Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/5xkzXwGYp_IKl0FVLWjplwCAu9I.roa (download)

Subject key identifier:   E7:19:33:5F:01:98:A7:F2:0A:97:41:55:2D:68:E9:97:00:80:BB:D2 
Authority key identifier: 6B:D3:5E:BF:62:E9:C5:32:5C:D7:1B:63:FE:8F:39:E8:2B:BC:1A:9D
asID:                     AS399587
Prefixes:
    1: 5.133.125.0/24 maxlen: 24
    2: 5.133.126.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/5xkzXwGYp_IKl0FVLWjplwCAu9I.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37156158 (0x236f53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd35ebf62e9c5325cd71b63fe8f39e82bbc1a9d
        Validity
            Not Before: Jan  1 15:56:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e719335f0198a7f20a9741552d68e9970080bbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:05:5f:e6:9e:41:49:c2:de:af:92:4c:45:
                    cb:01:a5:df:19:2c:75:6d:15:36:ef:4c:1a:a7:ad:
                    8b:25:fb:46:93:6b:98:e9:8b:af:f8:9e:de:5c:15:
                    3d:b6:47:14:62:7c:21:c5:4c:02:2c:ee:fa:02:d6:
                    a5:05:e9:5b:53:b0:ce:ec:ed:eb:ce:09:23:f9:2d:
                    d7:d3:8a:75:e2:4e:2f:0b:a1:ef:f6:fd:83:aa:09:
                    4e:30:6e:0b:b5:e1:07:90:03:00:aa:6b:ff:d9:81:
                    9d:05:f7:63:05:12:ad:0a:1b:0b:0b:96:1e:23:d5:
                    be:45:4c:bd:b5:b9:8a:5e:2a:51:e6:3e:d2:55:78:
                    55:41:3b:61:8a:d8:27:c5:68:d9:e7:76:8e:7c:4f:
                    6b:72:5f:0e:47:03:d3:e7:cb:33:3d:b3:bc:b4:24:
                    32:f4:1a:c5:9a:89:b9:ec:2f:18:ab:a2:49:48:8b:
                    68:f7:b4:cb:09:c7:5f:f5:64:fa:2e:24:39:51:23:
                    b7:86:dc:26:0a:78:f3:33:60:ff:a9:31:d1:19:43:
                    a8:23:68:a0:ec:f6:4a:5f:29:92:1e:59:3d:7f:23:
                    ea:76:1d:3a:01:13:d0:16:75:7f:44:32:5b:ca:86:
                    94:19:7f:07:f4:5c:2f:42:18:b7:a2:62:31:cb:45:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E7:19:33:5F:01:98:A7:F2:0A:97:41:55:2D:68:E9:97:00:80:BB:D2
            X509v3 Authority Key Identifier: 
                keyid:6B:D3:5E:BF:62:E9:C5:32:5C:D7:1B:63:FE:8F:39:E8:2B:BC:1A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9Nev2LpxTJc1xtj_o856Cu8Gp0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/5xkzXwGYp_IKl0FVLWjplwCAu9I.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/a9Nev2LpxTJc1xtj_o856Cu8Gp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.133.125.0-5.133.126.255

    Signature Algorithm: sha256WithRSAEncryption
         a2:41:bf:00:98:fb:1c:d0:af:3e:be:ee:f7:9c:0d:61:76:a3:
         18:1c:20:60:4a:53:70:b2:57:76:29:40:c4:97:6b:8c:d7:23:
         e1:18:02:d5:78:40:3c:41:c9:7c:05:33:b9:0c:ff:22:50:ad:
         7c:48:72:64:cf:e9:a5:e7:33:b1:3f:0b:f5:f1:a1:80:bf:98:
         53:6f:c7:19:b1:07:a4:eb:11:32:67:d1:8a:ab:73:38:ac:d8:
         75:76:eb:24:75:fe:2d:bc:fa:6f:26:8a:3e:cd:a7:65:9f:e1:
         ab:60:a2:21:61:91:8c:05:aa:e8:86:41:4e:0a:00:fb:0e:9a:
         3f:0f:ee:59:47:85:08:a3:7b:e0:fe:d2:ed:be:3a:bb:a6:03:
         4b:91:22:20:27:2e:29:59:25:c5:6a:43:e3:b2:e7:43:ac:5c:
         c5:bc:9a:e5:d1:84:83:ec:72:d9:8b:6f:95:76:20:99:b5:84:
         3c:90:98:f6:fb:15:1f:fe:06:8c:19:77:47:62:2a:d1:0a:7b:
         1d:fc:52:67:cb:4a:67:4e:ba:92:5d:97:40:47:dc:77:4f:cd:
         fb:6c:9c:dc:7b:7b:da:25:fb:bd:68:a2:11:75:09:86:63:da:
         d7:04:cb:15:56:f5:ad:95:88:b9:3b:4b:e3:94:b8:a5:55:56:
         20:36:b3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 18:55:12 2022 by LibreSSL & rpki-client.