Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/318-c5wRvd_OGlopRu4N6m5Zzic.roa (download)

Subject key identifier:   DF:5F:3E:73:9C:11:BD:DF:CE:1A:5A:29:46:EE:0D:EA:6E:59:CE:27 
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
asID:                     AS399150
Prefixes:
    1: 95.164.224.0/22 (max: 24)
    2: 95.164.236.0/22 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/318-c5wRvd_OGlopRu4N6m5Zzic.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22087840 (0x15108a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
        Validity
            Not Before: Sep 24 16:47:43 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=df5f3e739c11bddfce1a5a2946ee0dea6e59ce27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:d5:43:c7:b4:dd:cc:ff:d0:f2:d7:31:32:
                    75:66:b0:17:56:9e:65:b2:7f:d4:11:8e:22:48:0e:
                    c2:39:30:83:2c:2a:3e:3c:03:14:32:08:f6:1c:2f:
                    9e:d7:b3:14:39:3b:6b:1d:40:cc:38:74:e2:30:bc:
                    54:66:34:5a:bc:f2:54:e7:f5:cc:75:67:41:1d:61:
                    39:90:88:07:90:e8:a6:20:2b:c8:9f:f3:73:1f:51:
                    d4:e9:4c:0c:4e:9f:f5:61:42:c4:09:62:cd:13:7f:
                    61:80:3e:f9:c7:42:c1:38:32:59:9d:a7:fe:3c:18:
                    26:10:9e:ff:56:01:21:96:b3:50:1d:63:f3:a1:d7:
                    80:22:71:13:a1:86:64:c0:42:93:69:5b:42:97:d2:
                    61:6f:04:34:23:f9:60:5c:a4:b0:90:39:76:4a:ef:
                    99:50:77:77:8c:6b:f3:0d:17:2d:43:3d:76:47:c0:
                    57:68:56:08:59:e8:e3:86:70:15:11:6c:4c:af:f4:
                    5b:e8:a4:7b:9a:83:a6:55:47:d1:93:46:d3:a1:85:
                    95:82:4f:8d:b5:aa:17:ab:29:f3:fd:aa:e1:4a:99:
                    f0:df:c8:33:fd:e5:6f:c3:ed:ef:df:91:ce:44:b8:
                    9d:a0:c4:72:30:1a:5e:48:e0:cb:ff:e1:81:cf:2b:
                    da:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DF:5F:3E:73:9C:11:BD:DF:CE:1A:5A:29:46:EE:0D:EA:6E:59:CE:27
            X509v3 Authority Key Identifier: 
                keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/318-c5wRvd_OGlopRu4N6m5Zzic.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.164.224.0/22
                  95.164.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:9c:d4:7b:cf:aa:19:4f:ab:32:68:d8:50:2d:1a:38:91:69:
         74:dc:59:d3:03:ec:66:09:5b:c3:b4:88:e3:72:15:41:80:15:
         c5:a5:fc:0d:33:f6:7d:40:66:3a:e7:61:fe:7f:0c:87:e3:68:
         6e:05:dc:d0:78:c7:98:2d:33:5b:31:52:00:e9:0d:f9:de:45:
         cc:06:03:ef:19:b9:35:4a:a6:df:22:b7:63:50:9b:8a:17:b6:
         bd:8a:33:13:ce:87:d3:88:1b:4c:bf:a7:b0:a3:03:99:5e:ca:
         41:c1:73:e9:57:0a:a7:56:0c:18:6d:17:24:ca:6b:52:ea:e8:
         c2:7b:c1:f7:de:9a:ea:6e:e1:2e:18:94:18:0b:50:7d:67:57:
         c2:4a:f1:c0:33:23:e9:ba:38:3d:a7:f3:78:35:4c:ef:e0:53:
         ea:1a:b1:bc:c1:cc:15:ab:28:68:93:ce:94:db:14:c6:6c:09:
         28:48:7d:b9:aa:81:99:0b:48:00:da:e4:0d:03:e2:af:dc:0c:
         cb:ff:0c:26:77:8f:c6:f3:d0:e1:db:7f:fe:5a:9e:60:fb:2c:
         ea:b9:91:b7:51:6a:a8:1e:3f:50:e9:2f:0e:4b:63:90:f4:20:
         8d:83:ad:6e:a6:a1:1d:8f:ca:8e:aa:d6:88:8e:69:ea:37:8f:
         be:0d:6f:17
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAVEIoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZDc0M2VkNjNlODY4ZWY1MGY2ZDg0YzAwMDNhODM0ODNmYzYyYTAzMB4XDTIxMDky
NDE2NDc0M1oXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGY1ZjNlNzM5YzEx
YmRkZmNlMWE1YTI5NDZlZTBkZWE2ZTU5Y2UyNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvw1UPHtN3M/9Dy1zEydWawF1aeZbJ/1BGOIkgOwjkwgywq
PjwDFDII9hwvntezFDk7ax1AzDh04jC8VGY0WrzyVOf1zHVnQR1hOZCIB5DopiAr
yJ/zcx9R1OlMDE6f9WFCxAlizRN/YYA++cdCwTgyWZ2n/jwYJhCe/1YBIZazUB1j
86HXgCJxE6GGZMBCk2lbQpfSYW8ENCP5YFyksJA5dkrvmVB3d4xr8w0XLUM9dkfA
V2hWCFno44ZwFRFsTK/0W+ike5qDplVH0ZNG06GFlYJPjbWqF6sp8/2q4UqZ8N/I
M/3lb8Pt79+RzkS4naDEcjAaXkjgy//hgc8r2v0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTfXz5znBG9384aWilG7g3qblnOJzAfBgNVHSMEGDAWgBRtdD7WPoaO9Q9t
hMAAOoNIP8YqAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JYUS0xajZHanZVUGJZVEFBRHFEU0RfR0tnTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvZTA1MzUyLWYxNDgtNDBhMC04N2E0LWU5NzI0YTdhNmJjOC8x
LzMxOC1jNXdSdmRfT0dsb3BSdTRONm01WnppYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
ZTA1MzUyLWYxNDgtNDBhMC04N2E0LWU5NzI0YTdhNmJjOC8xL2JYUS0xajZHanZV
UGJZVEFBRHFEU0RfR0tnTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAl+k4AMEAl+k7DANBgkqhkiG9w0B
AQsFAAOCAQEAoZzUe8+qGU+rMmjYUC0aOJFpdNxZ0wPsZglbw7SI43IVQYAVxaX8
DTP2fUBmOudh/n8Mh+NobgXc0HjHmC0zWzFSAOkN+d5FzAYD7xm5NUqm3yK3Y1Cb
ihe2vYozE86H04gbTL+nsKMDmV7KQcFz6VcKp1YMGG0XJMprUurownvB996a6m7h
LhiUGAtQfWdXwkrxwDMj6bo4PafzeDVM7+BT6hqxvMHMFasoaJPOlNsUxmwJKEh9
uaqBmQtIANrkDQPir9wMy/8MJnePxvPQ4dt//lqeYPss6rmRt1FqqB4/UOkvDktj
kPQgjYOtbqahHY/KjqrWiI5p6jePvg1vFw==
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:26:41 2021 by LibreSSL & rpki-client.