Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/aH3uSzMynDq6_acGO_V02ylJ_1M.roa (download)

Subject key identifier:   68:7D:EE:4B:33:32:9C:3A:BA:FD:A7:06:3B:F5:74:DB:29:49:FF:53 
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
asID:                     AS399587
Prefixes:
    1: 5.104.74.0/24 maxlen: 24
    2: 5.104.72.0/24 maxlen: 24
    3: 5.104.73.0/24 maxlen: 24
    4: 95.214.93.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/aH3uSzMynDq6_acGO_V02ylJ_1M.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163698424 (0x9c1d6f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
        Validity
            Not Before: Mar 28 22:31:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=687dee4b33329c3abafda7063bf574db2949ff53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ad:56:2a:28:b9:78:1e:9e:c1:70:4b:d2:65:
                    c3:8c:44:94:95:d3:b2:b6:b3:6e:bf:33:6e:a3:d5:
                    9d:df:23:0f:06:08:c3:a0:bb:13:61:38:04:7c:3b:
                    f2:5a:59:1c:0f:7b:3f:d3:a0:4f:23:f4:fa:01:1e:
                    df:29:98:1e:dd:31:b6:08:89:29:70:4d:b8:8e:4f:
                    14:6a:64:fc:8b:3e:3c:fb:04:e2:e6:84:e0:f5:41:
                    a2:bf:d2:e0:de:75:1f:a1:90:bd:b7:91:65:8f:92:
                    ed:f4:56:da:b9:40:b7:d0:21:64:20:ba:f2:05:f0:
                    36:92:57:8a:4a:f2:e3:66:a2:10:76:fa:20:87:f8:
                    89:ff:73:76:18:94:d8:f5:25:6a:d9:b4:7d:58:6e:
                    22:90:19:8b:99:5a:b3:3d:69:83:e1:35:6a:9c:a3:
                    1f:8c:d9:e1:7a:6d:e5:2f:7a:9b:91:c7:46:17:70:
                    ac:31:68:9f:a3:82:68:ef:f8:cb:4a:cb:e6:59:8f:
                    12:84:5b:d9:26:06:94:ed:07:0a:7d:84:85:9d:e6:
                    bc:4d:e7:21:48:e7:bf:75:0a:4b:51:0c:1d:65:b7:
                    ea:78:41:70:a7:01:93:c9:ea:88:70:c4:fa:10:6b:
                    ff:1a:87:d9:3d:87:81:01:49:82:ac:56:c2:e7:4e:
                    f8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                68:7D:EE:4B:33:32:9C:3A:BA:FD:A7:06:3B:F5:74:DB:29:49:FF:53
            X509v3 Authority Key Identifier: 
                keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/aH3uSzMynDq6_acGO_V02ylJ_1M.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.104.72.0-5.104.74.255
                  95.214.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:22:34:27:33:bf:77:1f:e9:0b:eb:d7:df:ce:45:b4:41:ff:
         b6:ca:64:45:0d:e6:0f:14:e1:16:e3:51:1d:98:71:c9:b2:14:
         8a:07:4c:c3:ea:c3:25:bb:60:13:a6:5f:99:a1:3e:09:80:2f:
         6c:0c:80:34:f0:27:38:80:26:4c:b6:12:30:1b:f9:92:3a:2a:
         60:a4:81:27:4c:53:c2:a8:45:b8:bd:50:de:09:29:31:7d:b1:
         ca:48:da:ef:9c:06:f6:7f:07:5d:3f:b2:2f:1e:50:3d:a0:ad:
         1a:61:0b:a1:6d:6c:79:51:fc:3b:63:47:0c:28:0d:0c:d2:ff:
         5e:05:67:39:d7:97:06:50:d3:82:7a:3a:a5:e3:e9:f6:6f:d0:
         3e:53:1f:c2:32:f0:86:b7:32:ef:86:d0:4d:e6:82:7b:cc:3a:
         31:75:fe:c6:9b:77:6b:15:84:09:4c:a4:1a:06:ab:fd:f9:fb:
         20:0f:09:d1:87:ca:72:39:c6:f4:26:ad:34:8d:fe:bb:52:7a:
         9d:3e:44:8e:6d:b1:4e:c3:5b:78:55:9d:3a:56:8a:b5:2e:9d:
         f4:8e:c3:57:66:47:00:77:f2:cb:9d:43:0c:4b:ab:1b:74:9d:
         87:92:1d:86:66:73:c2:68:1e:c2:10:e3:d5:19:57:6f:b3:99:
         2d:d0:1f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Mar 29 02:41:15 2022 by LibreSSL & rpki-client.