Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/XakFLMTbzlUW-NYAO-Kkz-B95a0.roa (download)

Subject key identifier:   5D:A9:05:2C:C4:DB:CE:55:16:F8:D6:00:3B:E2:A4:CF:E0:7D:E5:AD 
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
asID:                     AS398217
Prefixes:
    1: 89.36.136.0/24 (max: 24)
    2: 86.107.72.0/24 (max: 24)
    3: 89.32.43.0/24 (max: 24)
    4: 89.38.240.0/24 (max: 24)
    5: 86.105.229.0/24 (max: 24)
    6: 86.105.230.0/24 (max: 24)
    7: 89.46.47.0/24 (max: 24)
    8: 194.41.60.0/24 (max: 24)
    9: 194.41.61.0/24 (max: 24)
   10: 46.102.183.0/24 (max: 24)
   11: 46.102.182.0/24 (max: 24)
   12: 77.81.86.0/24 (max: 24)
   13: 86.105.2.0/24 (max: 24)
   14: 86.106.175.0/24 (max: 24)
   15: 86.106.174.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/XakFLMTbzlUW-NYAO-Kkz-B95a0.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74509469 (0x470ec9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
        Validity
            Not Before: Apr 16 10:05:54 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5da9052cc4dbce5516f8d6003be2a4cfe07de5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:eb:a3:da:c3:d6:f8:62:7c:42:0f:78:81:
                    c0:ea:17:96:e0:7a:4f:ac:64:10:d9:b7:60:d2:48:
                    d5:11:1e:ce:13:15:85:fc:bf:fa:a7:5b:ff:53:f7:
                    69:e9:64:35:37:3f:7e:ba:aa:4c:ef:c6:b4:ce:2c:
                    29:d1:26:67:3d:6c:41:ab:6d:cc:20:04:96:3e:b3:
                    8b:b7:26:47:b2:7d:1f:53:70:e1:95:6c:1c:25:6d:
                    a3:87:43:eb:3f:cb:18:ab:51:2b:9c:dd:78:a5:35:
                    2e:dd:f3:c1:39:45:9f:4b:6f:8a:3f:a2:58:d7:66:
                    bf:5d:a1:28:32:69:de:af:54:a2:6c:00:ac:66:9c:
                    23:00:b1:4c:c8:97:46:07:c3:2a:4d:0f:4c:4e:c2:
                    f9:1a:30:6c:80:99:0d:84:da:e6:cd:21:a9:48:73:
                    a5:75:d9:3d:42:2d:ae:05:9d:8f:6c:aa:fc:f3:24:
                    61:4f:d1:56:70:09:bf:39:6b:87:0d:c7:a9:ad:67:
                    db:f6:c0:b3:f1:2e:ce:fd:f5:ec:0c:68:ca:91:3a:
                    6b:5a:15:5b:90:b3:71:79:19:d4:ea:d4:b6:23:74:
                    80:50:c0:71:1d:8e:f5:19:8e:de:aa:43:67:17:e5:
                    1e:3f:dc:cd:ae:9e:b0:15:f6:64:e9:79:8f:18:ae:
                    5f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5D:A9:05:2C:C4:DB:CE:55:16:F8:D6:00:3B:E2:A4:CF:E0:7D:E5:AD
            X509v3 Authority Key Identifier: 
                keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/XakFLMTbzlUW-NYAO-Kkz-B95a0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.102.182.0/23
                  77.81.86.0/24
                  86.105.2.0/24
                  86.105.229.0-86.105.230.255
                  86.106.174.0/23
                  86.107.72.0/24
                  89.32.43.0/24
                  89.36.136.0/24
                  89.38.240.0/24
