Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/8c/a40bc2-4b4b-47de-b08c-629b61782f5d/1/4Cmu9wIeWGv63pFwYeW3RE7fbZw.roa (download)

Subject key identifier:   E0:29:AE:F7:02:1E:58:6B:FA:DE:91:70:61:E5:B7:44:4E:DF:6D:9C 
Authority key identifier: 5C:10:03:18:76:23:9D:4A:2C:42:6C:DF:B8:BC:0F:53:9C:BD:C2:D1
asID:                     AS174
Prefixes:
    1: 195.88.24.0/23 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/8c/a40bc2-4b4b-47de-b08c-629b61782f5d/1/4Cmu9wIeWGv63pFwYeW3RE7fbZw.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75208411 (0x47b96db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c10031876239d4a2c426cdfb8bc0f539cbdc2d1
        Validity
            Not Before: Jun 14 09:10:05 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e029aef7021e586bfade917061e5b7444edf6d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:ae:04:32:49:66:58:b0:85:31:63:e1:44:
                    fb:72:ee:aa:aa:7e:0a:2e:3c:30:81:31:2c:f1:fd:
                    ac:4a:1a:37:65:38:78:43:30:8b:e8:dc:50:3e:77:
                    dc:7b:c8:da:0f:62:5e:6c:a0:2c:51:1d:9f:8a:ab:
                    bf:c8:33:e0:1b:ab:bc:e2:ba:f3:f9:0f:39:ac:64:
                    90:89:62:ef:99:6e:f8:97:8d:a5:15:75:ce:8c:09:
                    13:8a:12:4c:5f:34:0c:5a:38:46:56:5e:54:01:a9:
                    01:52:ea:a8:2d:e9:e5:5c:5c:70:81:03:9b:4a:7d:
                    e3:49:fe:dd:8a:ed:5d:36:c5:e4:81:a0:a5:48:e9:
                    72:36:60:70:82:c2:13:19:20:fc:e7:a6:e4:3c:54:
                    8b:84:3e:f6:83:f6:ea:5a:a0:2d:bb:91:7c:a3:ab:
                    76:ad:47:16:b5:8b:68:9f:11:55:67:3f:61:04:fe:
                    89:24:39:3f:3b:f0:64:64:1d:7b:a7:dc:16:34:1c:
                    f4:69:3c:e9:6d:20:10:5f:07:46:17:a4:bb:26:a9:
                    d0:01:32:16:17:b2:58:30:e0:ff:4a:a4:77:18:8d:
                    ae:4a:06:22:57:2a:74:21:4a:15:fc:ff:de:5b:aa:
                    88:2a:e5:2f:58:62:79:81:4c:43:f8:65:04:a2:c0:
                    98:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E0:29:AE:F7:02:1E:58:6B:FA:DE:91:70:61:E5:B7:44:4E:DF:6D:9C
            X509v3 Authority Key Identifier: 
                keyid:5C:10:03:18:76:23:9D:4A:2C:42:6C:DF:B8:BC:0F:53:9C:BD:C2:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBADGHYjnUosQmzfuLwPU5y9wtE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a40bc2-4b4b-47de-b08c-629b61782f5d/1/4Cmu9wIeWGv63pFwYeW3RE7fbZw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a40bc2-4b4b-47de-b08c-629b61782f5d/1/XBADGHYjnUosQmzfuLwPU5y9wtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:03:95:74:54:e7:92:dd:a1:36:97:7f:36:b6:1f:f4:60:46:
