Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/z2zxNmXHxxmzxEmSOuHHCSXhQrI.roa (download)

Subject key identifier:   CF:6C:F1:36:65:C7:C7:19:B3:C4:49:92:3A:E1:C7:09:25:E1:42:B2 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS29582
Prefixes:
    1: 95.158.145.0/24 (max: 24)
    2: 80.95.19.0/24 (max: 24)
    3: 2a00:e200:103::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/z2zxNmXHxxmzxEmSOuHHCSXhQrI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138359143 (0x83f3167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Oct 21 08:35:20 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=cf6cf13665c7c719b3c449923ae1c70925e142b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:36:9c:db:47:72:20:8f:76:e4:5d:01:64:0f:
                    c3:93:8b:26:f2:10:5a:f2:07:6d:57:d0:aa:67:91:
                    42:94:5a:46:05:12:f9:f2:c7:e6:f6:8f:71:23:28:
                    fb:12:63:2a:ec:e3:d9:bf:e7:45:ef:fa:03:f7:2f:
                    f8:5a:63:9b:65:8e:b2:31:a4:a8:d0:6c:e5:4e:1f:
                    25:4f:a2:84:a2:f0:5e:ed:91:d1:b5:5f:2f:10:41:
                    fa:ca:d1:68:f6:e0:aa:a0:4b:e0:7a:0a:ac:5d:63:
                    d2:d2:5e:26:2e:87:d0:92:67:a0:49:05:ac:4f:81:
                    75:77:25:f9:42:85:65:02:89:fc:8a:49:78:ed:b0:
                    63:c5:66:1d:08:93:54:c1:6c:42:f6:6b:01:ef:0e:
                    6a:22:44:7e:27:cc:23:2d:37:fb:61:c9:99:de:9e:
                    e4:28:dc:dc:e3:2b:1d:bf:ea:fa:b0:c8:92:3f:fd:
                    4c:3e:9e:71:88:7a:17:31:2b:21:1f:6a:7b:ad:3e:
                    79:48:8f:6a:a1:ee:88:08:01:97:55:8c:09:3f:13:
                    4e:e1:f1:e1:5a:93:3c:84:23:9b:49:e8:fb:34:64:
                    8e:e5:9f:89:7a:69:5a:22:5a:7c:a2:2d:62:fc:b7:
                    c5:cd:97:5e:14:b3:c7:1c:16:55:e5:74:5b:ed:d0:
                    0e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CF:6C:F1:36:65:C7:C7:19:B3:C4:49:92:3A:E1:C7:09:25:E1:42:B2
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/z2zxNmXHxxmzxEmSOuHHCSXhQrI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0%0.....0....P_...._..0.....0....*.....
    Signature Algorithm: sha256WithRSAEncryption
         c1:6f:68:5f:d2:d0:37:4c:bf:44:2c:63:d7:a5:d1:5c:fd:5f:
         f6:92:77:b4:d5:9c:63:d4:0b:43:3d:3f:58:ff:fa:5f:90:70:
         85:a6:66:1a:fb:af:29:80:a5:57:33:32:2b:07:0e:f2:4b:93:
         5c:a9:85:3f:87:6c:2c:1b:8c:79:b4:d9:18:9e:fe:c1:81:15:
         5f:df:20:1a:38:93:64:2e:99:3d:fc:2a:17:0a:22:d9:d5:20:
         c5:5e:2e:80:37:c8:2c:35:32:b6:30:30:dd:3b:45:32:84:02:
         e3:0b:6e:64:99:26:95:62:58:91:69:39:89:e9:3c:32:13:64:
         76:51:e5:61:e3:0d:f3:ae:a3:a7:40:8a:38:c1:25:1f:68:ad:
         cf:0f:94:d2:06:23:a2:39:c7:8d:39:10:f2:ce:83:19:47:88:
         21:7c:ab:38:24:87:fe:84:d2:87:fa:90:67:f9:5c:3e:62:1f:
         87:d3:57:1f:6f:37:1d:55:20:0d:0f:30:f2:3f:53:a9:e2:1d:
         f1:c4:95:b7:60:2f:df:a3:32:3c:9a:2f:61:e6:cb:47:2d:e0:
         25:08:f2:b7:2e:f6:67:fd:c7:9e:93:a2:f4:4b:51:65:80:b9:
         0a:1c:f9:b0:b5:21:3b:25:af:e1:fc:05:8a:8b:33:40:34:d6:
         8e:6d:20:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Oct 21 12:03:21 2021 by LibreSSL & rpki-client.