Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/TQaWQJsHdl5bWhpBPF1gVzyQkMY.roa (download)

Subject key identifier:   4D:06:96:40:9B:07:76:5E:5B:5A:1A:41:3C:5D:60:57:3C:90:90:C6 
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
asID:                     AS174
Prefixes:
    1: 195.216.182.0/23 (max: 32)
    2: 195.216.182.0/24 (max: 32)
    3: 195.216.183.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/TQaWQJsHdl5bWhpBPF1gVzyQkMY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159841560 (0x986fd18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
        Validity
            Not Before: May 29 12:01:52 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=4d0696409b07765e5b5a1a413c5d60573c9090c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:80:69:b4:fa:c7:e8:54:2e:30:50:f6:5b:
                    ba:42:94:8e:75:6e:30:be:2a:ff:eb:62:8c:bc:21:
                    0b:1a:f3:b3:6b:fe:da:9c:31:ab:39:45:35:37:7a:
                    b2:db:df:6e:91:61:b1:7b:a1:b7:73:b6:2c:b5:82:
                    54:f9:c4:78:f7:b7:a3:0c:18:ba:a3:27:e7:28:ff:
                    b3:6c:6a:b3:4f:6d:10:ac:e6:e5:94:a7:7d:57:9f:
                    f9:42:16:70:d9:78:5b:d6:0b:c1:6e:f2:2a:93:25:
                    0e:a3:3c:33:65:64:dc:9d:20:b4:6e:52:86:a3:e5:
                    5f:cb:b6:a5:88:62:6b:1d:88:f8:12:07:8e:40:47:
                    32:ee:fe:e3:eb:e5:ac:72:b8:27:25:c7:dd:bf:dd:
                    5e:9a:cf:47:98:fb:6c:04:66:fe:e3:f1:71:9d:cc:
                    0a:ec:d6:56:3c:d3:22:ae:94:c9:6d:42:64:29:ab:
                    6a:a0:c7:65:22:a1:31:c2:b7:9f:ac:03:c0:1f:ac:
                    08:1b:37:34:48:8e:c7:4f:ae:6e:39:51:91:58:a6:
                    66:f2:71:07:25:99:a1:34:50:4b:00:67:7f:42:60:
                    b1:ec:0c:f3:f3:b4:69:8e:62:49:f6:5e:d0:f2:8c:
                    36:d1:3d:59:01:c9:ca:b8:1f:ad:0b:d7:99:d4:e9:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4D:06:96:40:9B:07:76:5E:5B:5A:1A:41:3C:5D:60:57:3C:90:90:C6
            X509v3 Authority Key Identifier: 
                keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/TQaWQJsHdl5bWhpBPF1gVzyQkMY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.216.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:b6:db:62:41:af:af:d5:5e:f5:db:e1:d8:8b:1d:97:fa:a5:
         ff:6b:01:a8:cb:60:c1:d0:dd:93:54:5a:66:b5:cc:42:74:de:
         0b:8e:bd:1f:9d:81:19:1c:c6:ce:65:eb:34:cf:c4:66:d8:3b:
         e8:f8:11:93:30:aa:38:a1:13:06:8e:bd:d0:a3:c5:b9:ba:a3:
         bd:e9:64:7c:cc:4c:45:bb:d8:83:5e:24:d6:1c:20:41:eb:e3:
         b1:5e:2d:90:7e:37:d8:1d:49:96:42:fa:75:4c:91:5b:4c:e9:
         80:a8:7f:ce:45:86:05:29:dc:72:10:bc:63:3e:5f:4c:f1:69:
         60:17:17:fc:2f:b6:44:6e:6d:7a:31:26:12:a6:30:c1:db:3e:
         e0:70:3f:e8:79:39:ea:66:12:51:21:e6:0e:05:22:4f:64:12:
         bd:e5:74:09:2d:eb:4e:5e:4d:0a:9f:ca:86:63:62:0e:ab:47:
         06:ff:9f:5e:a6:a8:98:b0:48:dc:69:29:01:80:71:4a:66:04:
         b4:85:b2:dc:5b:a1:3e:ee:01:b3:91:35:14:0d:c6:12:99:80:
         63:c0:8e:e1:6e:b6:8a:f4:21:1e:1e:bc:d9:1b:a9:4f:99:ab:
         61:50:07:d5:07:24:cb:89:f9:30:2d:8f:87:d8:d1:10:af:71:
         9c:af:3b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 12:05:01 2021 by LibreSSL & rpki-client.