Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/qDkl1upLf6mYFMGXYzN-9QBKk8s.roa (download)

Subject key identifier:   A8:39:25:D6:EA:4B:7F:A9:98:14:C1:97:63:33:7E:F5:00:4A:93:CB 
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
asID:                     AS397223
Prefixes:
    1: 37.209.192.0/24 maxlen: 24
    2: 37.209.198.0/24 maxlen: 24
    3: 37.209.194.0/24 maxlen: 24
    4: 37.209.196.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/qDkl1upLf6mYFMGXYzN-9QBKk8s.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7434458 (0x7170da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Jan  1 03:01:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a83925d6ea4b7fa99814c19763337ef5004a93cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:14:ff:da:76:26:95:cd:4d:16:58:55:f0:b1:
                    00:c6:84:9e:b9:0c:8d:27:a2:05:94:97:89:b2:0a:
                    d8:bf:5d:e0:48:8b:a7:77:ee:25:14:6b:af:34:78:
                    1b:90:60:75:f7:07:34:07:bd:b6:a9:99:3a:86:ec:
                    e8:21:3c:7c:9f:dd:a4:70:89:51:80:70:8c:3b:14:
                    26:43:a2:d2:54:4a:62:06:8d:8d:32:99:f3:13:73:
                    29:31:a3:74:6f:20:1a:fe:c3:91:af:82:06:5b:e2:
                    a7:42:6a:7e:1b:c0:50:b2:d6:d8:75:7e:2a:96:a4:
                    ca:53:eb:65:42:ab:73:1a:fe:d9:73:86:78:ac:9f:
                    27:ed:3f:91:6f:2f:d0:1a:41:fb:58:15:b7:23:4e:
                    ba:15:2f:64:af:c9:32:9d:f1:2c:a6:f2:64:4b:f0:
                    22:2d:d4:d4:5b:50:89:ce:c1:96:97:e2:b2:af:0f:
                    21:75:11:bf:df:43:f8:97:b6:fc:ea:7e:76:f4:5f:
                    7c:75:ff:21:b8:1a:8e:10:61:14:79:ea:0b:d4:ca:
                    af:45:ca:60:b2:5a:9b:1b:c0:2b:6b:37:d4:de:c7:
                    31:53:1a:31:49:60:ea:80:0a:c4:a3:fc:6e:f6:0e:
                    9b:5c:0c:2c:6e:28:40:07:ae:a1:25:59:ca:e4:26:
                    02:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A8:39:25:D6:EA:4B:7F:A9:98:14:C1:97:63:33:7E:F5:00:4A:93:CB
            X509v3 Authority Key Identifier: 
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/qDkl1upLf6mYFMGXYzN-9QBKk8s.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.209.192.0/24
                  37.209.194.0/24
                  37.209.196.0/24
                  37.209.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:98:52:47:7b:a0:9c:1d:a4:84:e4:47:6e:d5:10:2c:d0:ba:
         d7:1d:4c:3e:35:ed:6f:5a:52:bb:60:d0:fe:5b:b4:a6:ae:5d:
         86:21:90:fa:f5:8e:f8:d5:60:b3:d5:c0:a3:d2:1d:df:0f:fb:
         77:16:78:42:48:e1:01:7a:25:fe:cf:a9:05:07:5f:1f:5f:df:
         6a:45:0a:b2:95:14:b1:18:cd:6a:79:cd:f2:aa:e8:51:2a:f1:
         76:ef:79:45:15:ad:21:4a:e5:46:5a:06:c5:a0:cf:8a:95:67:
         60:01:58:18:ba:59:9b:82:e6:16:df:a4:d2:f1:de:81:69:4f:
         cc:70:bb:d5:6d:13:af:41:24:ed:69:ea:14:3f:c5:18:59:5a:
         42:6f:c1:ad:6b:5e:82:a2:58:29:3f:3c:9c:4a:ae:79:a7:f6:
         e2:c7:f0:ad:51:6a:19:e7:fa:b5:38:83:39:f2:be:d9:6a:24:
         8f:dc:4a:7b:24:1b:5f:6c:98:f4:31:69:be:72:74:bd:f8:5e:
         33:60:59:a6:ab:05:f4:48:da:47:80:f8:ba:8b:10:9e:3a:8e:
         1d:28:fe:eb:5b:16:a7:32:61:a9:d0:68:98:4b:66:0f:b5:86:
         a2:11:6c:81:c6:eb:71:91:2b:44:45:21:bb:6c:03:33:8b:78:
         96:46:7d:15
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIDcXDaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE1
YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjljOGJmMmMwHhcNMjIwMTAx
MDMwMTAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhODM5MjVkNmVhNGI3
ZmE5OTgxNGMxOTc2MzMzN2VmNTAwNGE5M2NiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlRT/2nYmlc1NFlhV8LEAxoSeuQyNJ6IFlJeJsgrYv13gSIun
d+4lFGuvNHgbkGB19wc0B722qZk6huzoITx8n92kcIlRgHCMOxQmQ6LSVEpiBo2N
MpnzE3MpMaN0byAa/sORr4IGW+KnQmp+G8BQstbYdX4qlqTKU+tlQqtzGv7Zc4Z4
rJ8n7T+Rby/QGkH7WBW3I066FS9kr8kynfEspvJkS/AiLdTUW1CJzsGWl+Kyrw8h
dRG/30P4l7b86n529F98df8huBqOEGEUeeoL1MqvRcpgslqbG8ArazfU3scxUxox
SWDqgArEo/xu9g6bXAwsbihAB66hJVnK5CYC/QIDAQABo4ICGzCCAhcwHQYDVR0O
BBYEFKg5JdbqS3+pmBTBl2MzfvUASpPLMB8GA1UdIwQYMBaAFKWuij2L2qv0dl/a
edVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdiLzEv
cURrbDF1cExmNm1ZRk1HWFl6Ti05UUJLazhzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8w
ZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdiLzEvcGE2S1BZdmFxX1Iy
WDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQAJdHCAwQAJdHEAwQAJdHG
MA0GCSqGSIb3DQEBCwUAA4IBAQA5mFJHe6CcHaSE5Edu1RAs0LrXHUw+Ne1vWlK7
YND+W7Smrl2GIZD69Y741WCz1cCj0h3fD/t3FnhCSOEBeiX+z6kFB18fX99qRQqy
lRSxGM1qec3yquhRKvF273lFFa0hSuVGWgbFoM+KlWdgAVgYulmbguYW36TS8d6B
aU/McLvVbROvQSTtaeoUP8UYWVpCb8Gta16ColgpPzycSq55p/bix/CtUWoZ5/q1
OIM58r7ZaiSP3Ep7JBtfbJj0MWm+cnS9+F4zYFmmqwX0SNpHgPi6ixCeOo4dKP7r
WxanMmGp0GiYS2YPtYaiEWyBxutxkStERSG7bAMzi3iWRn0V
-----END CERTIFICATE-----

Generated at Sat Jan 1 04:43:06 2022 by LibreSSL & rpki-client.