Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/rL-mUbNYQ6kuxMmCAOV5fNcMECE.roa (download)

Subject key identifier:   AC:BF:A6:51:B3:58:43:A9:2E:C4:C9:82:00:E5:79:7C:D7:0C:10:21 
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
asID:                     AS61317
Prefixes:
    1: 185.95.157.0/24 (max: 24)
    2: 185.95.159.0/24 (max: 24)
    3: 185.95.156.0/24 (max: 24)
    4: 185.95.158.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/rL-mUbNYQ6kuxMmCAOV5fNcMECE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12994264 (0xc646d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
        Validity
            Not Before: Jan  1 02:19:35 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=acbfa651b35843a92ec4c98200e5797cd70c1021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:85:13:46:42:aa:0a:52:5b:f7:15:62:2e:
                    7c:f4:a6:c0:c3:6b:0e:74:02:0c:c8:7f:c1:70:dc:
                    b8:39:6c:71:76:02:c0:19:00:47:35:37:ea:49:a9:
                    77:ab:86:50:bc:45:6d:db:83:02:73:86:cb:8f:ec:
                    9f:53:19:2e:98:b0:6b:52:51:f4:12:58:a3:94:a9:
                    f7:70:d7:c8:66:98:e5:23:4c:c2:0a:e0:bd:b3:2d:
                    15:7d:c8:3f:bf:ef:38:dc:03:be:3f:0f:fd:e3:ed:
                    64:e5:cd:10:10:2a:c9:c7:fc:d4:01:8a:73:a2:3b:
                    65:97:04:7e:73:4e:bf:05:1d:49:fe:cd:67:9f:0d:
                    c9:47:0f:2d:2d:8b:8a:59:9c:03:8f:86:c5:09:c5:
                    11:ff:43:7f:cd:c1:c1:c3:5e:8c:d4:29:50:42:f7:
                    3c:70:6e:97:5b:94:fb:0f:0d:ad:a5:5e:6c:c7:b7:
                    05:7d:a3:1a:00:a0:8a:5b:45:45:9d:9c:f7:5e:98:
                    4b:d4:78:87:f0:e3:f8:dd:4e:ea:e3:97:d1:bd:c7:
                    0c:77:54:4a:bb:70:c9:15:be:43:3c:09:38:c2:0f:
                    cf:e5:1d:a6:b5:95:8f:3e:b4:e3:f5:b6:63:87:20:
                    d9:20:9a:a2:d0:52:d1:b7:24:43:62:a6:58:a1:e7:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AC:BF:A6:51:B3:58:43:A9:2E:C4:C9:82:00:E5:79:7C:D7:0C:10:21
            X509v3 Authority Key Identifier: 
                keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/rL-mUbNYQ6kuxMmCAOV5fNcMECE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....._.
    Signature Algorithm: sha256WithRSAEncryption
         7b:96:72:6d:f9:83:0e:7a:c0:d0:c2:38:a8:44:78:83:77:7b:
         8b:f5:8d:2b:9e:88:86:55:aa:9a:ad:14:aa:9c:00:c8:e0:39:
         58:98:2f:8d:65:74:6f:d8:05:c7:a9:58:d7:ff:04:91:ac:00:
         ee:82:dc:0a:ad:d9:c3:55:9a:d4:4a:57:7f:2f:06:27:f5:e7:
         bf:86:6e:55:73:9a:ab:14:5c:94:c7:4a:41:ca:f1:d4:36:35:
         24:db:91:f7:99:f0:9f:f5:0f:ca:6f:4a:07:2d:33:75:f9:ff:
         84:34:d4:07:dd:10:2d:8f:48:ab:3e:b9:bd:23:19:0e:16:47:
         76:68:df:fc:65:3c:01:dd:4c:bc:3c:10:16:b5:4a:d1:62:9f:
         86:b6:e0:b4:ac:03:63:5a:00:70:52:a5:6f:f4:e2:3e:72:14:
         c3:a9:68:56:35:77:78:12:57:1b:29:42:f3:c0:1d:ac:a0:75:
         0f:a5:16:4f:bb:fe:33:cd:7e:b1:56:74:50:b6:8f:54:cc:bb:
         b7:da:9c:83:6e:7a:bc:c0:61:12:d8:54:b3:4e:88:84:ae:93:
         fb:04:e3:f8:22:1e:16:c9:07:51:83:55:77:c8:d9:96:9c:37:
         20:35:bb:91:c9:92:f5:89:bd:31:af:cc:a2:ef:d4:68:c3:6d:
         d3:6d:e7:4b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAMZG2DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OWQyZGFmZjFjNWJiNjFhMGFjOGIzY2FlYWQ0YjhhMWZhMjg0ZDBmMB4XDTIxMDEw
MTAyMTkzNVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWNiZmE2NTFiMzU4
NDNhOTJlYzRjOTgyMDBlNTc5N2NkNzBjMTAyMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKP/hRNGQqoKUlv3FWIufPSmwMNrDnQCDMh/wXDcuDlscXYC
wBkARzU36kmpd6uGULxFbduDAnOGy4/sn1MZLpiwa1JR9BJYo5Sp93DXyGaY5SNM
wgrgvbMtFX3IP7/vONwDvj8P/ePtZOXNEBAqycf81AGKc6I7ZZcEfnNOvwUdSf7N
Z58NyUcPLS2LilmcA4+GxQnFEf9Df83BwcNejNQpUEL3PHBul1uU+w8NraVebMe3
BX2jGgCgiltFRZ2c916YS9R4h/Dj+N1O6uOX0b3HDHdUSrtwyRW+QzwJOMIPz+Ud
prWVjz604/W2Y4cg2SCaotBS0bckQ2KmWKHn0EUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSsv6ZRs1hDqS7EyYIA5Xl81wwQITAfBgNVHSMEGDAWgBQp0tr/HFu2GgrI
s8rq1Lih+ihNDzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tkTGFfeHhidGhvS3lMUEs2dFM0b2Zvb1RROC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDcvZTVlYTk4LTk2MDEtNGFkZC1hN2Y4LTRmNTdkOWNmNWNhYS8x
L3JMLW1VYk5ZUTZrdXhNbUNBT1Y1Zk5jTUVDRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcv
ZTVlYTk4LTk2MDEtNGFkZC1hN2Y4LTRmNTdkOWNmNWNhYS8xL0tkTGFfeHhidGhv
S3lMUEs2dFM0b2Zvb1RROC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlfnDANBgkqhkiG9w0BAQsFAAOC
AQEAe5ZybfmDDnrA0MI4qER4g3d7i/WNK56IhlWqmq0UqpwAyOA5WJgvjWV0b9gF
x6lY1/8EkawA7oLcCq3Zw1Wa1EpXfy8GJ/Xnv4ZuVXOaqxRclMdKQcrx1DY1JNuR
95nwn/UPym9KBy0zdfn/hDTUB90QLY9Iqz65vSMZDhZHdmjf/GU8Ad1MvDwQFrVK
0WKfhrbgtKwDY1oAcFKlb/TiPnIUw6loVjV3eBJXGylC88AdrKB1D6UWT7v+M81+
sVZ0ULaPVMy7t9qcg256vMBhEthUs06IhK6T+wTj+CIeFskHUYNVd8jZlpw3IDW7
kcmS9Ym9Ma/Mou/UaMNt023nSw==
-----END CERTIFICATE-----

Generated at Sat Jun 12 15:39:02 2021 by LibreSSL & rpki-client.