:6f:48:
         6e:90:1d:4a:7a:9c:a0:70:e8:8b:c4:1a:50:1c:ba:51:51:0a:
         4f:64:bf:ff:7c:a1:e8:0c:03:a9:82:17:65:52:97:36:bd:da:
         e5:11:5e:e7:e9:b8:fd:e5:43:f8:6e:87:cf:c2:53:8b:8e:d7:
         69:13:06:42:eb:42:26:4d:3d:0e:b1:81:f6:48:6b:e2:42:43:
         a7:89:ee:b1:99:74:bc:1d:f8:7b:8e:96:6b:49:42:51:fd:fb:
         3e:45:00:97:7c:00:68:0b:d3:bc:b1:96:67:ba:3b:fa:7f:75:
         02:38:2d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue May 18 07:37:56 2021 by LibreSSL & rpki-client.