Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/iUTx-v-g4i5OM25HUD3DXA_ZrB4.roa (download)

Subject key identifier:   89:44:F1:FA:FF:A0:E2:2E:4E:33:6E:47:50:3D:C3:5C:0F:D9:AC:1E 
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
asID:                     AS397239
Prefixes:
    1: 37.209.192.0/24 maxlen: 24
    2: 37.209.194.0/24 maxlen: 24
    3: 37.209.196.0/24 maxlen: 24
    4: 37.209.198.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/iUTx-v-g4i5OM25HUD3DXA_ZrB4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7949271 (0x794bd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Jan  1 03:01:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8944f1faffa0e22e4e336e47503dc35c0fd9ac1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:ae:76:1a:e0:73:e3:95:2d:8b:35:77:57:
                    b8:56:ed:91:27:ba:b8:02:71:41:02:ca:ed:d0:04:
                    a4:0d:f5:8f:d9:0f:8f:f1:42:46:cb:a2:2c:89:3f:
                    ec:6a:b2:a3:e8:67:05:eb:6d:65:ce:02:55:23:53:
                    9b:d5:c4:99:46:60:7f:51:a2:56:86:ce:35:cf:a5:
                    c0:05:b8:10:9a:c9:bf:96:82:56:50:1e:6f:bd:d6:
                    78:12:4f:dd:64:94:92:f9:2f:8b:13:03:63:37:82:
                    bd:d7:77:4f:c3:f3:b1:1a:9f:bd:2f:59:ea:0a:01:
                    c1:5c:05:76:e7:f9:fa:8b:8e:3a:28:6b:27:a2:5f:
                    12:37:44:56:95:78:71:20:0a:ab:32:69:67:80:19:
                    08:c6:ee:e9:07:47:75:fb:d9:c2:e7:ba:39:c8:f0:
                    a2:9e:96:1d:84:75:2d:b6:0a:88:40:d6:5f:bf:fb:
                    2b:da:81:af:e1:d1:68:74:62:50:87:34:d0:ab:65:
                    e6:da:fe:fd:68:ad:a6:33:9b:56:71:bc:42:7c:f9:
                    c0:77:1e:ab:f3:32:e0:ee:b0:39:a6:89:ee:35:ba:
                    17:44:e1:9b:ff:5f:17:27:b7:f4:e1:b5:32:b1:c2:
                    07:4a:fc:d8:4f:42:8a:60:18:6d:b5:18:0c:1d:b9:
                    b0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                89:44:F1:FA:FF:A0:E2:2E:4E:33:6E:47:50:3D:C3:5C:0F:D9:AC:1E
            X509v3 Authority Key Identifier: 
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/iUTx-v-g4i5OM25HUD3DXA_ZrB4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.209.192.0/24
                  37.209.194.0/24
                  37.209.196.0/24
                  37.209.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:cb:9b:7d:42:9e:ab:d6:fe:3f:07:73:89:e0:4e:5d:01:02:
         69:fe:de:38:58:ab:34:77:e0:38:9e:c5:00:eb:93:d9:7b:63:
         8b:ea:f9:25:92:49:40:82:4e:9f:b8:0e:4e:c0:a5:28:ce:9f:
         21:8f:64:2a:bf:c1:bb:cb:cb:d4:ae:c7:b6:1d:79:78:d8:12:
         a6:82:c8:2c:93:78:58:1a:67:8a:cd:6d:0a:2f:65:92:d5:28:
         e7:8d:e2:c8:d7:cf:3c:bc:5f:46:2d:88:21:90:71:c7:68:ce:
         05:55:24:d2:8d:91:7d:3c:5f:3e:37:77:d8:be:4e:10:37:7d:
         00:2c:f0:fb:4a:ad:01:6d:56:9a:0f:57:09:55:5d:9b:37:8e:
         48:47:78:1e:1e:b5:58:84:1d:20:90:cc:ce:b1:2a:0e:21:47:
         6e:59:b5:ac:ea:c9:aa:01:67:08:ea:ef:d7:1b:0a:f9:e1:07:
         fe:68:94:2c:80:02:e0:bf:58:49:22:c1:29:da:fb:b4:96:28:
         63:bc:0f:02:d7:24:c4:00:64:be:dd:8d:8d:1a:a7:91:9b:a8:
         2d:7b:7d:ce:4e:d7:c5:6f:47:78:79:d6:7d:28:65:18:51:54:
         9e:b5:82:e2:56:28:fd:a9:98:e3:5c:43:fb:6f:9a:c7:d8:ec:
         33:1a:5c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 04:43:06 2022 by LibreSSL & rpki-client.