Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ywehlyKPFGgBVu7AKLg1erOtQ5E.roa (download)

Subject key identifier:   CB:07:A1:97:22:8F:14:68:01:56:EE:C0:28:B8:35:7A:B3:AD:43:91 
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
asID:                     AS174
Prefixes:
    1: 162.218.95.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ywehlyKPFGgBVu7AKLg1erOtQ5E.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85969444 (0x51fca24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
        Validity
            Not Before: Jan  1 02:56:21 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=cb07a197228f14680156eec028b8357ab3ad4391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:e1:c6:f4:13:8a:2f:2a:53:bb:a6:a1:4a:
                    1a:9a:8f:75:38:ee:ab:a9:51:43:b5:5d:7b:1e:9f:
                    52:00:46:05:ec:7e:cb:1a:c8:f4:20:11:8d:7c:c4:
                    34:d9:fd:e7:fa:cd:0c:fc:f6:cc:1a:ef:44:c7:11:
                    25:1e:17:7c:11:a3:91:89:5f:cf:70:c8:99:ac:1f:
                    61:ab:da:f9:94:8b:f6:ee:d4:49:c4:cd:44:28:02:
                    15:e2:47:1d:68:86:4b:39:9d:74:06:39:96:80:d4:
                    8e:0d:3b:3b:51:e8:60:4c:57:d4:31:56:84:23:cd:
                    0a:50:6d:c9:79:b3:ed:98:b3:b3:a4:fb:af:42:3c:
                    93:7b:c7:12:e2:e6:2d:1d:85:71:3f:e3:09:4c:04:
                    d6:48:a9:2d:56:e4:8f:65:38:f3:9d:6c:f5:d0:86:
                    e1:0d:3c:62:b3:ba:aa:6f:79:63:87:66:c0:5a:d5:
                    c9:96:49:60:e1:70:88:73:8b:28:56:07:9c:5c:8a:
                    7b:72:d6:82:18:0e:81:42:71:f0:0c:62:a5:12:1a:
                    9a:69:0a:2e:33:77:7c:30:8a:2a:64:1f:0b:59:9c:
                    42:49:25:a3:12:15:2a:b0:00:4d:5e:bf:a7:5e:ff:
                    1c:fd:fd:dc:07:24:a1:23:2a:da:e1:f1:7a:75:56:
                    61:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CB:07:A1:97:22:8F:14:68:01:56:EE:C0:28:B8:35:7A:B3:AD:43:91
            X509v3 Authority Key Identifier: 
                keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ywehlyKPFGgBVu7AKLg1erOtQ5E.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:45:8e:bc:22:19:ad:52:4d:4f:03:d0:90:27:4d:ce:7d:95:
         d4:55:9b:c8:be:cc:d9:61:50:27:8c:c4:c2:99:4a:0a:ed:5f:
         a3:54:a9:69:0b:b6:24:98:5f:8e:32:28:02:09:ac:72:3d:1a:
         10:b6:1a:88:88:cb:51:a2:ba:f4:af:e4:61:30:b8:cf:f8:e9:
         b3:d1:7c:d6:57:c4:9c:bd:7f:5d:6b:88:14:19:05:42:7e:9f:
         ad:c2:d4:7f:9d:55:5f:31:23:d6:3e:f0:a4:a0:84:3a:bc:dd:
         dd:78:82:95:a1:1a:8e:4a:bb:e8:aa:69:74:01:5c:17:14:30:
         8d:b4:37:1a:60:6a:9f:a7:8f:67:af:d8:57:a9:b0:0b:3e:5a:
         b8:a3:42:55:96:aa:a7:b9:f3:4b:0c:e2:12:3a:f5:d7:48:16:
         53:23:92:7f:78:3a:28:14:1d:85:cd:d3:ab:de:b4:b1:6e:45:
         e1:f0:02:4f:4a:42:dc:3f:3c:58:81:60:e8:b1:8d:7c:c2:d4:
         0a:df:6a:ca:d5:58:36:fb:e7:5b:2c:12:d3:49:09:67:ba:7e:
         31:00:af:a5:8b:e5:8e:86:ee:89:2a:fb:88:1e:39:3b:a4:c8:
         24:ce:3e:92:55:15:9e:cb:43:4b:36:2a:c9:79:11:2a:f1:f0:
         22:5f:29:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 24 12:11:16 2021 by LibreSSL & rpki-client.