Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/fe/48f994-771a-4e22-b30e-7419cd6ecd3b/1/mhNOrGscmtUEGSaeAIQf1tZBaKs.roa (download)

Subject key identifier:   9A:13:4E:AC:6B:1C:9A:D5:04:19:26:9E:00:84:1F:D6:D6:41:68:AB 
Authority key identifier: 35:4B:2B:CE:C0:51:B2:BF:A8:FC:1D:9E:59:3E:D0:A4:AC:B8:E3:6F
asID:                     AS0
Prefixes:
    1: 77.95.71.0/24 (max: 32)
    2: 2001:7f8:47::/48 (max: 128)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/fe/48f994-771a-4e22-b30e-7419cd6ecd3b/1/mhNOrGscmtUEGSaeAIQf1tZBaKs.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799568803 (0x2fa873a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=354b2bcec051b2bfa8fc1d9e593ed0a4acb8e36f
        Validity
            Not Before: Jan  1 01:32:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9a134eac6b1c9ad50419269e00841fd6d64168ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:ea:93:4e:ae:d3:4e:5a:c5:ae:9f:05:fd:
                    bc:19:c2:a4:f3:9c:cf:36:e5:fc:b0:02:9e:4b:8d:
                    32:f6:cf:b9:d9:86:b6:be:c7:30:b0:1f:0e:78:3d:
                    42:63:f5:86:2f:13:22:f6:51:2b:d6:81:b5:6f:03:
                    70:53:57:b8:f3:a3:4b:32:df:56:5c:be:96:97:bc:
                    63:46:d8:a6:4c:fb:0f:64:e1:89:94:f0:f8:f6:fa:
                    37:23:f3:08:2e:59:17:5f:27:eb:40:4c:e6:43:a6:
                    68:2a:e8:d1:c5:d2:8b:e4:ce:0c:a0:89:e9:0d:00:
                    96:21:a4:33:e9:00:53:9b:65:98:ed:af:b0:4c:e5:
                    84:83:38:41:aa:5d:d4:0f:28:35:41:6b:06:c9:82:
                    59:c7:56:fe:e4:3a:7c:a7:c0:d0:24:17:3b:53:06:
                    4f:e7:8d:4f:06:96:3f:dc:0c:72:0b:e2:ce:ee:5e:
                    22:b0:6b:37:ea:d2:c5:54:6c:36:b0:f5:02:b8:a9:
                    70:65:62:74:b5:19:f8:e3:b4:9c:64:37:9a:29:81:
                    9d:e5:90:79:21:ab:58:63:c2:ec:03:f7:1f:57:b5:
                    ae:13:7d:a0:cc:83:7a:a3:2e:bf:4e:1d:65:c5:40:
                    75:76:86:bb:da:f6:46:aa:50:42:1b:3b:86:79:9a:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9A:13:4E:AC:6B:1C:9A:D5:04:19:26:9E:00:84:1F:D6:D6:41:68:AB
            X509v3 Authority Key Identifier: 
                keyid:35:4B:2B:CE:C0:51:B2:BF:A8:FC:1D:9E:59:3E:D0:A4:AC:B8:E3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUsrzsBRsr-o_B2eWT7QpKy4428.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/48f994-771a-4e22-b30e-7419cd6ecd3b/1/mhNOrGscmtUEGSaeAIQf1tZBaKs.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/48f994-771a-4e22-b30e-7419cd6ecd3b/1/NUsrzsBRsr-o_B2eWT7QpKy4428.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....M_G0.....0.... ....G
    Signature Algorithm: sha256WithRSAEncryption
