Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/Ise9PcoWyarVD4jGtjhzEDiL_a4.roa (download)

Subject key identifier:   22:C7:BD:3D:CA:16:C9:AA:D5:0F:88:C6:B6:38:73:10:38:8B:FD:AE 
Authority key identifier: FD:F4:B6:21:EE:B7:39:D2:4F:C9:2A:D7:8D:27:76:DA:7B:87:00:27
asID:                     AS834
Prefixes:
    1: 188.95.70.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/Ise9PcoWyarVD4jGtjhzEDiL_a4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69945 (0x11139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdf4b621eeb739d24fc92ad78d2776da7b870027
        Validity
            Not Before: Sep 14 10:31:34 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=22c7bd3dca16c9aad50f88c6b6387310388bfdae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:fd:ed:7f:b7:98:55:3b:c3:f6:10:a8:5d:
                    b4:1f:f3:5f:13:a8:b8:e9:a3:5c:ad:8a:55:47:6c:
                    0e:b7:f6:6d:34:4d:e3:bf:5a:28:0e:2f:07:cd:23:
                    ad:39:d7:ce:e9:2e:e4:aa:cf:42:40:19:ca:4c:17:
                    6b:cd:bb:2b:c4:9e:b7:9b:82:fd:c2:c8:72:7f:06:
                    17:94:00:b8:4a:1d:3c:75:7c:f0:c9:02:f7:ad:4f:
                    c4:7e:fb:3e:33:d9:88:97:2f:03:65:37:41:db:c9:
                    96:4e:f8:dd:06:b5:d4:0b:6f:a1:2f:68:8d:15:58:
                    5f:ea:a8:4b:da:03:d2:71:b9:a6:d2:4b:0d:ba:64:
                    6c:ec:e2:6a:55:e4:98:a9:b9:72:87:c2:5a:a0:38:
                    29:c8:54:c5:d2:be:ff:b8:9d:13:32:6c:54:e1:08:
                    35:29:72:39:4b:c4:19:7b:c3:41:12:f0:36:6c:c4:
                    fc:6f:f2:02:cb:19:46:7e:bf:03:a5:35:54:d5:e9:
                    ae:68:58:4e:ae:52:39:fa:a3:fc:7c:15:a9:a8:32:
                    7a:88:42:72:82:fd:e9:7c:29:06:99:9b:72:4a:3f:
                    e8:75:1a:6a:f8:60:2e:4f:e7:4f:63:60:fd:ba:46:
                    41:66:19:37:df:7e:88:68:31:f4:b3:6c:29:8e:96:
                    a6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                22:C7:BD:3D:CA:16:C9:AA:D5:0F:88:C6:B6:38:73:10:38:8B:FD:AE
            X509v3 Authority Key Identifier: 
                keyid:FD:F4:B6:21:EE:B7:39:D2:4F:C9:2A:D7:8D:27:76:DA:7B:87:00:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fS2Ie63OdJPySrXjSd22nuHACc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/Ise9PcoWyarVD4jGtjhzEDiL_a4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/_fS2Ie63OdJPySrXjSd22nuHACc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.95.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:95:58:61:06:c5:c6:1d:fa:80:c3:ed:58:23:88:ad:e4:f4:
         87:c1:64:39:0e:42:a6:e0:7f:30:3c:ea:cb:ac:c1:14:20:e2:
         e7:bc:52:49:c5:7d:5d:e4:56:08:fc:80:95:83:70:e8:89:7c:
         50:bf:f4:47:1a:6f:a7:a0:a2:9b:0c:87:83:96:7b:36:74:c3:
         88:30:4f:aa:12:1f:b0:44:63:84:68:23:06:d4:b6:a9:a9:93:
         50:b0:cf:46:93:56:50:95:c7:12:2d:d0:f9:79:f1:c7:90:0e:
         2f:ed:78:ba:6f:dd:57:b9:33:f7:e2:b3:19:5d:26:9f:04:f3:
         38:a5:76:0b:76:7c:bd:84:be:b7:db:7d:ab:df:ee:0a:6f:e4:
         d3:2d:3a:80:f0:3c:1f:31:b8:e2:60:76:ef:f3:50:df:dd:46:
         37:28:c9:4f:51:6b:dc:1c:92:5f:45:6a:d3:9c:32:18:d9:f6:
         00:24:a9:20:a1:50:d3:98:4c:0a:6c:24:13:7d:b7:a6:c6:91:
         b1:5e:0c:f1:68:77:95:e9:7b:f3:27:66:0f:53:fe:28:91:49:
         5c:4b:d8:cb:7c:0b:40:ba:91:81:0d:f4:bb:08:4b:0a:d9:a2:
         45:25:ba:28:9b:2c:2b:34:4d:70:1b:db:0c:bf:71:2d:e4:a1:
         91:fc:7c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:30:16 2021 by LibreSSL & rpki-client.