Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/XqgRA5XpKPUqshx8WuxvNdyTmfs.roa (download)

Subject key identifier:   5E:A8:11:03:95:E9:28:F5:2A:B2:1C:7C:5A:EC:6F:35:DC:93:99:FB 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS197897
Prefixes:
    1: 95.158.148.0/24 maxlen: 24
    2: 95.158.151.0/24 maxlen: 24
    3: 151.252.192.0/22 maxlen: 24
    4: 151.252.196.0/23 maxlen: 24
    5: 31.211.128.0/19 maxlen: 24
    6: 151.252.200.0/21 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/XqgRA5XpKPUqshx8WuxvNdyTmfs.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150048374 (0x8f18e76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 08:05:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5ea8110395e928f52ab21c7c5aec6f35dc9399fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:d2:95:05:d0:e7:d8:8e:55:e3:3a:b0:a2:
                    68:8e:e5:76:e6:2f:3c:e5:41:63:3d:47:bc:5f:12:
                    f9:6e:5b:3b:41:54:3a:3c:b0:da:19:2a:41:89:09:
                    82:20:46:ed:2c:ec:59:ab:ed:86:7e:7d:0e:77:fc:
                    0c:b7:2e:45:05:a5:b3:43:e6:88:7a:13:1f:d4:fd:
                    fe:8e:2d:e4:13:21:69:fc:64:80:b3:7f:fd:07:83:
                    4c:91:2b:91:d3:da:e0:8b:00:dc:6d:81:41:46:1d:
                    c1:d0:04:0e:02:dd:51:50:9c:92:13:d5:63:2a:77:
                    30:a7:83:c9:94:78:ad:7e:d3:08:d7:4c:b1:da:37:
                    4e:bb:72:91:05:f0:2e:e4:f7:52:2a:f2:44:dd:53:
                    78:71:a4:ac:a8:f2:51:7e:6d:6b:16:0f:0d:79:4e:
                    f9:8b:89:88:91:30:14:a3:80:54:bb:fd:ca:58:b6:
                    4e:da:a5:38:15:47:22:03:a1:e2:8a:00:05:8e:e7:
                    b7:fc:f6:da:3b:32:91:27:a1:52:a0:b9:28:36:1e:
                    c8:b0:ee:a9:ef:e7:68:63:86:bb:f2:67:dc:c7:79:
                    57:ce:ba:68:76:1b:e3:3c:5a:21:96:22:b2:8a:2e:
                    b0:70:a4:71:91:b9:72:d9:47:e9:00:0c:36:e3:90:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5E:A8:11:03:95:E9:28:F5:2A:B2:1C:7C:5A:EC:6F:35:DC:93:99:FB
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/XqgRA5XpKPUqshx8WuxvNdyTmfs.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.211.128.0/19
                  95.158.148.0/24
                  95.158.151.0/24
                  151.252.192.0-151.252.197.255
                  151.252.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:8b:05:7a:88:5a:4f:3c:db:c5:77:63:36:76:e5:be:bf:3e:
         8f:60:b6:9d:84:c9:e1:14:06:a3:21:5e:23:c8:af:1c:25:a9:
         31:bd:38:c5:33:c7:45:fe:dc:db:27:73:58:38:62:a6:c0:6b:
         39:f6:61:4f:2d:35:8e:6a:04:ee:b4:cc:c2:20:9f:cb:ff:3f:
         3a:25:a8:47:02:44:36:ed:a9:7b:86:8f:25:0b:6e:62:c4:c7:
         ed:f1:62:a7:83:f6:17:53:c6:84:73:78:a0:16:6f:9a:ac:11:
         80:51:05:f1:51:10:e6:90:d8:7a:0c:f8:b8:a0:be:39:f6:8e:
         6c:0e:4d:22:ee:3b:ba:26:34:b9:0c:6a:da:27:24:93:1d:01:
         c0:5c:3e:44:15:74:36:74:81:56:b6:0a:d9:8c:70:0a:b0:64:
         d1:e7:58:c8:91:b3:ff:c7:ef:b8:4e:29:a6:f8:aa:ef:52:76:
         87:aa:0b:c1:52:14:41:2c:ef:86:e0:c9:76:cd:bb:af:2b:e6:
         90:0e:51:1f:62:b1:cb:a1:34:56:68:84:84:d4:ee:46:35:f3:
         0b:55:53:70:f2:e9:f5:f8:e0:1a:3e:d8:e0:d7:33:29:f8:14:
         bd:6d:24:3c:57:8c:bc:13:33:bd:2c:66:6b:eb:67:e3:96:12:
         da:d3:f4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 10:26:28 2022 by LibreSSL & rpki-client.