Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/eKYSjkkavmhPEVzFrNtMORkT-rg.roa (download)

Subject key identifier:   78:A6:12:8E:49:1A:BE:68:4F:11:5C:C5:AC:DB:4C:39:19:13:FA:B8 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS44247
Prefixes:
    1: 95.158.160.0/22 (max: 24)
    2: 46.35.176.0/22 (max: 24)
    3: 95.158.176.0/21 (max: 24)
    4: 212.21.128.0/24 (max: 24)
    5: 212.21.136.0/23 (max: 24)
    6: 212.21.138.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/eKYSjkkavmhPEVzFrNtMORkT-rg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96058969 (0x5b9be59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 02:43:23 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=78a6128e491abe684f115cc5acdb4c391913fab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:96:49:41:df:6b:33:15:c4:8c:8f:c5:31:
                    be:98:74:e8:c1:17:ea:b3:78:3b:93:01:e9:ab:36:
                    30:2e:20:a1:e5:d1:63:e8:bb:a1:15:41:e4:86:1f:
                    3b:bf:a9:28:70:b2:ba:6a:96:f9:af:59:96:9f:47:
                    fb:f2:14:7d:a0:0d:e9:3b:b0:f5:94:e5:4a:9b:50:
                    da:5e:83:28:1f:9a:9a:de:b3:a3:53:8a:24:d4:cd:
                    20:fd:c3:46:3c:ac:5d:df:96:4d:ae:94:6e:92:8e:
                    7f:56:69:09:b0:6d:88:3c:12:7e:49:31:e9:0b:26:
                    85:61:15:51:3a:87:51:d4:81:b2:18:7f:3c:3b:6d:
                    01:f0:82:a4:5f:69:5b:ed:2d:14:98:cc:da:81:1c:
                    ea:28:b7:bf:61:f6:33:87:2b:25:fd:d9:b3:9c:43:
                    12:22:81:96:74:ea:46:c6:f9:e5:bc:76:59:91:5a:
                    21:a5:96:75:dd:9c:04:a3:32:c2:4f:f0:02:e4:04:
                    99:74:e0:04:83:79:57:8f:b3:24:ba:03:35:fc:e5:
                    98:21:89:1d:05:9e:59:4d:b9:77:94:5b:06:85:13:
                    7c:6a:f8:ed:0b:b1:e9:94:e1:f8:40:ba:bd:6e:d6:
                    ca:fb:1b:0b:87:2f:93:62:59:ba:1c:b3:46:f8:b8:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                78:A6:12:8E:49:1A:BE:68:4F:11:5C:C5:AC:DB:4C:39:19:13:FA:B8
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/eKYSjkkavmhPEVzFrNtMORkT-rg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.35.176.0/22
                  95.158.160.0/22
                  95.158.176.0/21
                  212.21.128.0/24
                  212.21.136.0-212.21.138.255

    Signature Algorithm: sha256WithRSAEncryption
         a8:86:0e:85:55:13:bb:42:05:82:d3:67:7e:54:79:50:22:b6:
         e6:ba:5a:31:68:42:d6:2f:b0:93:00:fe:8a:30:87:2d:3b:87:
         09:fe:84:57:77:0c:f7:f2:30:98:25:3a:18:55:d7:4a:06:0c:
         e5:df:ff:9c:1e:8d:64:56:e0:a6:50:78:eb:5b:da:25:d2:1d:
         4c:f8:f0:2e:60:cf:23:f3:12:ff:f2:b0:e5:42:7d:dd:18:55:
         0b:9c:da:e6:bd:db:7c:bd:6d:86:64:55:f8:87:74:ca:90:58:
         6e:3c:fd:df:d9:26:14:48:c9:6d:44:e1:92:40:61:69:15:4e:
         97:8e:53:ae:ff:c9:7a:2e:05:5c:9d:13:7b:44:f4:c6:0a:d8:
         78:fb:b8:2b:e8:a8:de:0e:1a:aa:e2:2c:06:5f:5a:a6:a6:e8:
         75:ee:4a:8a:0e:97:37:7a:a8:39:b7:82:64:2b:95:ce:d6:c2:
         3b:c1:69:84:06:42:d9:1d:76:b5:b7:58:65:51:92:2b:47:4b:
         ab:40:08:63:63:16:e9:e8:31:d8:15:a4:81:e2:ae:b0:af:01:
         a7:53:de:06:83:54:5b:e0:c4:7d:60:cd:c8:de:dc:3d:84:83:
         e4:9a:75:42:27:92:31:4c:ee:87:37:87:f6:0a:54:0c:f4:ab:
         9f:25:90:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:51:59 2021 by LibreSSL & rpki-client.