         9f:29:4e:35:c7:b2:ae:c7:4a:a9:31:8c:56:5f:a1:1d:ed:8a:
         f2:75:c9:4e:d9:66:1f:05:df:fe:91:14:fb:45:ed:7b:ed:af:
         b5:cc:cc:d6:b9:4f:cd:e5:8f:e1:d3:52:96:c4:20:47:7a:f1:
         76:4b:96:13:4f:0e:aa:75:b0:02:eb:eb:4f:36:e4:a9:2e:ff:
         d6:37:08:67:64:0f:75:32:98:40:51:dd:48:f8:1f:a7:f4:b2:
         29:82:70:4e:e4:da:82:74:4c:86:6c:25:40:50:09:27:77:f1:
         c4:60:f1:4a:5c:a7:87:9d:a4:b0:2e:f0:ca:65:99:3c:37:b9:
         88:f5:63:bf:44:de:ed:d0:a8:de:63:d8:a1:ba:3c:fe:a9:c8:
         46:8e:5d:cb:cc:c0:f1:61:4e:38:bc:27:a3:cc:fa:eb:23:70:
         14:41:29:dc:2c:0e:96:bf:f1:4c:da:74:4d:99:ed:6e:24:ce:
         33:96:55:83:28:56:1b:5a:d7:56:3f:2e:62:73:95:a8:d0:83:
         12:9b:6d:7c:86:81:4d:95:2b:46:9b:ba:02:77:ee:b1:f5:69:
         db:e8:d1:ba:23:9d:5d:d2:f6:9c:ae:3f:ee:2c:d7:85:1c:a9:
         69:ca:68:6b:2f:52:35:a7:fc:f3:0a:c8:27:3a:63:07:6a:76:
         09:fe:5c:dd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEL6hzozANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTRiMmJjZWMwNTFiMmJmYThmYzFkOWU1OTNlZDBhNGFjYjhlMzZmMB4XDTIxMDEw
MTAxMzIzMFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWExMzRlYWM2YjFj
OWFkNTA0MTkyNjllMDA4NDFmZDZkNjQxNjhhYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALZD6pNOrtNOWsWunwX9vBnCpPOczzbl/LACnkuNMvbPudmG
tr7HMLAfDng9QmP1hi8TIvZRK9aBtW8DcFNXuPOjSzLfVly+lpe8Y0bYpkz7D2Th
iZTw+Pb6NyPzCC5ZF18n60BM5kOmaCro0cXSi+TODKCJ6Q0AliGkM+kAU5tlmO2v
sEzlhIM4Qapd1A8oNUFrBsmCWcdW/uQ6fKfA0CQXO1MGT+eNTwaWP9wMcgvizu5e
IrBrN+rSxVRsNrD1AripcGVidLUZ+OO0nGQ3mimBneWQeSGrWGPC7AP3H1e1rhN9
oMyDeqMuv04dZcVAdXaGu9r2RqpQQhs7hnmaHjsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSaE06saxya1QQZJp4AhB/W1kFoqzAfBgNVHSMEGDAWgBQ1SyvOwFGyv6j8
HZ5ZPtCkrLjjbzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05Vc3J6c0JSc3Itb19CMmVXVDdRcEt5NDQyOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmUvNDhmOTk0LTc3MWEtNGUyMi1iMzBlLTc0MTljZDZlY2QzYi8x
L21oTk9yR3NjbXRVRUdTYWVBSVFmMXRaQmFLcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUv
NDhmOTk0LTc3MWEtNGUyMi1iMzBlLTc0MTljZDZlY2QzYi8xL05Vc3J6c0JSc3It
b19CMmVXVDdRcEt5NDQyOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAE1fRzAPBAIAAjAJAwcAIAEH+ABH
MA0GCSqGSIb3DQEBCwUAA4IBAQCfKU41x7Kux0qpMYxWX6Ed7YrydclO2WYfBd/+
kRT7Re177a+1zMzWuU/N5Y/h01KWxCBHevF2S5YTTw6qdbAC6+tPNuSpLv/WNwhn
ZA91MphAUd1I+B+n9LIpgnBO5NqCdEyGbCVAUAknd/HEYPFKXKeHnaSwLvDKZZk8
N7mI9WO/RN7t0KjeY9ihujz+qchGjl3LzMDxYU44vCejzPrrI3AUQSncLA6Wv/FM
2nRNme1uJM4zllWDKFYbWtdWPy5ic5Wo0IMSm218hoFNlStGm7oCd+6x9Wnb6NG6
I51d0vacrj/uLNeFHKlpymhrL1I1p/zzCsgnOmMHanYJ/lzd
-----END CERTIFICATE-----

Generated at Sat Jun 12 09:37:54 2021 by LibreSSL & rpki-client.