Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/f_IsMR2mrZ04Y5gMdznFNqqKYp8.roa (download)

Subject key identifier:   7F:F2:2C:31:1D:A6:AD:9D:38:63:98:0C:77:39:C5:36:AA:8A:62:9F 
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
asID:                     AS397224
Prefixes:
    1: 37.209.192.0/24 maxlen: 24
    2: 37.209.198.0/24 maxlen: 24
    3: 37.209.194.0/24 maxlen: 24
    4: 37.209.196.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/f_IsMR2mrZ04Y5gMdznFNqqKYp8.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7468132 (0x71f464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Jan  1 03:01:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ff22c311da6ad9d3863980c7739c536aa8a629f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:61:00:23:c5:7a:46:0d:ba:62:7b:49:16:ca:
                    ac:bf:63:d6:d7:48:2e:96:6e:70:86:d7:24:e0:cc:
                    1a:05:61:05:4d:c4:3d:f7:a0:93:aa:fc:74:1d:34:
                    b8:23:2b:07:09:f6:7d:76:b5:ce:a6:ff:f2:db:e9:
                    0d:ec:bf:e4:20:44:76:28:58:f6:5d:cb:2d:85:d0:
                    da:ed:ec:f4:77:bd:5a:6e:72:f4:89:e0:3b:05:71:
                    d0:23:f9:ba:e9:0d:27:a8:87:25:09:26:5f:69:4a:
                    5f:10:d5:e7:16:23:2f:79:d2:e8:03:a8:cb:5d:db:
                    e6:dc:45:2f:95:79:60:cb:b7:18:d2:d6:bc:e1:45:
                    ee:fc:09:26:a2:98:b7:3f:7f:98:27:ce:ed:34:0b:
                    cd:ff:d7:5f:ee:82:37:40:18:e2:ef:87:ac:1e:2c:
                    10:88:4b:8c:03:df:6a:98:50:1e:5d:6c:d3:86:ee:
                    fa:18:0a:8b:db:48:f0:4d:02:38:c0:87:d7:de:96:
                    84:54:28:09:3e:98:a9:36:9f:08:32:e2:df:d2:d5:
                    96:d2:f0:3b:67:04:94:65:17:6b:db:7f:7d:36:0c:
                    a5:f7:0a:dd:6b:70:ad:df:73:e0:ea:49:42:1e:23:
                    2a:b7:3f:53:c8:47:a1:47:85:b6:4d:29:99:e6:21:
                    23:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7F:F2:2C:31:1D:A6:AD:9D:38:63:98:0C:77:39:C5:36:AA:8A:62:9F
            X509v3 Authority Key Identifier: 
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/f_IsMR2mrZ04Y5gMdznFNqqKYp8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.209.192.0/24
                  37.209.194.0/24
                  37.209.196.0/24
                  37.209.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:2e:39:0c:9f:29:84:ec:cd:86:8e:ac:8c:9b:ed:6c:2b:4a:
         cf:bd:2f:07:99:42:31:8d:83:ed:b0:0c:d4:59:47:44:f1:a5:
         10:ae:ee:79:97:6b:51:c1:e8:f1:4e:b6:2c:b4:04:92:53:61:
         85:3d:29:95:16:14:9d:d8:fb:0b:53:00:82:70:b9:31:69:15:
         cd:b5:61:10:3e:7b:e8:0c:a2:62:22:05:ea:36:7d:13:f5:5c:
         db:12:1a:b9:a5:b7:26:fb:26:01:59:24:91:77:53:22:a5:2d:
         bd:f9:44:59:3a:e2:e1:a6:47:9b:79:c1:94:57:47:2c:10:2c:
         8f:7b:6f:a8:c8:44:d1:61:3b:8f:c5:56:df:f0:42:47:3a:83:
         d2:a6:41:9c:19:c5:40:3e:72:5d:16:8c:53:63:67:05:75:f2:
         ce:d7:5d:5b:d1:bf:c8:c1:3a:0d:99:3e:26:ce:58:c0:d8:d3:
         43:57:52:be:22:08:eb:45:db:34:31:01:cf:a2:17:63:8f:25:
         e3:07:19:6d:f7:63:c7:37:3c:b1:76:2d:ef:a5:56:65:63:e7:
         51:df:0e:1b:49:b8:e9:f2:45:59:ab:67:ad:a4:94:79:53:e3:
         79:d4:24:39:d9:04:1f:be:22:3f:7f:2a:18:2c:d8:12:74:7a:
         e8:1e:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 04:43:06 2022 by LibreSSL & rpki-client.