Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6Y158Sm4kuLt1awzZ7WmYzs9JHs.roa (download)

Subject key identifier:   E9:8D:79:F1:29:B8:92:E2:ED:D5:AC:33:67:B5:A6:63:3B:3D:24:7B 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS8967
Prefixes:
    1: 95.158.156.0/22 (max: 24)
    2: 46.35.182.0/23 (max: 24)
    3: 95.158.172.0/22 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6Y158Sm4kuLt1awzZ7WmYzs9JHs.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95729278 (0x5b4b67e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 02:43:20 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e98d79f129b892e2edd5ac3367b5a6633b3d247b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:06:36:c9:c9:9d:cc:18:b6:e1:9d:ad:4a:
                    45:41:81:c7:e8:fa:b1:cf:0b:30:90:1e:fc:00:07:
                    28:93:12:f1:ca:61:7b:9d:34:44:ba:1a:d0:fd:b5:
                    0d:4f:ca:17:96:16:37:08:42:bf:55:67:76:13:d2:
                    34:9c:99:9c:c4:65:33:05:65:20:94:a0:88:14:7c:
                    77:e8:c0:82:ec:63:ca:84:75:4b:e7:e5:fc:2e:f5:
                    e3:e9:94:24:e8:ea:63:41:6a:3d:a9:dc:a1:98:55:
                    01:c2:b4:bb:71:84:6c:40:4f:dc:84:b3:cd:33:6d:
                    a0:10:17:68:44:f8:6d:84:53:09:da:03:3e:78:52:
                    74:0f:e9:ac:05:d2:92:8f:ef:d0:4f:f8:91:1c:c6:
                    3d:ad:c7:c5:70:ae:47:a0:1e:c1:82:b0:ef:8b:fe:
                    80:bd:a2:44:3a:6c:2d:67:53:f6:96:55:e0:07:33:
                    96:6b:95:c2:02:cc:3f:80:8a:9b:19:02:3f:2f:f2:
                    04:b3:06:c2:a7:7c:dd:31:8c:10:03:39:ac:17:bd:
                    48:df:3d:92:db:07:f7:ae:1e:a2:93:6a:23:6e:5c:
                    4e:fb:4f:96:24:bf:86:1a:e4:0a:84:51:40:9f:18:
                    10:51:c8:67:82:a0:89:7e:4c:a2:c5:58:5e:84:76:
                    a9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E9:8D:79:F1:29:B8:92:E2:ED:D5:AC:33:67:B5:A6:63:3B:3D:24:7B
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6Y158Sm4kuLt1awzZ7WmYzs9JHs.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.35.182.0/23
                  95.158.156.0/22
                  95.158.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:64:1f:6c:9b:c1:15:a8:dd:e4:36:a0:d8:20:41:66:2c:5d:
         13:77:38:3d:f5:8f:e0:38:f8:b9:4d:98:e8:9c:6d:0f:85:6f:
         3d:dc:ed:60:d2:21:c4:d8:90:ce:d8:a9:2a:b3:33:f3:b4:98:
         38:a3:1e:68:df:08:dd:4c:6e:22:7a:4d:3c:bd:f2:fd:ac:4f:
         96:d1:37:d0:08:1d:98:47:52:64:25:b5:c8:56:bb:95:97:58:
         c3:3a:a9:07:b0:cd:fe:dd:bd:41:27:6a:82:3c:d0:00:a8:fd:
         a2:d9:d7:5e:a8:d7:b2:3b:b5:d8:55:ec:1d:92:95:e7:0c:8f:
         83:16:93:94:77:52:24:41:e7:0f:f1:f1:55:d3:a3:e2:98:bc:
         bc:d1:47:02:99:6a:7b:f5:83:91:76:dc:78:d8:37:6a:d1:24:
         27:9f:99:61:68:9b:e1:bd:d4:d7:5b:85:bc:00:fb:ae:54:c0:
         fe:3e:ed:10:07:56:e4:12:51:52:eb:4c:5b:0e:23:04:ff:05:
         00:3d:20:09:99:b2:23:8f:0c:6f:13:dc:74:27:e3:92:57:5f:
         0b:d6:dd:22:19:0b:99:f3:07:c5:29:18:ca:6f:44:94:43:e8:
         29:7e:8d:25:f1:e5:1f:8a:6f:c3:b9:bc:a6:62:56:44:13:33:
         ec:ff:dc:8d
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBbS2fjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YmVjOTAzMGM3MGEzZDQxOTJkNTljMjhkY2M4ZDU0NzY5NDM0MGIzMB4XDTIxMDEw
MTAyNDMyMFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTk4ZDc5ZjEyOWI4
OTJlMmVkZDVhYzMzNjdiNWE2NjMzYjNkMjQ3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM93BjbJyZ3MGLbhna1KRUGBx+j6sc8LMJAe/AAHKJMS8cph
e500RLoa0P21DU/KF5YWNwhCv1VndhPSNJyZnMRlMwVlIJSgiBR8d+jAguxjyoR1
S+fl/C714+mUJOjqY0FqPancoZhVAcK0u3GEbEBP3ISzzTNtoBAXaET4bYRTCdoD
PnhSdA/prAXSko/v0E/4kRzGPa3HxXCuR6AewYKw74v+gL2iRDpsLWdT9pZV4Acz
lmuVwgLMP4CKmxkCPy/yBLMGwqd83TGMEAM5rBe9SN89ktsH964eopNqI25cTvtP
liS/hhrkCoRRQJ8YEFHIZ4KgiX5MosVYXoR2qT0CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTpjXnxKbiS4u3VrDNntaZjOz0kezAfBgNVHSMEGDAWgBTr7JAwxwo9QZLV
nCjcyNVHaUNAszAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzYteVFNTWNLUFVHUzFad28zTWpWUjJsRFFMTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvMzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8x
LzZZMTU4U200a3VMdDFhd3paN1dtWXpzOUpIcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
MzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8xLzYteVFNTWNLUFVH
UzFad28zTWpWUjJsRFFMTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAS4jtgMEAl+enAMEAl+erDANBgkq
hkiG9w0BAQsFAAOCAQEAmWQfbJvBFajd5Dag2CBBZixdE3c4PfWP4Dj4uU2Y6Jxt
D4VvPdztYNIhxNiQztipKrMz87SYOKMeaN8I3UxuInpNPL3y/axPltE30AgdmEdS
ZCW1yFa7lZdYwzqpB7DN/t29QSdqgjzQAKj9otnXXqjXsju12FXsHZKV5wyPgxaT
lHdSJEHnD/HxVdOj4pi8vNFHAplqe/WDkXbceNg3atEkJ5+ZYWib4b3U11uFvAD7
rlTA/j7tEAdW5BJRUutMWw4jBP8FAD0gCZmyI48MbxPcdCfjkldfC9bdIhkLmfMH
xSkYym9ElEPoKX6NJfHlH4pvw7m8pmJWRBMz7P/cjQ==
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:51:57 2021 by LibreSSL & rpki-client.