Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/C3HELizyIMdjdHx-s6fCrnVGQlA.roa (download)

Subject key identifier:   0B:71:C4:2E:2C:F2:20:C7:63:74:7C:7E:B3:A7:C2:AE:75:46:42:50 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS61071
Prefixes:
    1: 95.158.144.0/24 maxlen: 24
    2: 185.18.230.0/23 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/C3HELizyIMdjdHx-s6fCrnVGQlA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149916127 (0x8ef89df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 08:05:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b71c42e2cf220c763747c7eb3a7c2ae75464250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:02:ea:e8:e6:bf:30:09:0c:30:a5:6f:75:2d:
                    ae:c8:5f:69:67:bf:17:e2:35:c9:b9:45:06:97:e5:
                    ff:4c:35:2c:5d:b4:09:50:55:d3:ff:68:f5:d2:a5:
                    0a:2d:e1:38:e2:00:49:ed:cb:e7:15:fa:f8:73:d3:
                    1a:c8:56:d5:44:0c:6f:b5:e4:f4:6b:df:52:c3:7a:
                    7e:81:91:98:f9:7c:bb:c6:6c:02:34:9e:42:9f:7f:
                    c9:97:9f:5e:7a:4b:cb:0e:1f:d1:6b:40:3b:c2:22:
                    86:b7:af:5f:74:60:ef:67:04:a9:e7:31:91:ac:9f:
                    fa:d6:f3:bc:41:4d:5c:ba:00:3b:ab:4f:82:f4:5e:
                    12:88:a0:bc:7b:4e:30:66:6c:65:7c:95:8d:8c:e2:
                    fd:35:61:1f:7c:07:e9:f3:c6:d0:d2:b3:fe:17:4c:
                    f8:cb:81:3a:43:a3:6d:eb:47:07:40:3c:f7:ec:23:
                    00:15:9f:cd:c4:66:2b:0d:f8:06:41:5d:28:d0:60:
                    f9:67:82:52:9c:dd:23:e8:cd:52:9b:54:82:44:ed:
                    e0:0c:2e:a3:43:12:ff:9d:eb:90:8d:25:cd:21:03:
                    21:2b:3c:86:69:38:1c:5f:d0:cd:e2:dd:0e:8a:c7:
                    75:49:27:30:99:67:7a:5e:9f:94:f1:05:0c:38:6c:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0B:71:C4:2E:2C:F2:20:C7:63:74:7C:7E:B3:A7:C2:AE:75:46:42:50
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/C3HELizyIMdjdHx-s6fCrnVGQlA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.158.144.0/24
                  185.18.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:94:08:62:2d:69:7a:2c:1b:af:d6:67:76:52:c2:ee:6f:0a:
         41:b9:ee:81:17:ed:b2:32:97:03:6d:fe:47:3b:96:e1:27:05:
         04:03:df:af:3f:d9:46:6c:6e:2e:a8:34:4e:d7:0f:50:8a:c9:
         97:9d:77:22:26:4c:d4:81:86:a9:ba:37:3b:47:e1:7c:a9:54:
         da:7e:3f:e5:eb:37:35:a5:e8:f4:b1:0d:6a:0c:a1:9e:bf:3d:
         e5:b0:6a:cf:38:da:5e:45:ed:d6:44:db:a9:92:4a:67:8a:b5:
         78:84:4c:a4:1a:49:3d:5f:f6:f1:b3:52:a9:3e:a9:98:ca:24:
         cc:7c:ac:72:2e:60:14:3e:84:b9:83:14:52:d3:49:8c:bd:a5:
         15:1c:a1:f5:89:2e:20:12:72:58:b4:86:ef:fd:49:e1:15:74:
         f3:50:8e:bd:6a:48:b0:6b:c5:8f:bc:07:8c:73:b5:e2:7d:d8:
         9b:f4:37:53:11:c3:1e:72:d6:74:ee:98:0b:31:6e:11:8b:41:
         fb:13:34:22:91:1c:5c:13:2c:65:02:a7:08:9d:a0:af:d0:dd:
         81:c4:72:f7:25:65:fa:28:93:6d:6a:3b:a6:53:b7:fc:4b:e8:
         31:28:6b:a4:86:68:35:4f:a9:35:c4:78:36:2f:db:e7:09:7b:
         c2:f4:d2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 10:26:27 2022 by LibreSSL & rpki-client.