Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/J4gXIQ8P8niYcx9oDe5bkrOvJ0Q.roa (download)

Subject key identifier:   27:88:17:21:0F:0F:F2:78:98:73:1F:68:0D:EE:5B:92:B3:AF:27:44 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS25374
Prefixes:
    1: 212.21.130.0/24 (max: 24)
    2: 212.21.140.0/22 (max: 24)
    3: 212.21.144.0/21 (max: 24)
    4: 212.21.152.0/22 (max: 24)
    5: 212.21.156.0/23 (max: 24)
    6: 212.21.158.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/J4gXIQ8P8niYcx9oDe5bkrOvJ0Q.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95772618 (0x5b55fca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 02:43:20 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=278817210f0ff27898731f680dee5b92b3af2744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:dc:b7:a8:8e:26:a6:c9:83:2b:5d:ef:1c:
                    d9:5b:91:76:97:be:6b:17:68:f7:10:d2:c4:46:9c:
                    94:a3:c5:d3:9b:63:50:37:e6:86:c2:ac:0b:20:5c:
                    59:a8:e3:23:a3:da:2f:f2:46:15:34:50:19:6c:ab:
                    88:a9:52:6b:50:15:95:37:67:f6:78:84:02:69:01:
                    a1:99:f2:5f:0e:90:1c:e9:49:5b:e9:15:47:75:25:
                    39:23:11:91:39:9f:f0:bf:b8:a7:0b:09:db:62:ce:
                    36:38:ed:a7:27:7a:49:50:1b:52:e3:24:db:13:96:
                    f9:7c:8b:b2:70:bb:06:9d:bb:d8:9b:16:a0:e3:36:
                    24:87:67:cb:2d:8c:08:53:50:64:9f:9b:3c:c3:df:
                    f4:a6:05:99:4f:8a:b9:e0:ea:31:18:5d:85:78:77:
                    25:2a:b6:59:9c:2a:37:a7:49:f3:d4:ac:c9:f2:5d:
                    37:5b:01:27:10:a7:a0:f7:29:74:cf:77:87:ff:18:
                    11:f4:04:4e:16:d8:41:dc:e9:37:3b:9f:f9:75:cd:
                    2d:6c:0f:48:06:3d:10:8d:35:56:0e:77:92:17:98:
                    b5:0a:85:b1:95:d5:3a:23:ff:73:08:64:39:63:14:
                    dc:54:a3:48:97:3a:da:16:85:4c:57:9d:c6:2e:bf:
                    03:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                27:88:17:21:0F:0F:F2:78:98:73:1F:68:0D:EE:5B:92:B3:AF:27:44
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/J4gXIQ8P8niYcx9oDe5bkrOvJ0Q.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.21.130.0/24
                  212.21.140.0-212.21.158.255

    Signature Algorithm: sha256WithRSAEncryption
         33:23:53:ba:de:33:7c:1b:60:94:7f:89:df:88:38:e9:9f:1f:
         92:d5:c0:f2:6b:76:c6:a4:82:8f:ab:8c:da:76:48:ef:eb:8a:
         81:47:62:3d:01:87:c2:ab:72:83:09:09:4a:76:c2:3f:6f:2e:
         53:39:08:f5:4a:0f:75:12:27:14:39:26:ec:60:4a:40:d0:26:
         bf:bf:b8:b1:de:02:99:a2:75:9b:e4:39:2a:70:a5:19:90:46:
         87:7d:2b:a0:f1:24:cd:7b:30:22:62:b5:e8:7c:17:50:0e:73:
         2d:8a:28:70:e4:8b:4c:26:bd:28:a2:c2:7c:be:7d:48:29:56:
         4f:90:43:57:59:fb:de:db:64:9d:66:14:07:c7:8e:e3:5c:9d:
         08:e8:f4:67:15:ad:c2:47:cf:4c:20:9a:7d:37:59:2d:90:39:
         f7:31:98:94:37:25:74:e1:ae:45:cd:2d:c8:79:b3:50:fb:fb:
         05:36:1e:bd:4b:08:71:9b:6b:a7:a7:2c:b1:a0:91:c2:df:26:
         17:56:f6:aa:da:16:26:1e:fd:46:ff:32:1c:0c:ca:c2:6f:ed:
         68:fe:b9:58:df:c5:24:eb:6c:b0:9f:fd:42:b5:08:40:63:12:
         33:1b:fd:71:9f:51:6f:71:81:d5:3c:dd:9a:0c:3b:a0:9f:5a:
         01:36:06:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:51:58 2021 by LibreSSL & rpki-client.