Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/T_8FHeq6d01gFj9GAYQIS6q1L2I.roa (download)

Subject key identifier:   4F:FF:05:1D:EA:BA:77:4D:60:16:3F:46:01:84:08:4B:AA:B5:2F:62 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS61975
Prefixes:
    1: 95.158.169.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/T_8FHeq6d01gFj9GAYQIS6q1L2I.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96382980 (0x5beb004)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 02:43:28 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=4fff051deaba774d60163f460184084baab52f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9a:b0:4a:f3:f3:e2:f6:15:68:41:c4:4d:ea:
                    52:6f:6f:a2:13:0a:ee:7a:48:54:0b:be:3f:db:1e:
                    1f:45:61:86:05:32:f3:6e:61:05:cd:64:a3:1c:d5:
                    8c:8b:3c:93:03:44:41:78:7f:98:f0:c5:64:52:9e:
                    af:02:d6:89:cf:cf:e3:b1:1a:48:04:0f:c9:de:8a:
                    40:d1:f1:f6:69:11:d6:e6:d9:6b:d4:2f:61:2d:66:
                    5c:7d:c2:44:6d:cb:8c:c5:da:1e:fc:9e:fb:64:f8:
                    bc:5e:d5:e6:f2:47:46:5e:f3:d8:34:aa:be:35:e3:
                    d4:1e:25:34:ab:83:bf:b4:ca:d8:9d:fb:ba:d8:cd:
                    4b:c6:a8:6d:09:1c:19:eb:6b:3f:53:a8:c3:14:e9:
                    6e:c1:e6:9e:f9:77:d2:fb:2b:a9:df:cc:1d:e4:5f:
                    f7:41:27:ca:44:60:f3:c8:4b:79:2f:27:58:6c:38:
                    83:9b:32:75:c1:16:d2:26:5f:86:88:55:53:2f:36:
                    f1:3a:73:19:39:53:bf:b2:6e:4a:18:2e:3e:0d:5b:
                    69:84:6d:99:c6:50:87:da:4c:65:2f:39:35:34:ef:
                    b4:74:94:96:1a:9f:4b:e0:2e:d9:15:30:5c:79:b5:
                    b6:1a:86:e4:b5:fa:62:1f:5f:af:58:f2:1d:4b:61:
                    22:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4F:FF:05:1D:EA:BA:77:4D:60:16:3F:46:01:84:08:4B:AA:B5:2F:62
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/T_8FHeq6d01gFj9GAYQIS6q1L2I.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.158.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:3f:e5:69:f4:59:60:f6:b7:28:b0:d5:80:d0:77:2f:83:0b:
         b3:75:20:70:75:91:ed:b1:5f:70:82:29:b8:e5:c1:08:2b:40:
         c4:f5:52:7e:c9:05:fb:e6:da:45:d4:2f:07:f8:5d:fd:d4:ac:
         87:2b:b5:8b:7e:ad:83:49:19:78:dc:50:b0:b7:68:34:16:f0:
         8c:56:37:6c:ac:a1:de:3d:80:92:46:8b:13:22:a1:ab:a0:06:
         34:d2:a5:e3:19:4c:f7:df:90:01:e4:c6:da:34:6f:1a:f9:23:
         4d:04:9d:d9:28:29:c6:90:ff:1b:a1:9d:ee:59:5b:84:c7:0a:
         0b:7c:75:54:65:d7:a9:59:73:71:9f:a3:b9:2b:c1:af:b6:33:
         04:52:14:d3:53:39:bc:80:3d:de:70:45:f9:6a:66:a5:24:25:
         e2:f1:3c:8b:25:a2:cc:bb:ea:8d:af:61:03:fc:d7:8b:d2:79:
         e9:24:b2:95:da:92:48:03:7d:df:03:76:bb:b0:93:07:76:e1:
         1f:a9:03:ec:67:c2:eb:2e:68:48:00:29:c3:23:39:4f:ac:63:
         5e:ef:c3:1b:2b:3a:aa:87:af:39:44:5b:76:bd:b0:ef:80:97:
         0e:f9:ea:e4:dc:9f:1a:a7:b3:8c:ca:81:d4:6e:59:f7:a1:2e:
         bc:9e:2d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:51:58 2021 by LibreSSL & rpki-client.