Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/GjYhEMG6s0gRjMP--e28z6xy7gI.roa (download)

Subject key identifier:   1A:36:21:10:C1:BA:B3:48:11:8C:C3:FE:F9:ED:BC:CF:AC:72:EE:02 
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
asID:                     AS174
Prefixes:
    1: 185.95.102.0/23 (max: 24)
    2: 185.95.101.0/24 (max: 24)
    3: 185.76.240.0/23 (max: 24)
    4: 185.96.80.0/24 (max: 24)
    5: 185.76.242.0/24 (max: 24)
    6: 185.81.174.0/24 (max: 24)
    7: 185.81.184.0/24 (max: 24)
    8: 185.81.187.0/24 (max: 24)
    9: 185.96.38.0/24 (max: 24)
   10: 185.89.104.0/23 (max: 24)
   11: 185.97.3.0/24 (max: 24)
   12: 185.97.1.0/24 (max: 24)
   13: 185.89.108.0/22 (max: 24)
   14: 185.81.172.0/23 (max: 24)
   15: 185.73.182.0/23 (max: 24)
   16: 185.88.38.0/24 (max: 24)
   17: 185.75.132.0/23 (max: 24)
   18: 185.75.134.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/GjYhEMG6s0gRjMP--e28z6xy7gI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43841540 (0x29cf804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Apr 24 05:37:15 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=1a362110c1bab348118cc3fef9edbccfac72ee02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:6f:02:ab:45:68:56:df:a7:7b:e1:fa:2d:
                    82:02:34:a4:a9:44:4b:3a:62:81:0a:10:32:01:bd:
                    f3:a2:7a:07:b1:f0:8f:e2:73:de:30:a9:f5:50:17:
                    96:f8:e9:1b:fc:5d:2e:95:f3:a0:a7:68:40:b3:68:
                    37:f1:c2:1d:96:f7:68:fd:3c:f1:91:cf:0b:85:98:
                    ea:95:29:17:6c:1a:c9:9b:2b:16:66:60:6e:37:4e:
                    5b:44:24:14:2a:db:78:3e:54:3e:19:dc:65:3f:b3:
                    cf:1c:92:99:13:9c:e4:46:e8:c5:5e:0b:53:84:4f:
                    13:e5:6f:87:69:f4:75:2c:84:48:a8:75:f7:29:4c:
                    d0:3e:26:18:d1:39:5b:8e:76:20:f2:22:ef:22:a9:
                    ad:76:d1:f1:66:b2:87:39:0d:8e:1b:dc:da:5c:50:
                    08:8e:7b:05:c2:6d:92:55:a5:18:14:ea:fa:4b:46:
                    9a:ca:6b:36:2a:ef:c2:23:a8:33:e9:85:b6:f6:21:
                    6a:d1:d4:18:30:e8:ab:29:1d:d2:d1:04:0d:a4:7e:
                    da:66:de:c7:5e:40:8f:ac:09:06:1a:32:6e:67:ea:
                    04:bd:c4:a8:be:72:57:2d:e9:ba:23:7e:d0:4e:16:
                    75:67:4f:bc:af:62:73:41:be:c8:73:e0:cc:b8:c6:
                    11:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1A:36:21:10:C1:BA:B3:48:11:8C:C3:FE:F9:ED:BC:CF:AC:72:EE:02
            X509v3 Authority Key Identifier: 
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/GjYhEMG6s0gRjMP--e28z6xy7gI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.73.182.0/23
                  185.75.132.0-185.75.134.255
                  185.76.240.0-185.76.242.255
                  185.81.172.0-185.81.174.255
                  185.81.184.0/24
                  185.81.187.0/24
                  185.88.38.0/24
                  185.89.104.0/23
                  185.89.108.0/22
                  185.95.101.0-185.95.103.255
                  185.96.38.0/24
                  185.96.80.0/24
                  185.97.1.0/24
                  185.97.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:9c:bd:bc:bd:97:ca:f9:76:42:34:7d:09:51:b3:57:9a:a8:
         a9:02:d0:08:7f:b8:40:21:99:80:47:6d:17:39:6f:b0:b4:3b:
         fd:c7:01:6c:79:b0:14:5e:e8:5d:d7:51:cd:1a:e6:4b:69:35:
         ce:07:c5:6f:4a:e8:0b:a6:aa:48:61:bb:22:6d:2d:5f:3b:a8:
         45:ac:83:2d:69:2b:8b:7b:31:4d:2a:d2:95:ea:8f:8e:e9:7f:
         39:0c:05:0b:a5:ab:0b:8d:17:2b:1e:6e:bf:42:bf:39:ae:ff:
         b3:e9:96:ce:42:b8:9b:34:08:dd:91:07:b7:1c:69:68:0c:45:
         30:f3:ec:14:d1:16:f9:f4:1b:48:99:d8:29:50:65:e1:a9:a5:
         be:f7:aa:dc:98:27:df:e4:b5:86:a6:dc:cd:65:95:cc:dd:8e:
         a0:9d:37:36:64:d3:53:08:4b:81:88:b9:70:42:e4:ed:81:12:
         5c:bf:43:62:03:81:9e:84:13:e2:56:45:84:88:ed:3c:21:2c:
         48:33:64:8c:b7:5e:14:38:35:56:11:37:2e:22:16:50:b0:2f:
         7d:e7:9b:6e:1b:c0:59:7d:9b:99:f5:c6:ed:6b:d1:78:cf:0a:
         4b:44:08:ee:4b:36:0c:4e:83:93:44:6d:2a:cb:c2:8d:0b:7a:
         6f:b7:86:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:39:21 2021 by LibreSSL & rpki-client.