Route Origin Authorization
Location: rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/68NxN9wpRldeaq09IG_S_qDZYGw.roa (download)

Subject key identifier:   EB:C3:71:37:DC:29:46:57:5E:6A:AD:3D:20:6F:D2:FE:A0:D9:60:6C 
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
asID:                     AS36351
Prefixes:
    1: 95.142.117.0/24 (max: 24)
    2: 95.142.114.0/24 (max: 24)
    3: 185.54.231.0/24 (max: 24)
    4: 95.142.120.0/24 (max: 24)
    5: 95.142.126.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/68NxN9wpRldeaq09IG_S_qDZYGw.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113644277 (0x6c612f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
        Validity
            Not Before: Jan  1 07:57:16 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ebc37137dc2946575e6aad3d206fd2fea0d9606c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:3a:64:fc:49:e5:1d:6c:a5:76:d1:ea:f9:6f:
                    b5:1f:5e:30:44:24:5d:1e:ff:6d:d2:45:d1:87:53:
                    f2:04:70:e6:63:c6:71:be:13:f6:2a:6c:54:91:9f:
                    8c:28:3c:92:6e:61:0e:90:d4:92:2e:e5:1d:3c:f0:
                    e8:6b:9f:e4:e9:cf:cb:a1:e8:ee:cb:3f:60:02:fd:
                    1f:4f:82:c8:7c:ab:99:cd:64:4c:7f:86:02:ab:05:
                    c2:bc:04:34:e5:f5:8a:a3:7e:dc:68:fa:f9:b0:47:
                    a3:98:e5:ad:dd:50:a9:ad:01:5f:22:89:ac:37:c9:
                    30:3e:5b:95:63:8e:1b:51:47:1a:cb:81:a3:97:e7:
                    8a:c1:14:ac:38:66:33:07:d3:4b:c6:7a:65:9c:88:
                    54:df:ea:1e:ad:2d:e4:f3:9e:86:8d:a7:93:0a:7a:
                    d2:8f:b9:54:4b:51:7b:6a:47:af:17:a3:63:d2:c7:
                    4c:92:c5:f8:a0:b4:5e:cc:98:6f:33:e9:f5:9e:a2:
                    36:11:3a:78:39:9c:5c:93:eb:7c:60:67:48:2d:d7:
                    88:aa:46:b9:c1:ba:b5:c4:30:79:01:ab:b6:5c:48:
                    d5:04:74:f1:52:c7:09:cf:bd:17:5e:a1:cb:31:a9:
                    fd:70:74:67:69:3d:2b:d2:21:c4:67:c2:3d:25:a9:
                    eb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EB:C3:71:37:DC:29:46:57:5E:6A:AD:3D:20:6F:D2:FE:A0:D9:60:6C
            X509v3 Authority Key Identifier: 
                keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer

            Subject Information Access: 
                1.3.6.1.5.5.7.48.11 - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/68NxN9wpRldeaq09IG_S_qDZYGw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0&0$....0...._.r..._.u..._.x..._.~....6.
    Signature Algorithm: sha256WithRSAEncryption
         76:6e:b0:0b:cc:5e:38:d1:f8:63:ac:a0:73:e4:6e:47:05:b6:
         86:63:1f:22:ba:b3:ec:65:d7:0a:af:0f:6d:c4:13:e2:18:bd:
         41:8e:8f:8a:53:7c:ec:be:cf:a3:67:23:42:63:1f:c6:0e:40:
         9d:10:b7:c9:b1:3f:47:f8:d9:2e:4b:93:f7:49:5e:ce:27:77:
         fc:17:85:63:13:76:0e:df:0a:0c:87:38:4d:7d:fd:7b:58:8c:
         7b:79:44:d8:5d:e4:48:b3:d5:68:cc:74:d0:04:c5:0d:2a:7c:
         da:bd:1f:cc:7f:f0:0d:af:a9:58:be:29:89:56:a3:76:f2:8c:
         fd:0c:ac:f2:97:8c:b1:de:cb:c5:d0:52:0d:3a:2c:cb:7e:b1:
         3a:00:67:5d:e9:c9:0f:c5:aa:3d:39:3c:67:25:6c:19:f6:b1:
         ac:cc:37:60:22:ca:88:46:de:fc:b0:ab:1e:cd:34:7d:d8:86:
         e1:e4:7e:f8:3f:3d:46:3d:7d:06:23:31:42:06:28:d8:bf:8b:
         f8:f4:49:0b:15:93:7e:19:8e:c2:3b:dd:d3:fd:29:6f:5d:9a:
         88:cd:b8:bb:08:cd:8e:aa:17:74:dd:fe:cf:47:18:ca:5e:8c:
         d2:03:2d:08:d6:c2:ab:be:da:68:56:40:ae:b6:5a:fd:d0:24:
         95:92:05:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 03:59:22 2021 by LibreSSL & rpki-client.