Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/PkoAHIRxZIBme65j8dHgepe-4lc.roa (download)

Subject key identifier:   3E:4A:00:1C:84:71:64:80:66:7B:AE:63:F1:D1:E0:7A:97:BE:E2:57 
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
asID:                     AS399073
Prefixes:
    1: 2a09:ff00:100::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/PkoAHIRxZIBme65j8dHgepe-4lc.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111629478 (0x6a754a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Jun  1 09:25:28 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3e4a001c84716480667bae63f1d1e07a97bee257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c7:a8:62:27:3c:ac:81:96:a0:a9:28:1b:c6:
                    38:aa:d8:e3:b9:43:c3:c7:67:8b:b7:21:c6:1d:5e:
                    a1:0b:24:54:26:97:a7:2d:88:a0:db:4c:96:7d:5c:
                    57:ea:eb:c0:b2:cb:93:bc:d9:0b:0e:8f:c1:0f:70:
                    19:7d:7b:22:da:c3:24:58:93:8a:08:6e:53:a7:b4:
                    1d:a8:02:73:b4:08:2b:22:2d:6f:76:ff:83:c8:5e:
                    80:b4:ac:39:9d:b6:ff:07:aa:06:08:88:0a:dc:1e:
                    10:27:36:d7:97:65:63:ed:a6:61:5f:c8:df:aa:02:
                    d8:04:63:02:90:e1:9c:15:bd:33:8d:b2:b4:e7:11:
                    00:fc:1d:ed:69:11:54:ff:de:4b:86:5f:e5:f9:0a:
                    af:13:39:12:e7:aa:75:af:47:97:1c:42:3a:45:d0:
                    1b:b4:c6:e6:3b:93:b3:f8:49:7e:9a:35:f0:9b:16:
                    42:71:93:73:7c:e1:08:8b:01:08:f2:39:4c:1d:ba:
                    37:77:7a:7e:66:cb:e8:b8:b3:21:3a:c8:74:6d:ff:
                    f6:2d:36:76:e1:af:ad:c7:65:3b:07:35:70:f7:62:
                    ab:8d:aa:9c:07:d7:1f:36:2e:f3:b4:a8:d4:30:fb:
                    92:d2:a1:43:30:4a:d9:a1:dd:b0:1e:25:bc:47:57:
                    81:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3E:4A:00:1C:84:71:64:80:66:7B:AE:63:F1:D1:E0:7A:97:BE:E2:57
            X509v3 Authority Key Identifier: 
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/PkoAHIRxZIBme65j8dHgepe-4lc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:ff00:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:9b:d3:20:72:d0:90:54:e8:f5:0f:64:87:6c:39:f0:09:71:
         88:02:6f:bb:45:a7:b0:ce:9a:32:45:c0:52:a1:c1:eb:6b:74:
         49:8c:91:d7:d5:c2:fa:e6:a4:ca:81:25:60:9b:67:5b:3e:23:
         13:42:03:7e:3b:f1:f5:3a:9c:44:ac:02:91:da:50:95:42:b2:
         5d:1c:0d:17:01:a3:ff:68:54:51:35:9b:57:7f:6a:27:c4:0c:
         49:2a:a9:73:08:9e:90:3e:31:84:43:51:70:f7:b3:88:28:08:
         68:bc:15:30:99:b2:bd:28:55:ae:7d:df:ac:79:b4:c1:5f:6a:
         c6:ff:36:f4:23:c7:7a:98:15:88:98:18:f6:f3:35:30:81:98:
         8c:2b:c4:97:0b:c9:e4:84:42:18:dd:3a:f8:5e:9d:ee:d9:a3:
         95:4a:2d:f0:e4:85:e8:ce:c2:45:99:08:41:ea:fa:ec:7b:2b:
         ec:e9:54:0f:33:a0:c3:24:bd:fe:ea:2f:0d:75:aa:4f:52:75:
         8b:6f:0a:a9:f2:ef:e7:d5:32:26:16:61:06:31:06:09:9f:c0:
         f0:30:67:a2:91:70:ac:0a:88:73:77:79:c1:55:b5:69:21:b8:
         26:bc:83:24:ec:c4:1f:07:42:a8:22:01:04:58:fc:90:7a:ac:
         ba:3d:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:11:13 2021 by LibreSSL & rpki-client.