Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/ppCcqFmvAsiYlwxtqJG_kaFJHEY.roa (download)

Subject key identifier:   A6:90:9C:A8:59:AF:02:C8:98:97:0C:6D:A8:91:BF:91:A1:49:1C:46 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS8967
Prefixes:
    1: 95.158.156.0/22 maxlen: 24
    2: 46.35.182.0/23 maxlen: 24
    3: 95.158.172.0/22 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/ppCcqFmvAsiYlwxtqJG_kaFJHEY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149202975 (0x8e4a81f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 08:05:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a6909ca859af02c898970c6da891bf91a1491c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:75:85:20:70:89:95:2a:ca:cd:c5:b9:dc:84:
                    32:9f:fd:49:6b:c5:42:cc:bf:1d:58:dc:c6:1d:08:
                    dc:61:ab:96:81:ab:23:f8:1e:69:36:0a:16:f7:77:
                    3b:ff:31:39:15:d4:38:fd:de:6c:92:fa:66:cd:78:
                    b4:6f:4c:06:9d:14:89:0c:90:08:e6:18:a0:d1:60:
                    36:4c:73:f2:3a:8d:c4:74:54:4c:22:a8:35:88:2e:
                    7d:6e:73:4f:51:30:9b:58:2e:80:40:b4:4c:e4:0b:
                    6c:70:83:52:d3:46:c3:a6:1c:0d:89:e9:1e:aa:16:
                    f8:ef:81:9f:2b:f7:e7:2c:2e:ad:b5:48:d7:d1:50:
                    bc:2d:de:e4:03:5c:bd:da:a3:b3:74:b8:ec:29:dd:
                    61:07:23:d2:40:69:d9:8d:d3:0e:7c:ed:df:d0:3b:
                    d1:64:dc:2e:c9:ed:06:16:c0:52:4a:fa:94:80:1f:
                    d0:dd:e9:8c:38:66:3f:1c:72:1a:2f:ff:66:91:97:
                    d2:25:7b:50:5e:73:65:ee:2e:65:4f:e9:77:84:8d:
                    cb:f3:53:6d:f2:4a:41:50:05:4c:19:94:9a:04:e8:
                    44:9f:26:65:72:e9:97:45:84:2e:0f:65:25:88:a1:
                    c9:ed:e9:68:ed:12:4d:8e:ea:8a:c2:9f:0e:15:84:
                    30:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A6:90:9C:A8:59:AF:02:C8:98:97:0C:6D:A8:91:BF:91:A1:49:1C:46
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/ppCcqFmvAsiYlwxtqJG_kaFJHEY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.35.182.0/23
                  95.158.156.0/22
                  95.158.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:4a:40:cb:9b:5d:8b:ec:1b:2c:77:26:16:50:de:4f:74:e6:
         fe:84:50:86:45:29:7d:83:2a:6c:af:d7:dc:5b:f6:56:60:0c:
         cc:3e:f6:11:db:1c:ad:cb:b4:04:70:ce:3f:5c:67:13:bc:f2:
         c7:e2:84:fe:b3:8a:69:2e:a1:2b:bd:1d:9f:b2:1c:b6:55:fe:
         a6:34:85:4d:e6:96:97:95:71:06:a9:1f:39:b0:05:28:b9:5e:
         21:5b:de:95:13:0a:25:7e:99:fc:55:a1:77:db:7e:8a:c5:e2:
         50:88:82:2e:9a:28:55:13:ac:7d:e7:8d:09:3b:d8:94:f7:1f:
         11:ef:59:31:69:4e:54:74:5a:10:04:a7:be:9c:67:d7:1c:57:
         e2:07:f7:bf:7f:99:c8:b9:07:e0:94:d0:6a:2b:cc:9b:dd:9f:
         94:5e:31:e2:15:40:16:93:2f:ae:cf:59:d1:10:3e:f3:60:ab:
         93:42:43:9a:89:d3:96:33:fa:84:9a:2a:e8:dc:2e:2a:49:8f:
         e7:0f:27:2e:1e:a3:c7:81:7a:7c:cb:c9:f9:21:c5:96:51:e9:
         f6:93:21:1d:c4:1a:27:9a:0b:f5:c1:55:97:98:6c:4b:ad:cf:
         03:5e:ce:7c:f3:77:e1:7e:e5:b0:32:d8:42:30:21:7f:c0:07:
         7e:99:f4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 10:26:28 2022 by LibreSSL & rpki-client.