Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/x4bX77C3tNGiBpnxdQyVK8g28DE.roa (download)

Subject key identifier:   C7:86:D7:EF:B0:B7:B4:D1:A2:06:99:F1:75:0C:95:2B:C8:36:F0:31 
Authority key identifier: 6B:D3:5E:BF:62:E9:C5:32:5C:D7:1B:63:FE:8F:39:E8:2B:BC:1A:9D
asID:                     AS399587
Prefixes:
    1: 5.133.125.0/24 (max: 24)
    2: 5.133.126.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/x4bX77C3tNGiBpnxdQyVK8g28DE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19346066 (0x1273292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd35ebf62e9c5325cd71b63fe8f39e82bbc1a9d
        Validity
            Not Before: Sep  3 20:03:15 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=c786d7efb0b7b4d1a20699f1750c952bc836f031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:61:39:d5:2d:82:da:af:28:3e:ef:e2:9c:ce:
                    b6:6f:99:90:d0:33:35:aa:32:aa:ea:cb:2e:0a:51:
                    cd:a9:07:93:5c:7c:2d:f1:82:9b:b9:82:27:b0:99:
                    34:18:23:b3:e7:a4:40:32:fb:e0:07:84:a6:d0:4d:
                    73:4b:a5:2b:74:88:08:f7:f5:fc:05:3b:c3:8b:d2:
                    43:61:d7:49:85:6a:08:9d:4d:ae:20:5e:59:09:07:
                    72:d4:1d:2e:c4:58:a9:d3:31:06:66:da:df:13:9a:
                    6d:b7:8d:02:a4:23:0d:5e:6d:a2:5f:a5:19:4c:92:
                    a6:9e:3c:02:ee:d7:31:04:01:04:7a:82:6b:d4:04:
                    3f:9d:c3:f8:0e:de:55:a8:a7:f0:ac:8b:4e:93:a7:
                    17:a5:44:79:a8:f7:c0:57:cd:ff:56:d6:51:85:4f:
                    63:6c:63:d6:dd:b8:54:fe:35:3d:31:48:5c:b7:57:
                    17:f2:3e:c2:67:74:21:7f:33:4a:20:91:b6:0a:57:
                    30:47:65:de:8d:6d:9f:14:e1:10:8b:5e:3c:ab:f2:
                    0b:62:ff:29:f9:7a:1d:db:60:0b:7b:6d:63:74:99:
                    01:ea:79:00:5c:a1:16:12:b9:1d:ac:5d:32:98:2e:
                    4b:56:df:8f:2a:ca:b7:f8:38:24:6c:c1:41:ec:cf:
                    b5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C7:86:D7:EF:B0:B7:B4:D1:A2:06:99:F1:75:0C:95:2B:C8:36:F0:31
            X509v3 Authority Key Identifier: 
                keyid:6B:D3:5E:BF:62:E9:C5:32:5C:D7:1B:63:FE:8F:39:E8:2B:BC:1A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9Nev2LpxTJc1xtj_o856Cu8Gp0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/x4bX77C3tNGiBpnxdQyVK8g28DE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/a9Nev2LpxTJc1xtj_o856Cu8Gp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.133.125.0-5.133.126.255

    Signature Algorithm: sha256WithRSAEncryption
         01:d3:03:e1:7d:0e:2c:0a:27:d1:7b:0c:63:cf:9d:ad:51:28:
         18:27:2b:ad:45:c6:27:f3:6f:03:02:82:0a:1f:5f:09:01:3a:
         8d:ac:91:4d:cd:e9:74:df:b3:77:f2:a5:a3:2b:c4:25:bb:35:
         41:b8:e4:59:9d:42:21:6d:12:e5:bd:17:13:32:28:4f:01:0a:
         dc:b0:5a:f1:89:1e:e5:a2:71:39:54:7b:79:38:a1:d6:63:c7:
         db:20:60:c5:94:09:5f:58:4a:b2:da:42:24:b3:25:56:ac:6f:
         7a:4a:52:7a:95:3a:72:34:47:02:db:6a:a0:c2:65:94:76:72:
         47:d3:65:8d:d6:cd:a8:38:4b:cc:3f:cf:d6:c6:48:9b:7c:43:
         8c:e8:83:c7:78:7b:aa:1a:c7:d4:48:2c:1b:52:57:6f:4f:3f:
         18:27:03:1b:d1:4e:12:43:18:2a:38:04:1f:a9:97:fc:c8:68:
         f0:a4:50:64:d9:b7:d9:1f:20:7f:cc:2b:2f:9d:8d:ae:fe:bf:
         fa:92:91:29:89:70:c1:88:3d:20:f9:d5:73:eb:71:00:5e:2b:
         d7:72:27:0e:75:b4:7b:1f:f2:f1:c1:b0:d8:eb:84:d8:90:5c:
         d4:22:a1:f6:da:fd:c3:cd:bf:6f:16:ca:58:63:68:73:d5:91:
         3c:1e:f9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:50:29 2021 by LibreSSL & rpki-client.