Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/8NGYM6HV7AgiSoNMr0eqpy_wrmE.roa (download)

Subject key identifier:   F0:D1:98:33:A1:D5:EC:08:22:4A:83:4C:AF:47:AA:A7:2F:F0:AE:61 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS59709
Prefixes:
    1: 151.252.198.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/8NGYM6HV7AgiSoNMr0eqpy_wrmE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96279939 (0x5bd1d83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 02:43:26 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f0d19833a1d5ec08224a834caf47aaa72ff0ae61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b0:00:76:cb:e9:57:e4:90:07:8a:35:87:7f:
                    59:0c:d7:17:65:5d:74:2f:16:07:89:28:06:aa:57:
                    b2:c8:1f:50:37:3b:67:cf:7f:9f:97:67:ba:50:4d:
                    99:43:8b:bf:c0:4e:0e:c6:c4:11:44:44:3f:85:27:
                    35:6d:27:b1:9e:2c:f2:1a:24:0d:59:53:ce:c8:41:
                    3e:4e:2b:65:1e:3c:d7:8a:c9:08:62:96:ea:95:8f:
                    2a:ae:2d:f5:d4:e8:46:45:02:dc:df:51:cc:d8:d1:
                    7d:3c:4d:b1:fc:c8:a7:a6:66:ab:66:83:d2:47:5b:
                    0d:64:6d:1f:57:45:ea:4f:20:9b:7c:86:b8:47:19:
                    0b:9c:e2:5d:4e:3c:6c:ba:5f:a0:06:fc:8a:fd:60:
                    ec:27:59:0a:97:b8:8b:ee:ff:86:7b:66:4a:14:c5:
                    ad:ec:aa:5c:a6:54:82:8a:3a:78:2c:88:45:67:44:
                    9c:a0:c3:76:e1:2f:56:ad:d2:35:cf:03:f3:a3:e6:
                    54:62:94:19:31:37:08:fc:9d:bd:9b:f4:3b:73:09:
                    ec:e8:6a:38:70:e0:6d:fc:a3:7f:42:77:9b:b7:fa:
                    59:c8:87:ff:a5:c1:88:06:62:b2:28:c4:58:47:d8:
                    aa:4c:3b:97:98:f9:c5:41:d6:f5:97:c7:8e:cc:ef:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F0:D1:98:33:A1:D5:EC:08:22:4A:83:4C:AF:47:AA:A7:2F:F0:AE:61
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/8NGYM6HV7AgiSoNMr0eqpy_wrmE.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.252.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:71:05:16:d3:59:b3:e1:bf:06:6d:c4:42:2d:07:4e:8d:
         a1:31:e1:a0:d9:64:b7:b0:50:3b:d0:0d:6d:8c:c3:d7:d7:0f:
         72:1a:bb:40:5c:93:54:46:aa:54:a4:f7:6e:73:cf:83:fe:d7:
         8e:a6:06:cc:cb:21:07:dc:7c:41:b0:ba:a3:d3:34:38:79:f1:
         3f:6a:1b:b7:7f:40:61:a6:47:8d:8a:00:11:41:35:d0:2f:07:
         d2:41:74:47:93:ae:5f:aa:fe:ba:c3:be:0e:ed:1e:db:d8:dd:
         fb:0a:4d:ad:df:47:bf:5b:f0:ee:23:c4:d7:91:7b:7a:de:ac:
         c3:53:1c:10:22:3d:fb:90:22:b6:ed:91:53:5f:8f:83:76:9c:
         15:43:db:99:f5:b1:fa:fa:5c:6b:ef:d4:ba:ba:77:14:77:69:
         df:ce:87:21:0d:9b:0f:23:02:02:bc:6c:6f:69:e9:71:18:33:
         80:a1:e6:d1:cb:47:f5:f5:e1:a3:0b:7d:5c:a6:1b:53:00:5e:
         36:56:84:ee:91:c0:d0:f0:79:1d:1d:a7:68:56:db:10:f1:49:
         2a:c6:d4:98:23:d5:ff:5d:72:e4:ab:e4:55:40:28:66:8f:f5:
         d9:8d:76:64:92:2b:aa:57:b8:b7:0e:9a:ee:d7:99:2f:06:13:
         df:f3:96:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:51:58 2021 by LibreSSL & rpki-client.