Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/W9P4GUiRHFCvwGMczc5x8qkLIkw.roa (download)

Subject key identifier:   5B:D3:F8:19:48:91:1C:50:AF:C0:63:1C:CD:CE:71:F2:A9:0B:22:4C 
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
asID:                     AS397237
Prefixes:
    1: 37.209.192.0/24 maxlen: 24
    2: 37.209.194.0/24 maxlen: 24
    3: 37.209.196.0/24 maxlen: 24
    4: 37.209.198.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/W9P4GUiRHFCvwGMczc5x8qkLIkw.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7840015 (0x77a10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Jan  1 03:01:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5bd3f81948911c50afc0631ccdce71f2a90b224c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:42:df:8e:5b:a8:7d:9b:5a:9a:9d:03:51:8b:
                    6b:ad:88:31:6a:40:14:b0:5c:fd:fb:bb:c6:e0:46:
                    90:e9:72:ba:ae:71:de:5b:bf:43:24:37:31:f6:46:
                    bb:fe:22:ea:98:82:5e:4c:fa:97:8e:56:61:24:4e:
                    15:ab:fa:3c:39:ca:3d:4b:4d:58:72:ef:73:cf:62:
                    54:b0:d1:9c:52:2e:67:16:21:b8:32:0d:25:64:d6:
                    bf:d3:b8:90:01:18:b1:3c:c7:a8:e8:b2:ba:3a:03:
                    2a:d8:c2:13:1e:e3:dd:6b:1f:53:21:dd:f3:9c:20:
                    54:83:ec:6b:18:bb:03:a2:3e:3e:b2:62:6d:41:1d:
                    2a:c9:90:0a:f2:51:5a:0f:37:fd:1a:fc:a7:97:9c:
                    dd:80:a3:4d:d2:1c:02:06:5e:2b:e0:4e:d6:91:af:
                    e6:7d:7c:c6:d9:7b:fc:74:b3:28:5d:3c:65:d6:16:
                    63:1a:33:74:6c:91:94:59:29:6b:8e:4a:25:8b:6b:
                    fa:cc:40:fd:c5:8a:82:bc:cd:b0:c4:fb:7e:e1:3b:
                    1e:8f:d5:a4:65:b0:79:58:6a:cf:63:86:9a:08:e7:
                    c5:13:8f:77:fc:b3:91:7d:43:34:d8:bd:8f:1b:60:
                    b9:47:c8:3f:4c:9f:ad:28:49:62:c9:7b:28:75:05:
                    99:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5B:D3:F8:19:48:91:1C:50:AF:C0:63:1C:CD:CE:71:F2:A9:0B:22:4C
            X509v3 Authority Key Identifier: 
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/W9P4GUiRHFCvwGMczc5x8qkLIkw.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.209.192.0/24
                  37.209.194.0/24
                  37.209.196.0/24
                  37.209.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:6e:c9:65:b4:cc:0b:15:6b:c8:79:4f:3a:af:d0:29:30:2c:
         e4:04:8b:1f:b1:27:d7:e2:5c:57:57:37:62:59:f9:71:8c:ab:
         f2:1f:71:c3:4d:36:e1:9f:34:42:c7:e0:b4:bb:4e:fa:bc:ea:
         5e:98:40:ad:4a:03:e2:c7:c8:96:64:13:c1:0b:15:8d:f7:7d:
         87:f7:11:27:5c:80:43:c6:0c:ba:4e:5f:4f:ca:fc:10:4a:b2:
         43:50:bf:fe:6a:c8:51:07:77:01:c1:18:44:94:d5:ae:0f:2a:
         54:50:cc:d2:6b:de:67:1c:f3:85:7a:64:26:ff:e3:01:6a:e2:
         dd:b9:2f:62:b4:95:a6:e8:be:b6:0b:54:80:43:e9:1e:be:99:
         f2:e4:35:9f:e6:8a:63:fd:07:55:b4:83:84:f0:86:60:24:59:
         f5:f2:e6:84:da:7b:85:e7:e4:78:55:ac:a8:47:a7:62:69:70:
         bf:e3:a6:9a:ea:b6:30:03:b6:b0:9d:d3:02:98:bd:8f:b5:8b:
         9a:2a:c7:6b:4a:7d:bb:4e:0c:9b:da:f5:73:98:7a:d5:eb:29:
         7e:ba:0b:25:ff:8b:b0:18:89:c8:6f:2b:2e:4a:5e:a2:9d:f6:
         e7:4f:e2:f9:cc:81:3e:3f:e1:ba:a8:a9:6b:24:ee:ef:e5:12:
         a9:04:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 04:43:05 2022 by LibreSSL & rpki-client.