Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/gEhCkiqt0AOmumTduQlWhVLsGl8.roa (download)

Subject key identifier:   80:48:42:92:2A:AD:D0:03:A6:BA:64:DD:B9:09:56:85:52:EC:1A:5F 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS35448
Prefixes:
    1: 95.158.144.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/gEhCkiqt0AOmumTduQlWhVLsGl8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143587502 (0x88ef8ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Nov 24 08:03:21 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=804842922aadd003a6ba64ddb909568552ec1a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:8c:67:4d:c7:8f:e5:e0:92:31:98:95:aa:
                    27:c5:6f:78:d5:f9:d5:01:55:17:69:c6:96:b5:d9:
                    b0:42:2f:02:d9:cc:3c:d1:14:7a:17:e3:99:69:26:
                    e1:3a:86:c7:68:e8:b4:71:d0:0e:d7:76:a7:54:bc:
                    11:49:46:d8:6d:d3:22:8c:00:53:94:69:07:47:80:
                    c2:ca:a8:9c:2a:87:b2:77:16:cc:af:49:2c:52:ab:
                    55:56:68:f4:95:60:15:66:7b:aa:db:d2:e3:db:1c:
                    28:49:5a:e3:70:53:37:8e:e9:42:bb:f8:ef:71:e4:
                    36:93:f9:f2:8e:e2:1c:1d:e4:2e:c2:36:56:76:22:
                    c7:da:fc:02:72:d8:c8:cf:b3:d7:2d:07:dc:9a:71:
                    c9:40:65:52:c1:50:ba:37:ab:e0:c9:a9:c7:6d:ff:
                    0f:76:5e:27:70:16:d5:22:f9:58:dc:a4:84:36:c7:
                    cd:44:36:6f:5f:e3:b6:7f:9b:3a:2b:b8:75:36:a5:
                    65:69:7e:e7:b1:f9:4b:d5:c4:77:1c:57:f3:72:13:
                    d7:ea:76:75:12:7b:ca:97:74:e0:c3:61:ed:3b:d3:
                    c4:e7:57:b2:96:85:82:8d:0d:7a:83:44:c3:99:12:
                    79:7f:bc:5a:f3:2a:55:59:2b:14:f6:05:42:d8:20:
                    f3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                80:48:42:92:2A:AD:D0:03:A6:BA:64:DD:B9:09:56:85:52:EC:1A:5F
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/gEhCkiqt0AOmumTduQlWhVLsGl8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.158.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:5c:c7:2d:25:a2:f8:e6:11:5f:e4:f4:37:69:62:18:82:d5:
         b7:95:09:b5:64:e5:fa:19:c9:d2:45:07:01:05:8e:e2:24:00:
         0a:43:b0:a4:72:8b:d8:b2:95:73:2a:0b:10:d3:88:bf:83:11:
         13:a1:f7:f3:d8:0d:71:83:5c:b7:82:4a:b8:3e:86:96:de:96:
         54:4c:ec:7f:1d:60:bc:5d:41:00:88:8c:aa:19:07:0b:d9:8e:
         62:5b:2c:01:38:ea:9b:1b:ad:cc:69:be:d9:3e:ba:44:c9:78:
         0b:38:5a:1a:f8:8d:76:81:23:40:05:db:88:7c:6a:27:e1:9f:
         b2:85:f8:d5:d0:86:85:8a:d4:a7:c6:6b:42:94:81:83:65:be:
         67:55:9f:91:21:d2:44:5e:5f:d1:84:29:89:3d:42:b4:a1:65:
         92:b0:50:76:18:83:d3:49:08:9a:29:2b:2f:cc:cc:02:e0:bf:
         85:26:8b:cd:4f:80:56:8d:0b:fb:06:e2:f2:c2:bd:f7:fc:88:
         ad:39:af:38:c1:55:88:32:df:43:ad:6d:3d:bd:29:a9:82:b7:
         e7:b0:5c:b6:8a:a3:29:44:b3:b2:26:1d:bf:bb:0d:44:12:62:
         66:10:b6:72:d1:3e:2d:88:65:bb:6c:3b:85:7d:a9:d2:29:44:
         57:ca:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Nov 24 09:59:45 2021 by LibreSSL & rpki-client.