Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/b1/095afe-26be-4097-8ba1-92340d33c858/1/7LyLal70oXJY5PNNpj6p6z-Xd9M.roa (download)

Subject key identifier:   EC:BC:8B:6A:5E:F4:A1:72:58:E4:F3:4D:A6:3E:A9:EB:3F:97:77:D3 
Authority key identifier: 43:AF:7C:8B:93:B6:7E:30:17:F6:7D:85:8F:B0:EC:70:0E:EA:80:A8
asID:                     AS26636
Prefixes:
    1: 195.20.98.0/23 (max: 23)
    2: 195.20.104.0/23 (max: 23)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/b1/095afe-26be-4097-8ba1-92340d33c858/1/7LyLal70oXJY5PNNpj6p6z-Xd9M.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38834722 (0x2509222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43af7c8b93b67e3017f67d858fb0ec700eea80a8
        Validity
            Not Before: Mar 23 05:11:55 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ecbc8b6a5ef4a17258e4f34da63ea9eb3f9777d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:56:5f:76:d4:86:ef:3c:17:a7:07:b2:0f:
                    91:4b:dc:2f:7f:2d:d5:31:ef:f4:75:62:c5:7d:a3:
                    9a:07:0c:79:e3:96:cb:95:0d:be:26:11:98:6d:c6:
                    e3:fa:50:f4:cc:21:75:40:ca:c6:71:c4:1f:30:6b:
                    93:e6:11:b0:90:5f:a1:7a:d3:a0:23:b8:d9:97:15:
                    ce:bb:26:7f:1f:d3:ef:cc:3a:5e:e8:ac:a7:1d:08:
                    02:61:e1:b4:a0:56:54:42:82:ac:bc:1c:af:ff:0c:
                    28:52:bf:37:33:23:f2:e6:61:a9:84:93:9e:f9:df:
                    b5:f4:75:a2:77:85:af:ad:16:e5:b0:ff:1b:e5:dc:
                    97:fd:5c:dc:1e:e0:c3:ad:49:94:05:21:6d:dd:f5:
                    ba:db:b5:be:3a:9e:91:3f:95:4c:d3:e9:13:ac:e1:
                    f0:98:d4:60:c0:41:a1:c3:cb:01:8e:a2:cf:b3:74:
                    04:4b:27:a7:dd:45:5f:d3:7f:f9:68:ef:e5:fe:44:
                    16:1b:92:0f:52:a7:bc:f7:03:16:10:6f:c7:ee:78:
                    55:5d:19:80:03:f4:8f:57:9d:82:67:8a:bb:f6:cd:
                    aa:28:45:b9:92:a4:20:06:db:a8:0a:a8:59:28:7f:
                    c0:06:98:41:c8:31:b7:ee:71:26:22:90:7d:89:3c:
                    0b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EC:BC:8B:6A:5E:F4:A1:72:58:E4:F3:4D:A6:3E:A9:EB:3F:97:77:D3
            X509v3 Authority Key Identifier: 
                keyid:43:AF:7C:8B:93:B6:7E:30:17:F6:7D:85:8F:B0:EC:70:0E:EA:80:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q698i5O2fjAX9n2Fj7DscA7qgKg.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/095afe-26be-4097-8ba1-92340d33c858/1/7LyLal70oXJY5PNNpj6p6z-Xd9M.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/095afe-26be-4097-8ba1-92340d33c858/1/Q698i5O2fjAX9n2Fj7DscA7qgKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.20.98.0/23
                  195.20.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:f5:76:80:bc:88:b9:42:df:ae:c8:9c:07:4e:11:ef:e5:24:
         fa:03:c5:5d:53:12:52:82:84:71:83:04:b4:67:1c:94:b7:b7:
         a9:44:ea:fd:31:77:42:0e:48:9d:ea:03:50:88:a5:1f:14:36:
         9b:12:f0:f6:f1:cc:a3:91:91:a3:10:de:40:aa:6f:d3:ba:38:
         7f:ef:ce:9c:3c:3e:88:f5:58:8e:76:25:6a:8d:73:2e:0c:af:
         06:58:5c:41:8d:e0:a7:59:1f:aa:cc:b6:33:8d:6b:78:7d:ea:
         c9:99:a5:14:d1:a2:76:0a:f1:2c:f3:eb:22:9b:39:96:72:3f:
         52:f8:28:62:c1:70:90:64:25:87:06:dc:31:37:c1:90:d0:eb:
         f5:b4:10:22:5e:c6:7e:f9:ab:04:4c:67:64:7e:9c:f6:1b:d6:
         d0:9a:2b:3e:79:18:cd:7c:ba:d3:5e:69:4f:18:6e:06:45:4c:
         ae:16:df:d3:35:7d:7b:95:30:54:b7:95:53:16:38:38:f8:af:
         f3:77:fe:cf:d0:64:b8:51:56:22:d7:db:2f:c8:17:4a:c5:1c:
         00:61:a3:44:10:55:2b:b3:f3:5c:93:c3:c2:18:6f:d9:81:6f:
         4c:95:86:05:0f:24:ac:59:fc:c4:e3:05:80:db:7f:0d:39:7b:
         fb:5a:1f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:55:36 2021 by LibreSSL & rpki-client.