Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/f6/0b9c3d-facb-42cb-b802-d6ce3dffa0e2/1/6IHZQ1fWonGdWBtc8Cxj-HuIwg0.roa (download)

Subject key identifier:   E8:81:D9:43:57:D6:A2:71:9D:58:1B:5C:F0:2C:63:F8:7B:88:C2:0D 
Authority key identifier: 77:FC:F0:0D:4F:CD:E7:E6:A0:65:D6:EC:F8:3D:25:11:B6:80:00:2E
asID:                     AS3356
Prefixes:
    1: 45.67.140.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/f6/0b9c3d-facb-42cb-b802-d6ce3dffa0e2/1/6IHZQ1fWonGdWBtc8Cxj-HuIwg0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47895852 (0x2dad52c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77fcf00d4fcde7e6a065d6ecf83d2511b680002e
        Validity
            Not Before: Jan  1 00:59:25 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e881d94357d6a2719d581b5cf02c63f87b88c20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:20:24:2f:73:7e:07:b0:11:2e:4e:c9:23:
                    bf:6a:db:40:87:02:a6:ef:50:e7:6e:51:9b:d0:e9:
                    d5:7a:58:04:d0:8b:88:eb:bc:61:86:1e:27:13:72:
                    13:b5:01:cc:d2:6e:ca:1a:02:92:cb:27:c1:0c:0a:
                    a3:db:2f:d7:2f:ef:b5:b8:d5:40:8b:a1:34:ed:c6:
                    0e:97:10:1c:30:3e:c4:a0:8e:cc:a1:18:cf:7b:62:
                    f5:c9:97:3b:92:79:a0:4e:10:fb:5c:4c:ba:3d:f5:
                    ee:99:cb:ec:b2:e2:23:34:33:85:63:0c:b4:14:a3:
                    8e:0f:fd:95:60:74:b6:60:8e:71:92:cf:d0:e9:e0:
                    65:2e:da:f4:79:0b:a1:b0:2a:4d:fc:4c:69:fb:7b:
                    6a:07:34:8f:49:15:42:1d:c9:cc:63:20:e2:5d:a5:
                    68:99:d0:8d:81:cb:34:2e:96:0c:5d:0a:90:fd:ab:
                    23:8a:51:05:ac:6b:38:5e:8d:88:b6:cd:c0:32:70:
                    e8:9e:85:8d:c8:a2:c3:4e:f1:eb:4e:9e:13:c2:20:
                    3b:39:8e:d7:50:5e:b9:a1:91:1f:75:f9:33:0e:e3:
                    15:92:2a:71:ae:4c:4d:ea:00:ab:f3:a6:0a:79:14:
                    89:7b:d8:a1:b8:95:76:e1:7f:e4:db:df:46:ec:22:
                    13:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E8:81:D9:43:57:D6:A2:71:9D:58:1B:5C:F0:2C:63:F8:7B:88:C2:0D
            X509v3 Authority Key Identifier: 
                keyid:77:FC:F0:0D:4F:CD:E7:E6:A0:65:D6:EC:F8:3D:25:11:B6:80:00:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_zwDU_N5-agZdbs-D0lEbaAAC4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0b9c3d-facb-42cb-b802-d6ce3dffa0e2/1/6IHZQ1fWonGdWBtc8Cxj-HuIwg0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0b9c3d-facb-42cb-b802-d6ce3dffa0e2/1/d_zwDU_N5-agZdbs-D0lEbaAAC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-C.
    Signature Algorithm: sha256WithRSAEncryption
         4d:84:94:42:2c:bc:ee:bc:f3:4d:cc:76:c2:3d:dc:c8:a9:69:
         0a:66:d9:cf:32:27:70:5f:b4:fc:17:a5:78:96:a3:57:7d:50:
         92:13:0f:4a:f3:8c:cd:26:88:84:b0:82:72:e8:54:a3:c5:f0:
         9c:5e:7f:62:4c:59:84:43:db:7a:9e:47:e0:98:fc:0b:c6:cc:
         d6:18:8e:d7:ab:1e:11:4c:4a:0f:58:f0:6a:73:6f:33:4a:52:
         a8:d4:a1:a7:d1:a5:e5:4e:ff:44:f1:73:14:22:a4:54:f4:5d:
         72:d1:72:63:32:9a:bc:84:fb:5a:83:82:54:e4:60:8f:ad:17:
         04:5e:30:cf:59:a0:d4:a7:62:94:5d:5c:0c:05:3f:1b:af:9f:
         e4:67:03:5d:a3:b1:ba:ec:c7:81:53:7f:f1:a5:95:3b:62:49:
         ee:2e:9d:bf:f0:ee:01:5c:50:03:22:a1:9c:76:96:62:20:70:
         d2:ef:fd:d5:48:f9:3c:42:b4:44:45:50:28:1b:5f:de:a0:d8:
         25:6b:80:26:ec:e7:cf:7d:31:fd:a2:cd:a2:cd:93:86:ef:e7:
         dc:d3:04:d8:aa:58:45:b9:c7:2b:ea:67:ab:a9:c7:50:b6:91:
         b8:62:35:21:91:aa:f0:78:68:e3:c3:8a:d3:7c:2c:01:78:55:
         ba:ed:90:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon May 10 09:42:17 2021 by LibreSSL & rpki-client.