Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/2d/df15d5-a0d0-4fab-bc96-ed21f80886a3/1/stXifNQKOB8rMgD2WqswXQUC4hc.roa (download)

Subject key identifier:   B2:D5:E2:7C:D4:0A:38:1F:2B:32:00:F6:5A:AB:30:5D:05:02:E2:17 
Authority key identifier: 4F:21:C5:39:3D:93:FC:CF:0B:8E:0C:CC:DC:8D:54:97:E2:D6:92:09
asID:                     AS328543
Prefixes:
    1: 195.74.89.0/24 maxlen: 24
    2: 195.74.88.0/24 maxlen: 24
    3: 195.74.88.0/23 maxlen: 23
    4: 195.78.49.0/24 maxlen: 24
    5: 195.78.48.0/24 maxlen: 24
    6: 195.78.48.0/23 maxlen: 23

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/2d/df15d5-a0d0-4fab-bc96-ed21f80886a3/1/stXifNQKOB8rMgD2WqswXQUC4hc.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53162231 (0x32b30f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f21c5393d93fccf0b8e0cccdc8d5497e2d69209
        Validity
            Not Before: Jan  1 15:01:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b2d5e27cd40a381f2b3200f65aab305d0502e217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:a3:65:79:4a:f2:0e:4f:af:48:e8:3e:d6:
                    cd:7b:3a:13:d4:bb:a8:45:a4:0d:76:08:30:c1:94:
                    bb:d4:a2:39:c6:61:fa:0e:76:13:a5:af:10:25:93:
                    5b:30:40:59:ee:c2:b2:db:05:23:90:fb:56:1a:dc:
                    4f:c2:53:67:b1:49:c6:b6:62:79:78:78:5c:70:eb:
                    b3:55:22:e9:fc:8f:1b:e5:47:d8:1d:37:7c:46:28:
                    34:de:2a:6f:19:96:01:3b:7f:73:8f:99:91:1c:b8:
                    79:c7:99:58:9c:4f:5a:c6:b9:65:e4:72:4c:9b:28:
                    ea:7f:81:09:84:95:7a:57:03:b2:4f:4f:66:4b:7a:
                    f4:92:45:e2:73:c6:39:43:8a:fe:07:55:2e:55:2a:
                    7c:86:59:3d:4b:ad:de:dc:31:57:0e:b1:a7:c3:8a:
                    ef:63:23:6a:18:3d:dd:74:be:90:f2:1d:0b:b8:f9:
                    03:31:39:31:1f:cd:5d:88:fb:15:4c:e6:36:ff:4f:
                    c3:d4:42:41:63:65:68:b5:de:50:6e:d5:d4:20:fa:
                    12:c6:f2:20:00:9f:ab:29:a3:2d:6b:d1:ef:f0:b1:
                    e8:69:f5:4b:49:51:19:ea:23:e2:71:2a:fe:06:c6:
                    b1:14:e6:23:09:a1:d6:2c:ac:66:11:18:38:38:64:
                    88:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B2:D5:E2:7C:D4:0A:38:1F:2B:32:00:F6:5A:AB:30:5D:05:02:E2:17
            X509v3 Authority Key Identifier: 
                keyid:4F:21:C5:39:3D:93:FC:CF:0B:8E:0C:CC:DC:8D:54:97:E2:D6:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyHFOT2T_M8LjgzM3I1Ul-LWkgk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/df15d5-a0d0-4fab-bc96-ed21f80886a3/1/stXifNQKOB8rMgD2WqswXQUC4hc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/df15d5-a0d0-4fab-bc96-ed21f80886a3/1/TyHFOT2T_M8LjgzM3I1Ul-LWkgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.74.88.0/23
                  195.78.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:d9:ca:c4:22:3b:d1:fb:f9:fa:57:b8:ca:e6:c1:4c:83:eb:
         0a:fe:93:e4:32:d7:c8:bf:d4:65:56:65:a8:26:a4:c2:52:4c:
         9f:61:7d:b6:c0:12:71:1c:38:94:11:80:94:0d:da:2f:c6:71:
         83:b0:09:27:d9:d0:44:27:70:ee:dd:a6:cf:de:55:27:c4:4c:
         dd:39:bc:82:c3:21:c5:2a:4f:95:76:20:58:4c:b6:23:af:e4:
         1a:e7:79:3b:27:4f:46:45:35:a2:a1:11:55:77:99:9b:4c:f2:
         95:51:a3:23:64:1b:f2:6b:2d:69:5f:19:38:9a:b9:a8:6f:6f:
         3a:74:ec:2d:81:bc:3a:fc:ab:06:2e:48:3c:03:28:78:6a:4c:
         e8:0e:2d:ab:14:22:f4:a9:ac:3e:72:b9:80:45:85:12:df:74:
         10:0c:9e:16:93:76:1d:08:3d:2c:84:e7:b9:05:89:55:14:84:
         4b:3b:39:5f:63:42:11:e0:45:c6:cf:f3:de:91:c9:ce:63:f0:
         f8:26:71:20:be:71:cc:6b:b4:ac:6a:82:e5:44:9c:ee:d1:4c:
         38:d7:8d:41:c4:be:fa:77:1a:ff:9c:d1:6b:78:54:c9:b7:d9:
         18:a6:59:fb:35:fe:cc:43:64:f6:e4:08:74:ef:5e:c2:c5:46:
         02:89:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 17:05:31 2022 by LibreSSL & rpki-client.