Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/HLyEHF3j6ZH0NPn2lh03uBmuk2c.roa (download)

Subject key identifier:   1C:BC:84:1C:5D:E3:E9:91:F4:34:F9:F6:96:1D:37:B8:19:AE:93:67 
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
asID:                     AS141158
Prefixes:
    1: 82.118.31.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/HLyEHF3j6ZH0NPn2lh03uBmuk2c.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22989555 (0x15ecaf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Jul 22 15:38:59 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=1cbc841c5de3e991f434f9f6961d37b819ae9367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:13:9c:2f:0f:84:b6:75:88:31:6a:2c:5b:
                    47:fa:12:09:52:5b:33:53:85:ad:e6:12:02:b6:ac:
                    0b:c1:89:65:ac:e4:57:e2:fa:5e:10:b3:58:d8:1e:
                    7c:d9:24:07:c4:ee:af:86:9d:7f:c9:c6:a5:8e:08:
                    de:a3:48:34:63:59:b9:c8:54:6d:0d:4b:2a:8b:d6:
                    37:2e:c9:aa:13:84:59:15:31:ee:e8:79:07:1c:77:
                    ac:9d:81:47:64:5f:69:a7:c7:85:ce:c1:5a:54:1f:
                    46:ad:6e:d7:c0:39:c8:0a:02:b4:56:85:a8:c6:99:
                    16:4d:52:fb:fb:43:6b:b2:b5:16:fa:2e:fb:17:24:
                    a4:61:37:0d:26:d9:44:a0:10:99:db:72:8d:7e:60:
                    b9:65:af:e1:f8:f9:c4:2b:1f:53:47:8c:2d:27:77:
                    34:02:57:3c:1c:81:87:ff:dd:73:00:62:01:10:ce:
                    13:7b:ae:e8:e8:3b:cf:19:d8:b9:08:14:20:4a:04:
                    4a:aa:78:4f:f3:0b:9c:73:58:54:d5:53:fb:9f:8c:
                    40:e3:0d:53:88:9d:1f:eb:33:18:3a:4a:64:51:3f:
                    ea:e5:67:68:98:41:fa:de:70:fc:a1:bb:bc:e5:33:
                    07:39:0d:00:9c:88:c2:83:bc:75:62:86:07:5a:5f:
                    38:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1C:BC:84:1C:5D:E3:E9:91:F4:34:F9:F6:96:1D:37:B8:19:AE:93:67
            X509v3 Authority Key Identifier: 
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/HLyEHF3j6ZH0NPn2lh03uBmuk2c.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.118.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:04:d5:a2:2a:4d:6e:c3:07:18:35:f1:15:f4:5b:0b:87:01:
         fb:42:55:95:0d:3d:74:46:07:40:f9:a2:c1:65:e7:81:fa:db:
         df:76:00:5b:fd:6e:23:63:e8:bb:06:ae:7f:e0:c4:07:6a:a2:
         75:f4:f0:7f:8a:c1:c6:8d:4c:b1:8f:c3:44:5f:58:a9:b3:4e:
         d9:82:ed:32:ab:0f:a3:eb:36:a3:41:95:e5:69:04:52:db:e1:
         a8:a3:68:a2:50:8a:7a:16:40:5f:85:85:52:53:e6:a5:38:e4:
         49:10:38:41:ca:1a:b4:ab:ac:25:0b:cc:39:a2:45:ae:f5:7d:
         dc:ba:73:6b:58:89:ab:d4:d1:73:4a:cd:41:ce:32:85:f3:a0:
         8f:81:62:b0:04:cb:db:cf:44:42:12:b0:36:e9:cf:de:92:4f:
         46:91:f1:fe:61:72:fb:6f:6f:48:f5:54:a9:c1:d6:fc:62:d1:
         0f:41:3d:28:87:ab:51:1c:e2:4f:10:41:c8:d5:30:bf:41:36:
         0b:21:75:06:f3:c6:0b:30:1c:43:0f:19:63:b6:ba:05:da:1c:
         79:e1:e3:a9:68:3c:74:4f:88:fb:b1:78:f1:0a:35:fe:fe:a8:
         9b:86:9b:4e:50:ca:b3:2c:16:4f:d7:b7:ed:9f:9e:8a:ca:86:
         f4:f5:46:b8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAV7K8zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTgxNGNmMmNhM2UxNzk5MzQ5Y2NkNGM3ZTZhNzZkNjNmODM0YTNkMB4XDTIxMDcy
MjE1Mzg1OVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWNiYzg0MWM1ZGUz
ZTk5MWY0MzRmOWY2OTYxZDM3YjgxOWFlOTM2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKI/E5wvD4S2dYgxaixbR/oSCVJbM1OFreYSArasC8GJZazk
V+L6XhCzWNgefNkkB8Tur4adf8nGpY4I3qNINGNZuchUbQ1LKovWNy7JqhOEWRUx
7uh5Bxx3rJ2BR2RfaafHhc7BWlQfRq1u18A5yAoCtFaFqMaZFk1S+/tDa7K1Fvou
+xckpGE3DSbZRKAQmdtyjX5guWWv4fj5xCsfU0eMLSd3NAJXPByBh//dcwBiARDO
E3uu6Og7zxnYuQgUIEoESqp4T/MLnHNYVNVT+5+MQOMNU4idH+szGDpKZFE/6uVn
aJhB+t5w/KG7vOUzBzkNAJyIwoO8dWKGB1pfOKUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQcvIQcXePpkfQ0+faWHTe4Ga6TZzAfBgNVHSMEGDAWgBQhgUzyyj4XmTSc
zUx+anbWP4NKPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lZRk04c28tRjVrMG5NMU1mbXAyMWotRFNqMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvMDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8x
L0hMeUVIRjNqNlpIME5QbjJsaDAzdUJtdWsyYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
MDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8xL0lZRk04c28tRjVr
MG5NMU1mbXAyMWotRFNqMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFJ2HzANBgkqhkiG9w0BAQsFAAOC
AQEAJQTVoipNbsMHGDXxFfRbC4cB+0JVlQ09dEYHQPmiwWXngfrb33YAW/1uI2Po
uwauf+DEB2qidfTwf4rBxo1MsY/DRF9YqbNO2YLtMqsPo+s2o0GV5WkEUtvhqKNo
olCKehZAX4WFUlPmpTjkSRA4QcoatKusJQvMOaJFrvV93Lpza1iJq9TRc0rNQc4y
hfOgj4FisATL289EQhKwNunP3pJPRpHx/mFy+29vSPVUqcHW/GLRD0E9KIerURzi
TxBByNUwv0E2CyF1BvPGCzAcQw8ZY7a6BdoceeHjqWg8dE+I+7F48Qo1/v6om4ab
TlDKsywWT9e37Z+eisqG9PVGuA==
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:20:17 2021 by LibreSSL & rpki-client.