Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/CB96xL2Y0E7YWDYtydmpXW363PQ.roa (download)

Subject key identifier:   08:1F:7A:C4:BD:98:D0:4E:D8:58:36:2D:C9:D9:A9:5D:6D:FA:DC:F4 
Authority key identifier: FF:F4:C9:5C:7B:C7:A8:A7:CB:9C:BB:73:19:C8:1B:0A:CA:A4:69:5E
asID:                     AS0
Prefixes:
    1: 2a06:8187:fb00::/40 (max: 40)
    2: 2a06:8187:fb20::/44 (max: 44)
    3: 2a06:8187:fb10::/44 (max: 44)
    4: 2a06:8187:fe0a::/48 (max: 48)
    5: 2a06:8180::/48 (max: 48)
    6: 2a06:8187:fd06::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/CB96xL2Y0E7YWDYtydmpXW363PQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44579452 (0x2a83a7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fff4c95c7bc7a8a7cb9cbb7319c81b0acaa4695e
        Validity
            Not Before: Mar  3 11:21:38 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=081f7ac4bd98d04ed858362dc9d9a95d6dfadcf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:4a:92:4b:88:91:ec:79:e8:ef:d7:ac:7f:
                    8b:c8:84:93:4e:3a:f3:e2:52:99:fd:6a:d6:38:75:
                    41:69:c5:78:a5:7e:47:e7:35:0c:76:74:b9:8c:f8:
                    c0:5d:31:e7:73:62:82:f2:82:a8:1d:ee:ce:b2:89:
                    07:65:3b:6b:3d:2d:b2:cd:98:34:94:ad:4d:19:b2:
                    1e:34:88:5b:5b:c1:82:08:53:cd:80:2f:65:af:61:
                    cd:c5:19:b5:73:36:45:ed:9e:e9:46:fb:74:1e:86:
                    c4:41:bb:27:af:0a:72:33:e3:6b:61:ba:f0:0f:31:
                    0e:0e:cb:8c:ce:be:e1:73:33:5b:f4:ba:4f:2c:75:
                    ff:cf:77:bb:9d:f1:35:3a:78:4c:7c:30:15:4d:2b:
                    b0:ee:0e:45:c5:26:1f:38:aa:88:02:ea:61:87:8c:
                    f7:25:8c:b0:97:af:ad:79:ab:6d:ae:64:93:b5:1e:
                    c0:b7:25:5c:81:39:d3:fc:eb:52:e6:6e:ab:84:db:
                    71:db:ee:cd:5f:6d:c5:db:49:9c:73:80:b5:6f:62:
                    ae:15:69:aa:84:4b:94:98:83:3b:cd:23:4c:31:c3:
                    ff:41:f8:66:c1:6f:4d:c2:c0:8f:d2:90:00:14:32:
                    85:6d:84:3a:37:9b:a2:ca:10:69:ba:7d:0b:10:22:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                08:1F:7A:C4:BD:98:D0:4E:D8:58:36:2D:C9:D9:A9:5D:6D:FA:DC:F4
            X509v3 Authority Key Identifier: 
                keyid:FF:F4:C9:5C:7B:C7:A8:A7:CB:9C:BB:73:19:C8:1B:0A:CA:A4:69:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__TJXHvHqKfLnLtzGcgbCsqkaV4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/CB96xL2Y0E7YWDYtydmpXW363PQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/__TJXHvHqKfLnLtzGcgbCsqkaV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0+0)....0#...*........*.......*........*....

