Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/cuh9FqtI0VJ2HZ6k6J0DAcBMBAQ.roa (download)

Subject key identifier:   72:E8:7D:16:AB:48:D1:52:76:1D:9E:A4:E8:9D:03:01:C0:4C:04:04 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS51614
Prefixes:
    1: 95.158.147.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/cuh9FqtI0VJ2HZ6k6J0DAcBMBAQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96108621 (0x5ba804d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 02:43:23 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=72e87d16ab48d152761d9ea4e89d0301c04c0404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fe:3b:ef:a3:ee:f2:a9:fa:aa:fa:55:dd:4b:
                    6f:0d:a6:21:6e:72:88:b4:3a:88:d4:c0:fc:66:7b:
                    b3:ce:74:9d:3d:1f:ad:8d:b7:8a:30:66:54:55:29:
                    09:ab:97:0b:43:b7:a0:96:2f:f4:a8:7c:6f:d8:cc:
                    ec:7e:57:8e:42:be:23:5b:90:e6:ac:e1:1e:1a:c0:
                    6b:56:c6:2c:80:0a:9b:82:44:67:98:bf:35:28:96:
                    c0:d5:0b:e5:8c:55:4c:2b:13:e4:52:40:d8:65:94:
                    8c:65:a3:6d:c8:ac:ce:6c:1b:b0:aa:63:21:ad:9e:
                    22:3f:35:76:81:b8:b9:4f:97:31:a8:9c:55:fe:6f:
                    2b:2a:21:9e:f4:a1:44:5d:22:64:4d:2b:22:ff:e6:
                    39:3e:4b:05:3c:ba:b7:37:17:1d:7e:aa:0a:7f:8f:
                    17:fc:39:1e:ce:ea:1e:94:72:f4:29:c6:c1:4f:f8:
                    0c:15:68:8d:6e:b1:e3:ef:92:1f:94:1a:66:4b:c9:
                    d8:e8:4e:4d:13:51:9c:51:4c:e7:35:e5:6a:ae:37:
                    2a:a6:c3:a5:e3:ab:65:79:4a:80:e5:a8:1f:fc:f0:
                    9b:84:ce:dd:63:59:b4:dd:c6:86:f5:85:35:57:22:
                    8b:4c:65:f9:e4:aa:07:b0:b9:25:58:25:60:3a:c8:
                    f1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                72:E8:7D:16:AB:48:D1:52:76:1D:9E:A4:E8:9D:03:01:C0:4C:04:04
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/cuh9FqtI0VJ2HZ6k6J0DAcBMBAQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.158.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:2e:a4:80:49:72:6b:1a:fa:3e:85:42:f6:00:e2:d2:2f:7b:
         b0:2b:ae:b6:4a:19:46:32:15:94:be:62:4e:3b:dd:88:51:c2:
         05:ee:6d:7b:8f:db:54:41:33:51:d0:57:fb:ae:f9:0d:e0:32:
         7d:cc:69:f7:63:94:84:cf:85:92:9e:8b:64:85:35:09:0b:86:
         81:61:40:4a:84:2c:13:df:4a:02:6a:00:a4:a2:f9:4d:e8:20:
         a2:46:54:89:7d:cc:eb:3e:f0:6c:34:65:ec:95:bd:87:99:ee:
         dc:9f:49:81:18:a5:57:a8:c3:d6:b4:ee:d5:da:b8:02:72:72:
         c8:d3:60:ab:7f:81:58:50:fd:a2:60:af:11:0b:01:91:12:27:
         f9:2f:53:1f:7f:07:d5:0a:30:f0:6c:2c:64:47:4e:f7:13:98:
         20:b4:fb:51:45:60:c7:90:08:0d:b8:cb:ef:db:3f:e7:0a:90:
         49:07:55:37:90:47:56:00:9c:ec:52:4e:1e:64:df:b7:6d:ae:
         a2:dd:99:d2:3c:56:5f:59:60:60:a3:de:16:6f:23:79:79:65:
         6a:1d:39:aa:07:5f:68:09:75:33:b6:5b:97:ae:74:b4:62:a6:
         5c:19:bb:7c:62:70:9f:66:22:2c:b9:9a:59:e6:aa:b0:5d:fa:
         db:a1:d8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----