Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/JgA-RwvSKT_HmkZEACCFLb0-znc.roa (download)

Subject key identifier:   26:00:3E:47:0B:D2:29:3F:C7:9A:46:44:00:20:85:2D:BD:3E:CE:77 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS197168
Prefixes:
    1: 95.158.142.0/23 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/JgA-RwvSKT_HmkZEACCFLb0-znc.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96508104 (0x5c098c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 02:43:28 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=26003e470bd2293fc79a46440020852dbd3ece77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:44:d9:13:0c:b1:4e:0a:e1:49:01:c4:f9:
                    0d:7b:27:17:ab:8d:74:bf:bc:97:70:a0:a9:7c:39:
                    60:0e:63:c8:72:f5:e7:35:56:80:7a:05:ed:32:6e:
                    45:60:21:96:c1:3a:99:36:65:63:59:f6:57:8d:1d:
                    0d:5c:8d:c1:2b:cd:24:10:54:ed:b5:c8:9c:24:c2:
                    07:bb:96:7c:41:eb:d1:57:6d:50:64:05:ec:aa:98:
                    45:bf:13:0e:4f:fb:e2:f4:c9:c7:35:b2:af:34:bd:
                    a9:d3:c6:e2:f3:d5:34:29:c2:75:2f:8c:9f:8c:95:
                    ec:55:69:2f:63:d9:8d:7d:e6:c5:d9:15:2c:8f:2e:
                    72:80:c7:60:c8:a5:ef:c6:ef:d4:38:25:51:6f:63:
                    c6:c5:40:b8:97:40:f0:3a:a1:0e:7d:2d:c7:ec:40:
                    cf:98:56:0a:5d:0b:27:c6:37:11:5f:4a:87:e2:09:
                    db:d0:63:39:fb:b2:49:36:57:a2:2a:9e:3f:f7:c1:
                    f5:bc:39:eb:11:7f:25:de:c4:78:4d:30:0b:8c:0a:
                    e7:13:ea:5c:4a:29:ef:3a:61:77:fa:11:7d:56:7f:
                    86:7f:8a:34:45:46:05:ba:f1:2e:8a:de:09:84:30:
                    c5:30:c7:6e:b3:0d:4e:a8:a7:38:c2:43:bf:14:8b:
                    da:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                26:00:3E:47:0B:D2:29:3F:C7:9A:46:44:00:20:85:2D:BD:3E:CE:77
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/JgA-RwvSKT_HmkZEACCFLb0-znc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.158.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:f8:52:69:6e:44:b1:c6:57:f1:40:a8:97:6e:73:7c:38:c3:
         a9:32:52:ba:04:aa:b3:33:83:b4:30:5a:77:b9:cc:53:fe:1c:
         88:64:77:57:e9:49:8c:01:9e:f4:e7:e0:46:a1:f7:46:31:0e:
         73:f6:a1:a9:e7:40:b6:06:44:6c:8c:14:6d:e5:07:52:ba:36:
         10:90:bf:15:89:6e:87:36:2b:99:4f:fd:27:29:78:b6:9f:c2:
         e6:e9:43:9a:7a:31:69:b5:4e:c8:b6:61:22:0c:e2:43:06:b5:
         d1:f3:a2:ec:49:73:8e:10:5e:3a:a1:be:1e:1d:f6:53:0a:b9:
         ed:28:9f:7c:a9:61:15:81:f1:29:50:25:62:11:5d:ad:97:c6:
         aa:ba:e6:24:82:cf:a2:b7:a2:db:30:9e:7d:04:72:ef:60:86:
         b4:3b:f1:6f:11:19:1b:ba:fc:a8:15:43:28:5b:61:d0:69:3d:
         99:88:63:9c:c5:ea:26:b8:c8:b4:2a:68:b8:b0:4a:99:8b:e3:
         ec:ac:90:a7:94:0c:cf:f4:40:bc:96:12:3a:86:27:c7:cd:59:
         27:56:38:e5:04:13:7a:71:ed:4c:ea:e0:2f:24:33:87:2a:5b:
         ab:1a:2c:69:09:12:fc:2a:51:75:c7:50:39:68:fe:b8:09:ea:
         83:7b:db:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:51:58 2021 by LibreSSL & rpki-client.