Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/b7REUgqhAsR3XfzXnefjWhlMktA.roa (download)

Subject key identifier:   6F:B4:44:52:0A:A1:02:C4:77:5D:FC:D7:9D:E7:E3:5A:19:4C:92:D0 
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
asID:                     AS399150
Prefixes:
    1: 95.164.224.0/22 maxlen: 24
    2: 95.164.236.0/22 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/b7REUgqhAsR3XfzXnefjWhlMktA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38062565 (0x244c9e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
        Validity
            Not Before: Jan  1 05:56:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6fb444520aa102c4775dfcd79de7e35a194c92d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:58:fd:3c:5c:c7:59:1b:03:39:06:58:79:ee:
                    37:66:3a:74:6d:22:1f:6b:3f:35:89:57:d9:c0:d0:
                    43:d1:e5:c1:65:72:ea:07:99:30:11:48:97:52:ae:
                    8d:0c:3d:f9:b8:e9:a4:2a:0f:c3:31:a8:db:50:b0:
                    2b:4d:91:58:82:f4:f4:73:d0:b5:fc:85:8c:bb:e6:
                    79:b2:87:ef:d1:c1:c0:b4:6d:d0:0e:d1:23:d8:5b:
                    9e:dc:98:5a:71:f1:3d:ca:56:3e:40:d6:a0:c7:68:
                    75:cf:1e:1c:be:36:59:f7:05:bd:b4:7a:55:ec:e2:
                    31:5b:58:66:a2:c2:4b:42:b2:7c:3b:fd:d9:dc:05:
                    56:c6:45:ec:e2:97:0e:b6:a6:2d:d8:67:45:d2:37:
                    49:20:4b:50:60:65:10:e8:0b:88:ca:e5:53:f7:63:
                    ee:d9:36:cf:dd:d7:64:25:9f:6a:37:a2:80:a0:6a:
                    70:6c:3e:b2:14:42:4e:d2:a4:50:cf:28:cf:50:c8:
                    35:cb:ee:6e:0f:77:22:dd:6c:f6:cf:65:b7:2a:e9:
                    6d:56:f7:d7:d3:cf:da:06:bd:e3:04:aa:b5:3f:69:
                    4a:35:32:21:73:90:84:91:d3:20:12:9b:72:11:62:
                    bc:cf:ca:8f:03:be:69:5e:d5:4a:f7:2f:7f:64:7b:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6F:B4:44:52:0A:A1:02:C4:77:5D:FC:D7:9D:E7:E3:5A:19:4C:92:D0
            X509v3 Authority Key Identifier: 
                keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/b7REUgqhAsR3XfzXnefjWhlMktA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.164.224.0/22
                  95.164.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:67:88:58:91:cc:11:44:70:c6:b7:3f:6f:d8:4e:96:59:f7:
         b4:d1:56:01:21:fc:e1:7c:47:c6:fe:a0:c1:13:04:39:f5:e6:
         3c:07:c5:4d:89:cf:55:2b:37:02:e2:87:4c:d0:a7:66:05:c8:
         db:3e:4c:26:48:c7:31:bc:75:9f:1d:d2:fc:ad:0f:48:01:38:
         92:2f:91:23:3f:51:7e:d0:99:b6:6d:cb:3c:9a:8a:c9:dd:0e:
         ea:79:9f:83:45:cd:98:33:d3:e0:1b:b4:ef:05:30:23:88:3e:
         fc:b8:1d:16:06:72:42:35:54:b4:a2:f0:b0:1c:77:6d:68:8a:
         c8:14:80:b6:5e:32:48:ae:76:bf:a6:e0:c8:b1:eb:94:80:2b:
         d2:90:51:49:8f:e3:db:dc:59:f8:46:1d:dc:35:d4:91:57:9d:
         96:a4:47:bc:5b:e6:0f:45:70:ee:20:fd:43:29:cb:d9:08:4e:
         48:25:5a:68:07:d1:1e:f9:a6:57:ff:53:5f:1f:a7:10:1a:34:
         cf:09:6d:23:4b:d4:5b:de:28:4b:44:2b:e5:71:27:a6:30:0d:
         da:06:8f:83:ab:86:61:e2:8b:38:eb:cb:9b:6b:cf:51:ce:e9:
         d5:47:5d:2b:6e:0b:9b:7f:c8:5d:c0:ed:56:f6:9a:d0:07:eb:
         ab:78:8f:66
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAkTJ5TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZDc0M2VkNjNlODY4ZWY1MGY2ZDg0YzAwMDNhODM0ODNmYzYyYTAzMB4XDTIyMDEw
MTA1NTY0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmZiNDQ0NTIwYWEx
MDJjNDc3NWRmY2Q3OWRlN2UzNWExOTRjOTJkMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIhY/Txcx1kbAzkGWHnuN2Y6dG0iH2s/NYlX2cDQQ9HlwWVy
6geZMBFIl1KujQw9+bjppCoPwzGo21CwK02RWIL09HPQtfyFjLvmebKH79HBwLRt
0A7RI9hbntyYWnHxPcpWPkDWoMdodc8eHL42WfcFvbR6VeziMVtYZqLCS0KyfDv9
2dwFVsZF7OKXDramLdhnRdI3SSBLUGBlEOgLiMrlU/dj7tk2z93XZCWfajeigKBq
cGw+shRCTtKkUM8oz1DINcvubg93It1s9s9ltyrpbVb319PP2ga94wSqtT9pSjUy
IXOQhJHTIBKbchFivM/KjwO+aV7VSvcvf2R7WqsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRvtERSCqECxHdd/Ned5+NaGUyS0DAfBgNVHSMEGDAWgBRtdD7WPoaO9Q9t
hMAAOoNIP8YqAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JYUS0xajZHanZVUGJZVEFBRHFEU0RfR0tnTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvZTA1MzUyLWYxNDgtNDBhMC04N2E0LWU5NzI0YTdhNmJjOC8x
L2I3UkVVZ3FoQXNSM1hmelhuZWZqV2hsTWt0QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
ZTA1MzUyLWYxNDgtNDBhMC04N2E0LWU5NzI0YTdhNmJjOC8xL2JYUS0xajZHanZV
UGJZVEFBRHFEU0RfR0tnTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAl+k4AMEAl+k7DANBgkqhkiG9w0B
AQsFAAOCAQEAIWeIWJHMEURwxrc/b9hOlln3tNFWASH84XxHxv6gwRMEOfXmPAfF
TYnPVSs3AuKHTNCnZgXI2z5MJkjHMbx1nx3S/K0PSAE4ki+RIz9RftCZtm3LPJqK
yd0O6nmfg0XNmDPT4Bu07wUwI4g+/LgdFgZyQjVUtKLwsBx3bWiKyBSAtl4ySK52
v6bgyLHrlIAr0pBRSY/j29xZ+EYd3DXUkVedlqRHvFvmD0Vw7iD9QynL2QhOSCVa
aAfRHvmmV/9TXx+nEBo0zwltI0vUW94oS0Qr5XEnpjAN2gaPg6uGYeKLOOvLm2vP
Uc7p1UddK24Lm3/IXcDtVvaa0Afrq3iPZg==
-----END CERTIFICATE-----

Generated at Sat Jan 1 08:29:59 2022 by LibreSSL & rpki-client.