Route Origin Authorization
Location: rpki.ripe.net/repository/DEFAULT/01/8a3f7e-cb3b-4a03-958c-43ba14f5d2fb/1/ON9VWwZSQgjehJgeHnePRTN7Baw.roa (download)

Subject key identifier:   38:DF:55:5B:06:52:42:08:DE:84:98:1E:1E:77:8F:45:33:7B:05:AC 
Authority key identifier: 47:F4:85:8F:D9:3F:95:A4:EA:37:D1:0D:FE:3B:52:DB:ED:5F:7E:DD
asID:                     AS206238
Prefixes:
    1: 45.95.64.0/22 (max: 24)
    2: 45.95.64.0/23 (max: 24)
    3: 45.95.66.0/23 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/01/8a3f7e-cb3b-4a03-958c-43ba14f5d2fb/1/ON9VWwZSQgjehJgeHnePRTN7Baw.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12675350 (0xc16916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47f4858fd93f95a4ea37d10dfe3b52dbed5f7edd
        Validity
            Not Before: Jan  1 01:49:50 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=38df555b06524208de84981e1e778f45337b05ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:44:14:66:1e:12:58:15:4c:e1:bd:32:87:36:
                    f9:4a:23:2f:1d:43:6c:3b:ed:88:0a:2e:60:aa:0e:
                    7b:25:b5:fc:06:26:23:5b:fd:08:88:97:80:ee:cb:
                    dd:a8:5a:75:3b:c6:eb:4e:c0:e6:22:5a:d2:12:81:
                    31:9b:17:e4:12:34:09:60:a1:e1:be:da:23:4f:6f:
                    f1:37:28:d0:76:e4:96:bc:db:72:f7:00:95:dd:11:
                    10:83:28:6d:03:e2:9b:dd:78:b5:b3:b0:1f:b2:6c:
                    60:29:f8:88:9d:55:49:5f:43:b2:4a:72:be:bc:26:
                    b1:4e:6c:57:b9:72:22:58:9a:78:fb:af:da:1b:44:
                    be:44:72:f1:57:07:eb:a7:79:84:92:80:d3:a1:45:
                    44:4f:6b:b4:77:eb:75:3e:d7:1d:6d:21:30:da:18:
                    50:e6:1f:e6:e5:eb:5b:f0:1b:a4:97:56:4b:a8:4c:
                    2d:a6:ef:73:68:53:f5:7c:9c:40:be:a8:ed:af:6b:
                    49:af:27:6e:91:76:ec:65:af:66:13:b3:d4:b8:58:
                    3a:21:2e:92:fd:76:7f:62:4c:e2:69:5b:7b:fc:fa:
                    08:f4:00:e1:78:df:12:ee:38:52:3a:ae:50:96:9d:
                    b5:11:00:de:14:6d:9f:dd:6d:30:70:4b:82:f7:81:
                    6a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                38:DF:55:5B:06:52:42:08:DE:84:98:1E:1E:77:8F:45:33:7B:05:AC
            X509v3 Authority Key Identifier: 
                keyid:47:F4:85:8F:D9:3F:95:A4:EA:37:D1:0D:FE:3B:52:DB:ED:5F:7E:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_SFj9k_laTqN9EN_jtS2-1fft0.cer

            Subject Information Access: 
                1.3.6.1.5.5.7.48.11 - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8a3f7e-cb3b-4a03-958c-43ba14f5d2fb/1/ON9VWwZSQgjehJgeHnePRTN7Baw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8a3f7e-cb3b-4a03-958c-43ba14f5d2fb/1/R_SFj9k_laTqN9EN_jtS2-1fft0.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0....-_@
    Signature Algorithm: sha256WithRSAEncryption
         01:7d:a6:15:c4:ba:50:6f:56:e6:43:12:75:a8:d4:81:84:d8:
         e8:bb:67:b1:ff:86:f4:d1:43:3f:d8:00:0e:99:04:cf:cb:c0:
         97:40:74:ab:e7:0c:70:6e:b7:ec:e4:48:7c:09:d8:8f:3f:02:
         bf:ad:fa:d9:b1:92:bf:54:2b:49:e5:67:29:3b:ec:b2:0e:53:
         39:df:5d:44:b1:b9:db:f7:de:04:89:2c:d1:2c:53:98:35:e1:
         a8:79:24:4a:5a:c9:87:55:03:7c:8e:de:1f:e0:da:00:37:30:
         ee:b5:23:86:d9:8f:12:63:44:a7:aa:3e:e1:45:54:09:96:d0:
         03:7a:20:b7:a9:c0:1f:b6:dc:7b:f1:18:6f:2c:6a:85:02:fe:
         f5:8d:0d:dc:f7:38:26:0c:f0:fe:dc:b4:8b:f0:d3:34:0f:cb:
         11:5d:c1:7f:27:8b:30:b0:f1:d6:1f:49:32:f2:51:ba:3d:7e:
         76:1e:ed:f7:fc:b2:56:20:9f:0d:16:12:58:b7:3f:a1:5e:ec:
         64:36:95:88:f0:f8:e6:a5:56:9f:98:0c:90:33:66:63:90:5c:
         65:12:8c:2e:54:c3:c4:2d:2a:4e:ea:aa:83:53:57:f8:d6:9a:
         db:38:65:76:e1:25:02:7e:77:40:84:ab:b7:ca:d0:e5:b0:c7:
         87:2b:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 03:57:34 2021 by LibreSSL & rpki-client.