Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/90/18715e-8aae-4fb5-bd5e-280adb789bcc/1/Zp9bpZGEyrneVI3Sz3yb0GCW3nQ.roa (download)

Subject key identifier:   66:9F:5B:A5:91:84:CA:B9:DE:54:8D:D2:CF:7C:9B:D0:60:96:DE:74 
Authority key identifier: 91:02:84:E2:A7:9E:5F:38:CC:E3:64:AE:0E:F1:C9:0A:89:C5:E5:7B
asID:                     AS398986
Prefixes:
    1: 195.88.226.0/23 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/90/18715e-8aae-4fb5-bd5e-280adb789bcc/1/Zp9bpZGEyrneVI3Sz3yb0GCW3nQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58417870 (0x37b62ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910284e2a79e5f38cce364ae0ef1c90a89c5e57b
        Validity
            Not Before: May 24 10:08:15 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=669f5ba59184cab9de548dd2cf7c9bd06096de74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:27:69:b9:b8:86:35:ec:8f:19:a2:75:13:9d:
                    ef:7d:19:d9:94:ff:6f:85:23:f7:9d:d2:0e:f6:67:
                    4d:6f:7d:a9:9a:7c:af:8b:af:1c:eb:e7:77:ca:60:
                    5c:10:7e:b7:7a:5a:93:c2:25:d1:88:4b:a7:e9:ce:
                    65:e6:2a:30:15:d6:64:d7:64:b0:9d:b8:2d:8c:16:
                    60:1d:90:c5:5a:7b:c0:b0:91:c3:4d:30:48:12:7c:
                    5e:44:e0:ca:6f:25:94:b2:ee:2a:f6:e8:fb:5b:a5:
                    b1:57:21:29:c1:47:a5:4a:23:e8:69:d2:17:ae:73:
                    4b:9f:8a:33:49:f5:e5:e8:1d:12:8e:a9:07:33:e1:
                    59:c7:15:6a:49:3d:f0:8f:eb:92:54:9a:b6:0a:b3:
                    9b:b8:ff:84:d9:c9:f6:bf:8f:f5:c2:66:32:43:85:
                    52:de:b9:7b:af:2d:e7:e4:d5:1f:15:fc:71:15:3c:
                    db:59:ab:65:b9:95:1c:7e:d8:e2:ec:d0:3c:2b:a2:
                    36:ae:94:b8:2c:d4:2e:85:6f:fc:28:9c:da:2c:2f:
                    24:fb:b4:4a:81:60:5a:dc:03:9e:58:7a:02:bd:15:
                    20:e0:8f:cf:c5:2e:d1:fd:83:16:dc:6b:39:31:26:
                    59:ac:ce:53:26:8c:33:04:ca:4f:3e:d2:af:b9:de:
                    11:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                66:9F:5B:A5:91:84:CA:B9:DE:54:8D:D2:CF:7C:9B:D0:60:96:DE:74
            X509v3 Authority Key Identifier: 
                keyid:91:02:84:E2:A7:9E:5F:38:CC:E3:64:AE:0E:F1:C9:0A:89:C5:E5:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQKE4qeeXzjM42SuDvHJConF5Xs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/18715e-8aae-4fb5-bd5e-280adb789bcc/1/Zp9bpZGEyrneVI3Sz3yb0GCW3nQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/18715e-8aae-4fb5-bd5e-280adb789bcc/1/kQKE4qeeXzjM42SuDvHJConF5Xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:d5:86:c8:ad:db:ec:db:18:4e:a1:67:b3:01:91:ad:aa:18:
         fe:10:f5:dd:cd:a8:a8:20:a2:c0:bc:79:21:26:16:dc:8d:e9:
         d5:49:9f:63:60:47:e7:3d:fa:55:0b:10:84:2a:a5:7e:c7:c8:
         37:41:9e:48:ef:9b:65:19:c4:e3:6f:80:64:b5:09:c6:3c:c6:
         8d:9e:6d:09:1f:b9:ae:79:51:ba:e7:0f:c8:4d:93:5b:fc:92:
         49:2b:81:f1:2c:e7:1e:0d:ea:a8:80:65:9d:22:0f:70:db:7d:
         25:eb:57:5f:45:08:56:88:b8:9c:91:a2:da:34:95:0f:7c:36:
         cb:53:ff:90:84:73:d6:ad:f5:da:04:c4:88:68:63:c7:26:69:
         85:ad:da:4b:cd:0c:75:4e:14:2c:0c:18:e5:40:b2:c5:c3:84:
         14:b4:e6:68:cb:55:97:7b:e8:0a:31:a6:0c:b6:21:3c:4f:c2:
         0d:fd:98:6e:4e:da:c8:3b:63:1a:d8:d5:df:64:5b:ae:4f:d8:
         92:41:b6:91:41:31:ec:d0:10:b4:dd:b4:2c:c7:8d:79:9c:88:
         d9:cc:37:87:80:95:61:ab:cf:9c:14:23:eb:7f:77:2a:9d:2d:
         80:54:cb:62:79:9d:13:72:87:e8:d3:37:64:06:57:94:e1:6e:
         47:6b:ed:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:45:55 2021 by LibreSSL & rpki-client.