Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/v2-UntjusNZQuyTga5DTCs37di4.roa (download)

Subject key identifier:   BF:6F:94:9E:D8:EE:B0:D6:50:BB:24:E0:6B:90:D3:0A:CD:FB:76:2E 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS62386
Prefixes:
    1: 95.158.136.0/22 (max: 24)
    2: 95.158.140.0/23 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/v2-UntjusNZQuyTga5DTCs37di4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96455251 (0x5bfca53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 02:43:28 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=bf6f949ed8eeb0d650bb24e06b90d30acdfb762e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:2a:30:a8:d1:f4:c4:f6:72:cb:2f:81:31:
                    03:7e:b6:a6:b6:90:e7:a5:c0:6b:97:27:c7:fb:a6:
                    f4:88:1f:e9:1e:9c:1a:1e:fc:ea:dc:98:6e:5d:4d:
                    6e:1d:72:7e:49:08:7a:d4:d1:eb:c5:e1:d5:5f:07:
                    5e:40:a5:eb:b0:dc:51:d7:2f:9f:d1:9f:0f:a4:74:
                    99:9d:4e:10:12:31:ef:47:22:70:8e:f9:0b:5a:50:
                    92:a7:f8:07:16:41:85:d7:44:41:a9:a0:88:56:89:
                    1b:8d:78:32:19:1b:52:c2:24:e8:aa:4a:e1:27:f3:
                    09:0e:aa:8c:bc:40:00:23:4c:30:4f:df:06:82:1b:
                    2b:47:03:a5:22:d0:6d:26:e5:48:be:d4:c2:cf:11:
                    05:7e:a6:cd:b8:bf:89:11:cb:de:9e:d8:a6:01:b0:
                    cd:4d:1b:3d:3c:a9:d5:4d:e2:e1:a6:ed:cc:08:8c:
                    7a:97:ed:f8:4a:af:91:e9:f9:d3:c9:62:b9:af:b3:
                    95:7f:04:cf:3a:a7:17:2c:42:53:c9:1d:00:32:48:
                    56:32:a2:cd:e4:24:18:1d:fc:34:26:4f:65:0e:3d:
                    40:5e:85:15:ae:bf:81:bb:de:93:2c:e6:b7:86:49:
                    eb:94:15:9a:46:90:29:96:d5:b7:b4:7c:17:30:a2:
                    7d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BF:6F:94:9E:D8:EE:B0:D6:50:BB:24:E0:6B:90:D3:0A:CD:FB:76:2E
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/v2-UntjusNZQuyTga5DTCs37di4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.158.136.0-95.158.141.255

    Signature Algorithm: sha256WithRSAEncryption
         7b:4c:a8:23:b3:97:ec:05:9a:c0:88:66:7c:7e:ba:b7:ac:65:
         4c:43:23:08:21:f2:40:9f:35:00:3d:98:f6:52:8c:9e:83:1c:
         32:dd:8f:b3:d1:78:40:7e:b3:3e:ab:d2:60:1f:a8:b2:cf:bd:
         b7:ad:4d:8e:a5:9e:5c:7d:03:81:c8:73:e2:4a:0c:d1:c1:b9:
         8a:53:49:30:af:5f:6b:1b:95:0a:66:53:43:b0:17:32:eb:b0:
         0b:55:cb:0e:63:ca:02:5f:07:f4:8c:fc:f0:dc:cc:88:07:bd:
         fc:e5:cc:bc:a3:85:73:6c:2b:98:1c:41:f1:1a:24:88:f5:19:
         9f:68:ac:79:96:a4:54:58:53:0c:9c:1a:8f:b4:c5:ad:42:42:
         df:26:1f:0b:2f:25:9e:cf:ab:08:3e:86:2b:52:3e:f8:e7:6a:
         90:ad:67:f7:64:5b:c6:07:76:e7:b3:0d:56:97:ca:62:54:e4:
         f5:7b:33:98:f5:e3:ef:20:cf:da:ea:8a:6c:8a:51:1c:79:48:
         71:7a:da:34:1b:ab:aa:e7:af:3d:12:fe:2f:a7:28:88:99:e5:
         6b:10:04:71:a1:41:af:38:bd:8a:77:62:3a:ed:07:ea:0f:c2:
         7b:8e:35:c9:ac:69:a3:92:1c:fd:6f:91:c4:c2:27:17:3e:c3:
         75:3d:27:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:51:59 2021 by LibreSSL & rpki-client.