Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/45w2NpjXE3KYFWcPzMapGnkau34.roa (download)

Subject key identifier:   E3:9C:36:36:98:D7:13:72:98:15:67:0F:CC:C6:A9:1A:79:1A:BB:7E 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS29582
Prefixes:
    1: 95.158.145.0/24 (max: 24)
    2: 2a00:e200:103::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/45w2NpjXE3KYFWcPzMapGnkau34.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95866669 (0x5b6cf2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 02:43:21 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e39c363698d713729815670fccc6a91a791abb7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d9:7e:14:54:52:09:b1:ff:75:37:15:98:32:
                    c4:c7:56:23:5d:14:78:09:78:74:b2:5e:91:06:f1:
                    0c:0e:1c:89:f2:b9:9c:05:bb:86:a8:3b:cc:2b:d5:
                    2c:69:b5:d9:d8:dd:6f:4e:d5:ca:81:3b:d8:aa:c9:
                    be:87:a6:29:92:0f:c5:de:9e:ec:75:53:6b:6f:d2:
                    96:60:7a:c8:0c:3b:75:3d:5d:0f:4c:50:f2:0b:8a:
                    31:9d:d9:17:51:aa:4c:9c:9b:b3:29:c7:35:ea:aa:
                    46:0c:b0:61:62:15:3c:25:7d:17:07:28:67:a2:af:
                    3c:bc:28:b4:e1:73:a2:d4:ed:12:08:27:34:57:50:
                    1c:3f:8b:97:6d:2e:66:6d:b4:02:df:c9:74:7c:1b:
                    8d:40:38:c4:2e:e9:8e:3b:50:37:1d:97:11:9b:73:
                    87:8a:6c:ba:4e:2f:4f:61:cb:01:56:52:04:09:10:
                    a0:ca:e0:8a:46:17:b9:13:a9:22:8e:33:e6:45:f0:
                    6d:1f:32:b7:37:ad:aa:e4:88:00:6f:1f:c4:91:06:
                    21:c6:14:d7:65:b6:b7:7a:94:1e:d5:e1:fb:38:95:
                    cb:92:9a:ab:e1:48:7a:2b:3f:82:38:ef:cc:b0:05:
                    96:a5:25:b2:aa:89:b4:9e:6a:48:99:7e:ac:73:fc:
                    a8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E3:9C:36:36:98:D7:13:72:98:15:67:0F:CC:C6:A9:1A:79:1A:BB:7E
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/45w2NpjXE3KYFWcPzMapGnkau34.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.158.145.0/24
                IPv6:
                  2a00:e200:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:02:16:3f:c2:d4:05:3d:b9:73:8b:22:93:72:82:9e:ae:d0:
         b2:b9:47:4e:e8:8d:e2:c1:5d:28:f1:8b:88:b5:c5:31:cc:04:
         76:78:73:dc:60:27:a0:73:9f:09:ee:33:64:5f:8b:69:aa:6a:
         88:62:c1:d5:86:ab:73:cc:ac:d2:d6:be:83:f8:8c:fa:9a:3e:
         69:31:44:82:6e:3e:b8:2b:ad:88:e4:f5:78:07:94:47:50:cc:
         e4:1f:2c:30:8d:42:ed:8d:b3:04:e1:56:95:a5:f9:e9:98:e1:
         d1:da:e6:a9:02:0e:4f:db:77:1c:cb:5d:a9:83:bf:55:b7:b3:
         73:76:c1:51:fc:c4:28:99:f8:4e:b1:2f:4f:5a:de:04:c8:aa:
         29:ed:62:f3:2c:a5:d3:30:ad:65:f4:64:b3:66:72:6a:22:34:
         a5:79:5a:07:6f:f4:4a:d5:b9:c8:97:16:84:20:d1:09:5c:b0:
         76:21:a6:db:f9:6d:f6:cb:0b:b4:42:27:3b:3a:d5:52:cb:85:
         13:4d:5d:65:67:d3:df:a3:4e:2f:69:b1:fc:64:73:37:36:ce:
         0d:1e:3c:95:e5:8a:05:1a:a4:ee:31:7c:da:9e:76:0d:8c:e3:
         13:6f:ac:85:a8:d1:17:76:55:0a:43:92:6d:9f:03:47:ea:eb:
         25:1f:f2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:51:57 2021 by LibreSSL & rpki-client.