Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/CPKYyz7jzD4WGMHtQPRCUjyEzUQ.roa (download)

Subject key identifier:   08:F2:98:CB:3E:E3:CC:3E:16:18:C1:ED:40:F4:42:52:3C:84:CD:44 
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
asID:                     AS198651
Prefixes:
    1: 195.12.189.0/24 (max: 24)
    2: 195.12.190.0/24 (max: 24)
    3: 195.12.188.0/24 (max: 24)
    4: 195.12.191.0/24 (max: 24)
    5: 88.119.176.0/24 (max: 24)
    6: 88.119.179.0/24 (max: 24)
    7: 88.119.177.0/24 (max: 24)
    8: 88.119.178.0/24 (max: 24)
    9: 2a00:1eb8:c000::/48 (max: 48)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/CPKYyz7jzD4WGMHtQPRCUjyEzUQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86154230 (0x5229bf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
        Validity
            Not Before: Jan  1 02:37:54 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=08f298cb3ee3cc3e1618c1ed40f442523c84cd44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:ca:0a:29:94:b4:ce:51:80:eb:51:96:94:
                    8a:92:ac:ec:0e:dd:69:10:89:90:ec:4c:12:2b:a7:
                    91:dc:de:85:69:83:e9:b9:51:64:ca:50:41:9a:6f:
                    0b:a6:1c:72:34:d9:80:fe:af:dd:69:a0:b2:08:96:
                    65:20:99:80:57:be:db:9c:8e:fe:e7:e1:38:a3:1a:
                    53:85:2e:d2:2e:89:c1:89:83:d8:46:cf:5e:00:6e:
                    89:aa:2a:5b:c4:1a:3c:f7:b7:9e:c6:1b:bb:26:94:
                    0e:1b:ee:9b:73:79:14:d4:a7:ca:22:56:8b:0e:70:
                    40:7b:68:6f:47:f8:c7:be:a4:6d:7f:ff:1b:10:03:
                    50:d6:8d:f9:b5:ee:24:7c:8e:9f:34:63:5d:cc:38:
                    72:a7:f1:d0:bb:c3:17:ca:90:7c:06:ca:82:53:ad:
                    8d:85:64:8d:a2:b1:46:6f:53:5c:34:64:f8:af:71:
                    de:6e:28:51:31:2c:a2:30:55:2b:fa:91:ba:79:dc:
                    0e:ed:f6:91:e7:92:f4:7c:ac:f1:33:71:24:9c:70:
                    7a:71:19:77:3c:9d:1e:ac:05:ff:09:91:2a:56:ba:
                    8b:28:8c:5e:92:4a:b4:b8:12:b2:73:f5:22:01:0e:
                    69:0c:fd:e5:ae:99:64:72:6e:b9:04:19:4c:fa:e9:
                    48:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                08:F2:98:CB:3E:E3:CC:3E:16:18:C1:ED:40:F4:42:52:3C:84:CD:44
            X509v3 Authority Key Identifier: 
                keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/CPKYyz7jzD4WGMHtQPRCUjyEzUQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0%0.....0....Xw.......0.....0....*.....
    Signature Algorithm: sha256WithRSAEncryption
         1d:3e:63:5b:af:72:ef:60:0b:ba:5a:0d:0d:1b:dc:65:35:e8:
         0d:43:41:05:89:ad:44:ee:31:19:9f:91:8e:d9:29:ae:aa:c5:
         36:10:c6:34:14:d5:68:1d:39:5e:8e:a7:0c:0d:81:0c:fa:aa:
         e8:1d:f4:16:9b:92:43:fa:d3:a2:5b:ac:61:24:cc:c7:b5:64:
         3d:15:95:55:d4:51:ea:57:f9:4a:34:9e:70:44:5f:95:5d:9c:
         dc:97:b2:f2:43:74:b5:f7:dd:d0:2a:a1:bd:7a:0b:e9:26:50:
         71:45:5a:a9:47:79:e8:9b:fc:93:07:6a:dd:4f:05:75:aa:a6:
         2a:2d:6f:c0:6e:0c:c2:3b:f9:3c:c3:8f:ba:21:61:68:d9:f2:
         8f:93:05:8d:2c:4e:10:38:a4:bd:3b:7f:10:97:33:f4:fa:c9:
         89:02:d5:97:98:aa:81:26:a3:db:6f:02:cf:62:aa:60:44:d6:
         ab:c1:42:d1:67:26:9d:e8:b2:df:3f:73:4b:e5:87:93:12:8f:
         db:fe:45:68:5b:78:2a:21:70:8c:83:5e:5d:aa:11:15:f7:cd:
         4c:50:82:a6:61:a7:10:49:28:9b:df:3c:64:8d:b9:18:e3:ce:
         5e:94:63:9f:38:49:08:a3:81:4e:43:86:12:34:69:ad:85:40:
         87:c1:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Aug 1 19:10:43 2021 by LibreSSL & rpki-client.