Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/Tl93upbdQdqN_vXLf5T4TlzSCxs.roa (download)

Subject key identifier:   4E:5F:77:BA:96:DD:41:DA:8D:FE:F5:CB:7F:94:F8:4E:5C:D2:0B:1B 
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
asID:                     AS399151
Prefixes:
    1: 37.209.192.0/24 maxlen: 24
    2: 37.209.198.0/24 maxlen: 24
    3: 37.209.196.0/24 maxlen: 24
    4: 37.209.194.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/Tl93upbdQdqN_vXLf5T4TlzSCxs.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8127161 (0x7c02b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Jan  1 03:01:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4e5f77ba96dd41da8dfef5cb7f94f84e5cd20b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:70:81:a3:e1:58:86:0c:14:af:07:53:1b:ec:
                    c7:af:c0:cb:cb:73:a2:7b:83:fa:40:b7:00:99:92:
                    50:c7:ae:78:cb:1d:70:16:04:ad:80:1a:86:ad:9a:
                    52:4a:bb:aa:e4:3f:0d:76:ac:e6:5c:c5:02:28:17:
                    21:4c:de:cf:4e:0d:03:4d:05:16:75:57:e3:46:e2:
                    fa:a3:df:46:da:66:da:86:01:23:c4:1c:ce:73:9d:
                    fe:6b:c5:c5:23:0a:d4:5d:96:be:19:84:bc:dc:14:
                    6d:5d:bf:e2:6f:46:e1:7d:c9:c1:5c:74:ed:57:9f:
                    8d:f2:ea:c9:10:65:5d:b4:b6:ea:17:d4:ed:9b:f8:
                    29:b6:f0:15:94:df:05:65:16:b3:28:46:f0:6d:53:
                    60:32:a8:03:1c:0d:3b:e2:0b:51:75:76:29:ef:fd:
                    d9:0f:4a:7f:12:68:f7:09:e6:74:69:34:e8:ab:5f:
                    bb:34:0c:b4:24:b2:ca:fa:bb:fb:17:e7:df:ae:15:
                    c6:55:88:4b:c7:c0:73:ae:44:4d:dd:c3:bb:ef:39:
                    eb:bf:2b:d2:6a:de:11:41:ae:5a:4e:ac:5d:17:2e:
                    77:6a:32:eb:4b:3b:ec:15:c2:e7:4a:09:bb:5f:22:
                    c5:64:af:e3:f3:26:aa:c6:20:f8:fb:8d:d3:ee:23:
                    ce:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4E:5F:77:BA:96:DD:41:DA:8D:FE:F5:CB:7F:94:F8:4E:5C:D2:0B:1B
            X509v3 Authority Key Identifier: 
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/Tl93upbdQdqN_vXLf5T4TlzSCxs.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.209.192.0/24
                  37.209.194.0/24
                  37.209.196.0/24
                  37.209.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:b5:b3:e3:43:e4:b1:38:fa:1d:0f:bb:8c:df:6f:87:9a:ff:
         d4:a2:f3:5a:7b:fe:e0:da:ac:56:f2:d8:8c:18:f8:3d:8a:ff:
         b6:01:77:37:2a:45:bf:2a:c3:5d:ea:8e:3d:6f:3b:1d:0e:60:
         2b:1e:9b:4c:d3:af:61:8f:2b:25:9b:10:f2:9c:99:e8:29:0a:
         39:e7:a7:d9:3c:a1:63:63:e2:a6:fc:b7:30:c8:f9:d3:45:3c:
         1c:4e:17:47:5e:d4:93:70:dd:85:dd:22:f9:28:3f:02:38:59:
         2f:ae:60:da:e7:99:1e:82:91:dd:5f:6d:a0:25:86:8d:d1:f4:
         1f:08:fc:c9:0c:bf:2b:70:e6:6b:06:f9:57:63:17:93:03:84:
         30:b0:0a:e4:83:ef:d9:44:9f:f6:3e:03:1f:8e:f7:5a:5d:64:
         6a:b4:01:75:12:78:e5:a4:9f:ce:fe:5b:5d:0b:08:f9:96:88:
         1b:9c:f0:dd:f6:20:42:33:ae:ec:97:e0:0a:86:63:73:bf:8a:
         b5:68:f0:a7:67:62:3b:00:79:87:74:e9:78:3a:e5:a9:2b:0e:
         1e:f5:20:17:55:90:04:c1:d5:56:42:67:4c:1c:ce:a8:46:2b:
         9d:a8:ac:d9:de:e1:95:0c:d5:b7:fc:f9:5f:b7:31:4a:5a:38:
         23:43:e9:b4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIDfAK5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE1
YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjljOGJmMmMwHhcNMjIwMTAx
MDMwMTExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0ZTVmNzdiYTk2ZGQ0
MWRhOGRmZWY1Y2I3Zjk0Zjg0ZTVjZDIwYjFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm3CBo+FYhgwUrwdTG+zHr8DLy3Oie4P6QLcAmZJQx654yx1w
FgStgBqGrZpSSruq5D8NdqzmXMUCKBchTN7PTg0DTQUWdVfjRuL6o99G2mbahgEj
xBzOc53+a8XFIwrUXZa+GYS83BRtXb/ib0bhfcnBXHTtV5+N8urJEGVdtLbqF9Tt
m/gptvAVlN8FZRazKEbwbVNgMqgDHA074gtRdXYp7/3ZD0p/Emj3CeZ0aTToq1+7
NAy0JLLK+rv7F+ffrhXGVYhLx8BzrkRN3cO77znrvyvSat4RQa5aTqxdFy53ajLr
SzvsFcLnSgm7XyLFZK/j8yaqxiD4+43T7iPO/QIDAQABo4ICGzCCAhcwHQYDVR0O
BBYEFE5fd7qW3UHajf71y3+U+E5c0gsbMB8GA1UdIwQYMBaAFKWuij2L2qv0dl/a
edVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdiLzEv
VGw5M3VwYmRRZHFOX3ZYTGY1VDRUbHpTQ3hzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8w
ZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdiLzEvcGE2S1BZdmFxX1Iy
WDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQAJdHCAwQAJdHEAwQAJdHG
MA0GCSqGSIb3DQEBCwUAA4IBAQBNtbPjQ+SxOPodD7uM32+Hmv/UovNae/7g2qxW
8tiMGPg9iv+2AXc3KkW/KsNd6o49bzsdDmArHptM069hjyslmxDynJnoKQo556fZ
PKFjY+Km/LcwyPnTRTwcThdHXtSTcN2F3SL5KD8COFkvrmDa55kegpHdX22gJYaN
0fQfCPzJDL8rcOZrBvlXYxeTA4QwsArkg+/ZRJ/2PgMfjvdaXWRqtAF1EnjlpJ/O
/ltdCwj5logbnPDd9iBCM67sl+AKhmNzv4q1aPCnZ2I7AHmHdOl4OuWpKw4e9SAX
VZAEwdVWQmdMHM6oRiudqKzZ3uGVDNW3/PlftzFKWjgjQ+m0
-----END CERTIFICATE-----

Generated at Sat Jan 1 04:43:05 2022 by LibreSSL & rpki-client.