Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/db/6c45b4-80fc-4c70-8320-8270150f4027/1/CsDoc8HxU6MQ12-aNB52R9-6uE0.roa (download)

Subject key identifier:   0A:C0:E8:73:C1:F1:53:A3:10:D7:6F:9A:34:1E:76:47:DF:BA:B8:4D 
Authority key identifier: E3:C5:95:DF:CE:E7:D3:1D:10:19:14:D9:CC:D3:4C:44:C4:2E:CD:EC
asID:                     AS174
Prefixes:
    1: 2a0e:947::/32 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/db/6c45b4-80fc-4c70-8320-8270150f4027/1/CsDoc8HxU6MQ12-aNB52R9-6uE0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99533095 (0x5eec127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3c595dfcee7d31d101914d9ccd34c44c42ecdec
        Validity
            Not Before: May 19 11:53:29 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0ac0e873c1f153a310d76f9a341e7647dfbab84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:5b:23:3b:0b:58:8b:41:99:95:93:ee:94:
                    10:0b:12:91:23:e7:da:e1:96:1a:de:da:0e:27:8d:
                    5b:6c:56:b9:23:5d:d1:df:af:50:d6:98:d2:a2:79:
                    32:2f:69:3c:46:83:21:e2:28:3d:35:4a:4c:63:a7:
                    39:cc:64:97:52:12:42:5a:09:0c:96:ed:28:30:28:
                    e6:89:75:0e:b9:ad:8d:b0:05:62:af:a5:c7:09:24:
                    7d:62:e2:18:2e:8f:bc:79:31:df:b9:92:39:b2:b3:
                    87:12:be:62:45:04:5f:b1:fc:f0:7e:52:b5:f1:07:
                    55:ab:2a:0f:82:1a:28:11:33:ac:0b:9a:9e:d0:23:
                    1e:a4:71:9c:7d:a8:ef:6d:e7:f7:3a:94:4a:64:52:
                    c4:b3:67:96:8a:f4:53:cd:3f:a8:0b:54:7d:3d:8d:
                    2e:25:d0:e5:6e:65:cb:88:68:2a:9b:0c:de:5e:0c:
                    9c:3b:12:b9:67:0a:66:34:c5:cb:5b:47:f8:9d:97:
                    f0:91:fa:5b:8e:7e:bd:4f:ac:64:ec:c0:10:35:e1:
                    2c:62:25:49:ab:20:9d:21:8a:9b:8b:4e:0b:20:b6:
                    ec:32:32:fc:28:6a:5c:56:20:96:b6:cf:ae:9f:44:
                    66:b6:85:4d:b4:f2:d5:88:e2:d0:fc:9c:8a:62:79:
                    c9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0A:C0:E8:73:C1:F1:53:A3:10:D7:6F:9A:34:1E:76:47:DF:BA:B8:4D
            X509v3 Authority Key Identifier: 
                keyid:E3:C5:95:DF:CE:E7:D3:1D:10:19:14:D9:CC:D3:4C:44:C4:2E:CD:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48WV387n0x0QGRTZzNNMRMQuzew.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6c45b4-80fc-4c70-8320-8270150f4027/1/CsDoc8HxU6MQ12-aNB52R9-6uE0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6c45b4-80fc-4c70-8320-8270150f4027/1/48WV387n0x0QGRTZzNNMRMQuzew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:947::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:db:2f:17:05:4e:7b:99:e6:65:a7:23:04:9f:4a:18:6e:af:
         3e:f5:95:e3:e6:66:a0:31:d5:3a:2c:60:fb:35:4b:2d:49:cb:
         fc:14:d4:0b:1a:3a:4b:84:b6:f2:a1:da:0f:32:2c:e5:67:cb:
         cc:be:3d:85:e8:39:17:e2:9a:6b:6d:96:1d:dc:1b:96:4e:b9:
         05:f2:1a:c7:68:c0:1a:1b:cb:9d:17:6c:ac:d6:d5:94:a6:3b:
         0f:5e:e7:43:ef:1f:e9:d7:8d:e3:9a:58:e4:1c:de:7f:51:8d:
         83:41:ac:e6:8a:2b:b2:d6:96:be:00:59:c1:97:bb:11:d7:7c:
         70:ef:a1:9d:1d:8e:5f:11:f4:cd:ae:00:4e:cd:55:72:43:df:
         ee:be:e2:f0:94:4d:bd:12:6c:3c:79:05:da:97:76:db:75:85:
         64:81:58:37:66:75:22:8a:52:f1:8c:c2:13:02:ae:ff:70:24:
         bf:20:0f:89:cd:4c:3c:d3:d3:9d:dd:e5:18:8e:d0:5b:b2:9e:
         fa:b8:29:c2:29:ad:9d:f4:ca:85:b0:24:bb:d7:a8:15:f6:07:
         f2:21:40:52:f4:07:c4:65:62:e2:9e:2a:75:6c:c1:16:49:fa:
         63:d6:ac:26:e6:0f:ca:21:32:2c:94:b9:12:e3:60:da:e9:15:
         55:96:5d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:08:04 2021 by LibreSSL & rpki-client.