Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/ZtNZfgz0C8yxrOK4vq-by5RBZUc.roa (download)

Subject key identifier:   66:D3:59:7E:0C:F4:0B:CC:B1:AC:E2:B8:BE:AF:9B:CB:94:41:65:47 
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
asID:                     AS397232
Prefixes:
    1: 37.209.192.0/24 maxlen: 24
    2: 37.209.198.0/24 maxlen: 24
    3: 37.209.196.0/24 maxlen: 24
    4: 37.209.194.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/ZtNZfgz0C8yxrOK4vq-by5RBZUc.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7698048 (0x757680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Jan  1 03:01:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=66d3597e0cf40bccb1ace2b8beaf9bcb94416547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:ba:6d:3f:b0:e4:57:c5:69:59:e2:57:d9:
                    ac:f7:c8:8e:d5:bc:23:0a:fd:5c:04:26:05:3f:da:
                    f3:0c:49:02:79:84:d9:84:d2:ba:f9:e5:50:70:39:
                    ee:05:af:21:4e:54:97:87:b1:61:31:31:08:93:e9:
                    93:20:bb:91:3f:50:f0:d7:13:ea:21:28:dd:b5:b9:
                    74:a0:e8:f6:f0:a7:15:e9:46:64:77:89:05:45:69:
                    bc:32:69:94:64:c0:6c:54:b8:ff:99:94:6c:81:80:
                    37:cf:88:15:fc:20:96:9e:cc:95:8b:b3:40:54:d4:
                    97:8f:e6:eb:51:8b:5d:7b:aa:f7:c1:26:74:49:e1:
                    a4:dc:6a:40:be:60:93:30:06:b4:05:30:59:6c:9e:
                    c0:85:38:86:1f:21:89:cc:b0:11:ea:7b:bd:d5:85:
                    3c:75:82:be:8e:11:d8:1a:b3:6d:55:93:84:d9:bb:
                    e9:e6:9f:7a:d5:7d:ad:eb:39:e9:33:00:73:f6:38:
                    9f:65:d6:4b:eb:15:c7:47:55:11:d0:59:35:7d:4b:
                    c8:ef:fa:f9:20:19:96:b8:6b:8d:bc:fe:60:21:b0:
                    98:cf:4f:3d:71:c8:c5:8f:d2:94:b3:cf:2c:e9:88:
                    9d:2c:61:38:ad:f7:72:db:70:8a:bd:50:fb:be:34:
                    6a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                66:D3:59:7E:0C:F4:0B:CC:B1:AC:E2:B8:BE:AF:9B:CB:94:41:65:47
            X509v3 Authority Key Identifier: 
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/ZtNZfgz0C8yxrOK4vq-by5RBZUc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.209.192.0/24
                  37.209.194.0/24
                  37.209.196.0/24
                  37.209.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:2b:88:2a:fe:fd:18:c8:00:43:93:6b:6f:6a:c3:0c:19:8d:
         6e:4c:f1:99:71:d7:23:b5:22:15:d8:6f:f4:c2:a2:3d:2b:04:
         41:30:fc:df:da:6a:0c:3d:4c:7b:b1:d7:44:c9:70:19:6a:18:
         a6:c4:c7:9f:ac:c0:a3:69:f6:ef:67:2d:91:8c:00:0f:55:ac:
         b1:e5:c7:92:0e:72:78:1d:44:04:eb:e7:e6:96:54:27:aa:43:
         ec:10:77:90:c6:9d:5e:28:12:65:6f:60:6d:2c:b2:34:a2:dd:
         9a:7d:63:b6:e0:9c:73:a0:37:3a:97:b2:dc:32:2a:71:57:49:
         e5:25:9f:d0:7b:5b:ba:81:e6:66:7d:d4:48:6a:c1:dc:41:e5:
         6d:a4:54:ef:7b:0e:d6:ab:8d:1d:88:06:40:e8:0b:e4:b0:df:
         1a:bc:b9:9e:b1:b8:b6:79:a4:b4:1f:ba:6c:5f:a9:6d:81:a8:
         72:96:94:7c:48:6b:8d:20:ff:e4:85:d6:55:70:5f:95:f8:68:
         bb:e7:62:fd:8c:cf:3a:c8:3b:d3:13:92:3a:18:eb:d6:22:87:
         fe:aa:b2:d3:57:1b:a1:d9:05:36:1e:7f:97:a1:ef:2e:e2:44:
         7c:07:4d:52:f3:8a:8c:8d:31:4a:7a:a8:e6:fa:4a:8f:05:7c:
         43:1b:c8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 04:43:05 2022 by LibreSSL & rpki-client.