    Signature Algorithm: sha256WithRSAEncryption
         a2:f4:48:f1:50:91:f3:09:1c:fa:0e:45:63:ac:3a:63:e7:7d:
         3d:0c:ec:ff:1f:73:27:b2:0f:a7:f3:99:27:da:f3:8b:5a:4f:
         ab:df:29:79:9f:b2:d0:0a:49:f1:25:79:0e:4c:03:2a:f6:45:
         d0:32:74:72:35:99:9c:44:89:20:c4:b0:38:f0:9e:f5:3d:43:
         17:cb:1e:11:d5:d7:64:55:eb:50:d4:1f:61:00:21:23:35:50:
         64:27:f1:a2:5b:fd:86:2c:6c:62:47:a5:2a:13:de:d5:3f:0c:
         78:d6:d7:17:54:ec:f5:3a:f5:b7:8f:e5:d6:12:33:bc:cc:c4:
         07:3d:e9:d3:2e:41:5c:6c:c1:04:cf:d9:7d:c8:db:77:f1:97:
         5e:19:f1:ac:82:cb:a3:43:dc:a3:31:54:4e:f1:46:b1:32:22:
         0f:3d:7c:43:5a:73:f4:22:b7:97:40:de:a7:3d:86:05:df:3b:
         d7:9a:d9:47:fd:cb:cb:2e:42:2d:c9:f9:3f:c1:02:f6:56:a4:
         2c:36:e5:e4:41:d8:b2:24:17:81:25:c1:53:f6:18:50:ba:1f:
         4c:38:70:82:aa:59:c3:a3:3f:a0:a2:f2:1f:6e:dd:11:75:ea:
         3f:de:3f:83:dd:01:58:1c:78:8c:cf:c8:b4:73:25:2d:0b:51:
         14:ab:e4:e7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIEAqg6fDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZmY0Yzk1YzdiYzdhOGE3Y2I5Y2JiNzMxOWM4MWIwYWNhYTQ2OTVlMB4XDTIxMDMw
MzExMjEzOFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDgxZjdhYzRiZDk4
ZDA0ZWQ4NTgzNjJkYzlkOWE5NWQ2ZGZhZGNmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKDhSpJLiJHseejv16x/i8iEk0468+JSmf1q1jh1QWnFeKV+
R+c1DHZ0uYz4wF0x53NigvKCqB3uzrKJB2U7az0tss2YNJStTRmyHjSIW1vBgghT
zYAvZa9hzcUZtXM2Re2e6Ub7dB6GxEG7J68KcjPja2G68A8xDg7LjM6+4XMzW/S6
Tyx1/893u53xNTp4THwwFU0rsO4ORcUmHziqiALqYYeM9yWMsJevrXmrba5kk7Ue
wLclXIE50/zrUuZuq4TbcdvuzV9txdtJnHOAtW9irhVpqoRLlJiDO80jTDHD/0H4
ZsFvTcLAj9KQABQyhW2EOjebosoQabp9CxAi3f0CAwEAAaOCAiYwggIiMB0GA1Ud
DgQWBBQIH3rEvZjQTthYNi3J2aldbfrc9DAfBgNVHSMEGDAWgBT/9Mlce8eop8uc
u3MZyBsKyqRpXjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19fVEpYSHZIcUtmTG5MdHpHY2diQ3Nxa2FWNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmIvN2M4Y2ExLTMxYTktNDJlMC04MGFlLTFlNmZiM2E3NmE2YS8x
L0NCOTZ4TDJZMEU3WVdEWXR5ZG1wWFczNjNQUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIv
N2M4Y2ExLTMxYTktNDJlMC04MGFlLTFlNmZiM2E3NmE2YS8xL19fVEpYSHZIcUtm
TG5MdHpHY2diQ3Nxa2FWNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswKQQCAAIwIwMHACoGgYAAAAMGACoGgYf7AwcAKgaB
h/0GAwcAKgaBh/4KMA0GCSqGSIb3DQEBCwUAA4IBAQCi9EjxUJHzCRz6DkVjrDpj
5309DOz/H3Mnsg+n85kn2vOLWk+r3yl5n7LQCknxJXkOTAMq9kXQMnRyNZmcRIkg
xLA48J71PUMXyx4R1ddkVetQ1B9hACEjNVBkJ/GiW/2GLGxiR6UqE97VPwx41tcX
VOz1OvW3j+XWEjO8zMQHPenTLkFcbMEEz9l9yNt38ZdeGfGsgsujQ9yjMVRO8Uax
MiIPPXxDWnP0IreXQN6nPYYF3zvXmtlH/cvLLkItyfk/wQL2VqQsNuXkQdiyJBeB
JcFT9hhQuh9MOHCCqlnDoz+govIfbt0Rdeo/3j+D3QFYHHiMz8i0cyUtC1EUq+Tn
-----END CERTIFICATE-----

Generated at Sat Jun 12 09:37:34 2021 by LibreSSL & rpki-client.