         26:de:8e:62:fb:09:1c:d7:c5:96:8e:75:79:e3:c2:36:36:23:
         a4:e5:fd:fc:fe:4f:db:42:14:6f:e7:f5:f9:ee:08:d1:59:e5:
         3c:5e:94:be:8e:33:09:b0:d4:5c:b9:bd:a4:c4:3a:a1:b8:79:
         61:1d:3d:80:45:f6:1c:11:81:30:09:94:c7:5e:60:3a:f2:11:
         0c:84:19:c1:68:21:5f:58:a0:5b:1c:4c:27:b7:67:16:a1:a2:
         c1:93:79:17:04:a7:5d:13:fe:9f:2a:67:81:12:0a:8f:d3:cd:
         a5:18:f9:9d:23:ca:ab:43:28:fa:56:19:61:75:d7:82:f7:1f:
         2b:c0:9a:07:f4:74:28:99:19:62:65:fc:d1:aa:ee:48:3d:8e:
         f9:09:36:8d:e0:e3:e3:4a:f4:76:1f:08:9c:c1:7c:dc:89:29:
         54:28:3a:87:80:ad:2f:68:8d:bd:15:6b:f0:5e:17:5d:90:1c:
         40:75:fe:8d:21:ce:e1:c3:f9:30:7c:03:40:72:69:e2:e2:6f:
         8b:88:f0:c6:70:1d:be:ab:96:c9:f2:28:ec:1a:15:71:96:98:
         2a:39:2d:a1:23:39:9a:15:8f:c3:d2:0f:92:bd:60:b3:a7:2a:
         c8:bc:c8:fd
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBHuW2zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YzEwMDMxODc2MjM5ZDRhMmM0MjZjZGZiOGJjMGY1MzljYmRjMmQxMB4XDTIxMDYx
NDA5MTAwNVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTAyOWFlZjcwMjFl
NTg2YmZhZGU5MTcwNjFlNWI3NDQ0ZWRmNmQ5YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMZqrgQySWZYsIUxY+FE+3Luqqp+Ci48MIExLPH9rEoaN2U4
eEMwi+jcUD533HvI2g9iXmygLFEdn4qrv8gz4BurvOK68/kPOaxkkIli75lu+JeN
pRV1zowJE4oSTF80DFo4RlZeVAGpAVLqqC3p5VxccIEDm0p940n+3YrtXTbF5IGg
pUjpcjZgcILCExkg/Oem5DxUi4Q+9oP26lqgLbuRfKOrdq1HFrWLaJ8RVWc/YQT+
iSQ5PzvwZGQde6fcFjQc9Gk86W0gEF8HRhekuyap0AEyFheyWDDg/0qkdxiNrkoG
IlcqdCFKFfz/3luqiCrlL1hieYFMQ/hlBKLAmIMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTgKa73Ah5Ya/rekXBh5bdETt9tnDAfBgNVHSMEGDAWgBRcEAMYdiOdSixC
bN+4vA9TnL3C0TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hCQURHSFlqblVvc1FtemZ1THdQVTV5OXd0RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGMvYTQwYmMyLTRiNGItNDdkZS1iMDhjLTYyOWI2MTc4MmY1ZC8x
LzRDbXU5d0llV0d2NjNwRndZZVczUkU3ZmJady5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMv
YTQwYmMyLTRiNGItNDdkZS1iMDhjLTYyOWI2MTc4MmY1ZC8xL1hCQURHSFlqblVv
c1FtemZ1THdQVTV5OXd0RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcNYGDANBgkqhkiG9w0BAQsFAAOC
AQEApwOVdFTnkt2hNpd/NrYf9GBGJt6OYvsJHNfFlo51eePCNjYjpOX9/P5P20IU
b+f1+e4I0VnlPF6Uvo4zCbDUXLm9pMQ6obh5YR09gEX2HBGBMAmUx15gOvIRDIQZ
wWghX1igWxxMJ7dnFqGiwZN5FwSnXRP+nypngRIKj9PNpRj5nSPKq0Mo+lYZYXXX
gvcfK8CaB/R0KJkZYmX80aruSD2O+Qk2jeDj40r0dh8InMF83IkpVCg6h4CtL2iN
vRVr8F4XXZAcQHX+jSHO4cP5MHwDQHJp4uJvi4jwxnAdvquWyfIo7BoVcZaYKjkt
oSM5mhWPw9IPkr1gs6cqyLzI/Q==
-----END CERTIFICATE-----

Generated at Fri Sep 24 12:04:37 2021 by LibreSSL & rpki-client.