                  89.46.47.0/24
                  194.41.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:d8:d3:ac:71:7f:f1:08:b4:72:9a:0e:6e:94:c4:b7:98:cd:
         aa:a1:34:11:f9:1d:32:33:a6:4f:89:eb:ea:89:96:89:ca:75:
         82:34:1e:32:e1:d8:2a:df:36:0a:dc:d4:7c:17:73:0f:85:0c:
         24:b1:88:b8:1f:68:a5:01:b5:4f:53:07:51:21:6b:60:0b:ca:
         0e:10:56:7e:e0:02:09:fb:a5:e7:3d:6e:5f:9c:9f:b2:64:a1:
         a4:47:7f:53:23:38:af:6a:5d:29:3c:ec:56:fa:86:0c:58:68:
         30:5b:e7:13:97:ba:b9:10:31:19:e5:82:77:3b:3c:36:8e:41:
         4f:51:31:e6:dd:5e:77:29:79:12:ff:d2:67:7e:eb:34:7e:59:
         c3:32:a1:4d:d3:0b:d0:7b:49:43:01:61:52:b6:8e:77:ce:eb:
         c3:82:8a:c7:64:5e:7c:4e:bf:6c:e4:5a:33:57:6f:24:e1:26:
         62:45:44:df:3c:ad:69:49:77:29:b8:1e:17:fc:72:33:fc:1e:
         83:2d:3b:c7:b4:b4:9a:3f:12:64:29:de:82:ba:af:f9:24:5e:
         93:d4:10:de:6f:e3:79:8c:0d:9d:e6:ec:97:92:de:0e:e4:d5:
         9a:01:cb:5f:b6:d0:89:b4:81:2e:ad:54:b1:72:a3:81:ee:e8:
         26:d9:49:60
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIEBHDsnTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NGY4MjRkMzJkZjFhNTExM2Q4MjEwMTM0NWQ3ODVhMzhhZGRiZGU1MB4XDTIxMDQx
NjEwMDU1NFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWRhOTA1MmNjNGRi
Y2U1NTE2ZjhkNjAwM2JlMmE0Y2ZlMDdkZTVhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALkZ66Paw9b4YnxCD3iBwOoXluB6T6xkENm3YNJI1REezhMV
hfy/+qdb/1P3aelkNTc/frqqTO/GtM4sKdEmZz1sQattzCAElj6zi7cmR7J9H1Nw
4ZVsHCVto4dD6z/LGKtRK5zdeKU1Lt3zwTlFn0tvij+iWNdmv12hKDJp3q9UomwA
rGacIwCxTMiXRgfDKk0PTE7C+RowbICZDYTa5s0hqUhzpXXZPUItrgWdj2yq/PMk
YU/RVnAJvzlrhw3Hqa1n2/bAs/Euzv317AxoypE6a1oVW5CzcXkZ1OrUtiN0gFDA
cR2O9RmO3qpDZxflHj/cza6esBX2ZOl5jxiuX2kCAwEAAaOCAk0wggJJMB0GA1Ud
DgQWBBRdqQUsxNvOVRb41gA74qTP4H3lrTAfBgNVHSMEGDAWgBSE+CTTLfGlET2C
EBNF14Wjit295TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hQZ2sweTN4cFJFOWdoQVRSZGVGbzRyZHZlVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTEvOWQ2NWJiLWFiNGYtNDNhYS1iYmE4LTQzNzM5NDkzOGM1Mi8x
L1hha0ZMTVRiemxVVy1OWUFPLUtrei1COTVhMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEv
OWQ2NWJiLWFiNGYtNDNhYS1iYmE4LTQzNzM5NDkzOGM1Mi8xL2hQZ2sweTN4cFJF
OWdoQVRSZGVGbzRyZHZlVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBj
BggrBgEFBQcBBwEB/wRUMFIwUAQCAAEwSgMEAS5mtgMEAE1RVgMEAFZpAjAMAwQA
VmnlAwQAVmnmAwQBVmquAwQAVmtIAwQAWSArAwQAWSSIAwQAWSbwAwQAWS4vAwQB
wik8MA0GCSqGSIb3DQEBCwUAA4IBAQBO2NOscX/xCLRymg5ulMS3mM2qoTQR+R0y
M6ZPievqiZaJynWCNB4y4dgq3zYK3NR8F3MPhQwksYi4H2ilAbVPUwdRIWtgC8oO
EFZ+4AIJ+6XnPW5fnJ+yZKGkR39TIzival0pPOxW+oYMWGgwW+cTl7q5EDEZ5YJ3
Ozw2jkFPUTHm3V53KXkS/9Jnfus0flnDMqFN0wvQe0lDAWFSto53zuvDgorHZF58
Tr9s5FozV28k4SZiRUTfPK1pSXcpuB4X/HIz/B6DLTvHtLSaPxJkKd6Cuq/5JF6T
1BDeb+N5jA2d5uyXkt4O5NWaActfttCJtIEurVSxcqOB7ugm2Ulg
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:50:52 2021 by LibreSSL & rpki-client.