Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/18kyGZfB7ZgWsJjtpwj8sguCRKI.roa (download)

Subject key identifier:   D7:C9:32:19:97:C1:ED:98:16:B0:98:ED:A7:08:FC:B2:0B:82:44:A2 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS199871
Prefixes:
    1: 151.252.199.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/18kyGZfB7ZgWsJjtpwj8sguCRKI.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96640510 (0x5c29dfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 02:43:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d7c9321997c1ed9816b098eda708fcb20b8244a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:44:22:04:9c:41:2d:f7:c4:a7:49:5d:ef:
                    0c:55:81:b2:01:3b:ce:6b:51:9e:2d:0c:36:c6:2b:
                    4b:b9:36:b2:72:ba:97:85:a2:b0:32:19:31:e7:6d:
                    64:96:7f:25:64:83:6d:e6:4c:9e:28:06:ae:37:26:
                    ad:81:0e:7c:b0:91:dd:e4:cf:b2:82:c0:17:b1:02:
                    e7:08:67:23:01:19:cf:61:28:f4:65:eb:17:e1:70:
                    50:cf:44:2c:26:80:1c:7b:0c:9e:8f:56:49:92:fb:
                    87:a2:36:33:6d:71:cc:88:44:80:15:2d:e3:37:87:
                    0e:ba:13:5f:43:64:2c:a7:31:b9:bc:64:06:1b:f1:
                    e1:af:0e:2f:f6:15:62:d2:f6:a7:90:46:0e:e9:59:
                    4c:29:7c:7d:1e:76:5d:0f:a3:ee:e3:77:7d:02:13:
                    8f:88:b9:81:16:75:8c:ca:fe:23:47:86:9e:21:e6:
                    b6:0e:57:7a:d2:b1:94:2e:0a:d4:20:f5:c6:3d:d8:
                    3d:9c:3f:e7:ea:ca:22:8c:f6:89:77:9f:a1:eb:ae:
                    b6:8a:83:c0:65:2b:52:ab:fd:23:fd:95:6e:50:cf:
                    cd:ef:ac:1e:d5:71:9d:00:41:f0:8f:c4:20:5d:f6:
                    fd:ca:bd:2a:fe:fa:50:27:33:71:bb:a1:d8:b8:41:
                    63:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D7:C9:32:19:97:C1:ED:98:16:B0:98:ED:A7:08:FC:B2:0B:82:44:A2
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/18kyGZfB7ZgWsJjtpwj8sguCRKI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.252.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:c5:de:b6:4d:29:ce:f4:3d:1f:8e:9f:d3:5b:44:ed:98:3f:
         fe:74:9c:08:ef:01:f5:c4:14:f2:a3:ee:c8:89:55:20:f1:18:
         0c:4c:83:0c:51:e5:56:2f:12:e1:bf:88:5f:1c:d0:de:b9:c8:
         41:5a:7e:bb:45:07:03:15:27:8b:e6:74:f9:fd:29:f1:64:b2:
         fb:e8:43:e7:1d:7b:99:4c:42:bc:69:2b:0c:03:5a:d4:50:12:
         a5:da:da:1f:2b:f9:b3:fa:4b:6e:06:70:a6:38:38:ae:ba:a1:
         6b:0c:87:74:6b:78:5a:6c:68:cb:4e:e6:ad:3c:53:6e:7f:69:
         3d:8e:32:1d:1a:1e:f0:69:da:01:93:f4:ee:c1:9f:a7:6f:ee:
         33:32:52:24:d0:aa:c2:76:2f:f5:19:b8:92:2a:f2:4a:20:6b:
         a5:89:12:c9:32:df:f8:87:68:a4:8c:0c:b5:7c:b2:2d:29:52:
         25:29:8f:c3:17:72:35:51:0c:fa:43:4b:21:42:bb:d9:61:47:
         6c:5b:0c:31:74:e2:3f:42:60:07:12:1c:d7:f8:45:63:37:da:
         a9:9d:b4:2f:2e:1f:c9:69:72:a4:58:ab:64:c2:ca:31:43:50:
         3d:52:12:55:ba:14:07:cb:17:9f:5f:6a:67:8b:93:b8:07:f5:
         1f:0e:fa:d5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBcKd/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YmVjOTAzMGM3MGEzZDQxOTJkNTljMjhkY2M4ZDU0NzY5NDM0MGIzMB4XDTIxMDEw
MTAyNDMzMFoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDdjOTMyMTk5N2Mx
ZWQ5ODE2YjA5OGVkYTcwOGZjYjIwYjgyNDRhMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJuJRCIEnEEt98SnSV3vDFWBsgE7zmtRni0MNsYrS7k2snK6
l4WisDIZMedtZJZ/JWSDbeZMnigGrjcmrYEOfLCR3eTPsoLAF7EC5whnIwEZz2Eo
9GXrF+FwUM9ELCaAHHsMno9WSZL7h6I2M21xzIhEgBUt4zeHDroTX0NkLKcxubxk
Bhvx4a8OL/YVYtL2p5BGDulZTCl8fR52XQ+j7uN3fQITj4i5gRZ1jMr+I0eGniHm
tg5XetKxlC4K1CD1xj3YPZw/5+rKIoz2iXefoeuutoqDwGUrUqv9I/2VblDPze+s
HtVxnQBB8I/EIF32/cq9Kv76UCczcbuh2LhBY60CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTXyTIZl8HtmBawmO2nCPyyC4JEojAfBgNVHSMEGDAWgBTr7JAwxwo9QZLV
nCjcyNVHaUNAszAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzYteVFNTWNLUFVHUzFad28zTWpWUjJsRFFMTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvMzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8x
LzE4a3lHWmZCN1pnV3NKanRwd2o4c2d1Q1JLSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
MzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8xLzYteVFNTWNLUFVH
UzFad28zTWpWUjJsRFFMTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJf8xzANBgkqhkiG9w0BAQsFAAOC
AQEAbsXetk0pzvQ9H46f01tE7Zg//nScCO8B9cQU8qPuyIlVIPEYDEyDDFHlVi8S
4b+IXxzQ3rnIQVp+u0UHAxUni+Z0+f0p8WSy++hD5x17mUxCvGkrDANa1FASpdra
Hyv5s/pLbgZwpjg4rrqhawyHdGt4Wmxoy07mrTxTbn9pPY4yHRoe8GnaAZP07sGf
p2/uMzJSJNCqwnYv9Rm4kirySiBrpYkSyTLf+IdopIwMtXyyLSlSJSmPwxdyNVEM
+kNLIUK72WFHbFsMMXTiP0JgBxIc1/hFYzfaqZ20Ly4fyWlypFirZMLKMUNQPVIS
VboUB8sXn19qZ4uTuAf1Hw761Q==
-----END CERTIFICATE-----

Generated at Sun Sep 26 11:51:57 2021 by LibreSSL & rpki-client.