Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Zc7EY8BmN4Y_QsVDekwXTtHs88w.roa (download)

Subject key identifier:   65:CE:C4:63:C0:66:37:86:3F:42:C5:43:7A:4C:17:4E:D1:EC:F3:CC 
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
asID:                     AS197897
Prefixes:
    1: 95.158.148.0/24 (max: 24)
    2: 95.158.151.0/24 (max: 24)
    3: 151.252.192.0/22 (max: 24)
    4: 151.252.196.0/23 (max: 24)
    5: 31.211.128.0/19 (max: 24)
    6: 151.252.200.0/21 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Zc7EY8BmN4Y_QsVDekwXTtHs88w.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96516687 (0x5c0ba4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 02:43:29 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=65cec463c06637863f42c5437a4c174ed1ecf3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:26:61:be:26:af:17:e7:c9:2d:28:9b:e9:ca:
                    36:9e:d3:d3:4c:cf:95:87:ae:e5:97:67:0e:f6:14:
                    a2:a6:ac:db:e8:46:db:6b:33:fd:05:5a:b1:8b:5a:
                    3a:8e:8f:a9:99:0c:bd:f6:bd:3f:d0:a1:95:0a:9e:
                    04:6e:08:37:9c:87:39:9e:ef:07:66:d5:86:2d:b1:
                    8e:1e:d0:df:ef:11:d2:07:e2:0f:f1:ea:b0:7b:5d:
                    45:0c:e2:b6:32:0c:5c:98:f9:0b:f7:da:74:82:c0:
                    3e:08:26:dc:1c:2d:6f:27:a2:38:34:8f:39:2b:b2:
                    20:f6:19:45:60:97:f4:72:20:43:ba:62:8c:7b:d4:
                    2c:84:a7:c9:69:c8:8a:25:59:40:52:ec:5a:d4:d0:
                    4e:35:10:f8:b5:d0:bd:aa:7f:5e:8c:e8:5d:db:e9:
                    34:44:df:96:e2:f5:0d:81:e2:db:ed:f1:0c:83:c9:
                    37:94:61:72:cb:43:78:fe:af:41:7e:64:51:ad:24:
                    6b:6a:86:54:52:ff:5d:46:a9:cc:a1:72:90:97:6c:
                    00:67:c2:21:25:6e:f5:d7:b3:35:d1:c1:72:69:81:
                    f4:80:a6:e4:3a:00:7d:9b:a5:b8:fd:c1:d4:50:db:
                    f4:cb:24:1b:8b:8d:35:c4:2a:b5:ff:d2:65:51:ca:
                    0f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                65:CE:C4:63:C0:66:37:86:3F:42:C5:43:7A:4C:17:4E:D1:EC:F3:CC
            X509v3 Authority Key Identifier: 
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Zc7EY8BmN4Y_QsVDekwXTtHs88w.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.211.128.0/19
                  95.158.148.0/24
                  95.158.151.0/24
                  151.252.192.0-151.252.197.255
                  151.252.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:59:ee:e9:0b:61:da:9a:36:1b:a9:a1:54:ab:d1:ac:0c:88:
         55:e8:69:4a:f8:64:39:bd:54:09:db:03:f8:43:fa:06:85:02:
         ab:49:41:8d:e6:9d:fd:ad:58:92:52:8e:25:50:6b:0e:a5:8d:
         30:0c:6f:ac:3d:be:fb:26:6b:41:5e:d1:29:eb:65:be:ed:c8:
         30:63:1b:37:38:10:86:58:df:93:d5:91:26:4d:a1:b4:35:ed:
         d1:bd:c6:50:d4:21:66:d4:5d:1d:0f:a8:e7:a7:c9:8c:8b:70:
         f8:2b:6b:74:85:ea:dd:2f:47:38:c5:d8:04:70:d2:be:59:68:
         1b:9b:43:7a:78:52:4c:f0:3d:41:0e:a8:36:4e:48:e8:96:cd:
         8e:e9:05:19:25:b8:40:aa:a9:e1:db:c2:7b:ec:a2:1a:b0:3d:
         2e:75:b5:17:63:8d:a1:b7:c8:8d:b7:85:84:59:51:48:f6:4d:
         4d:fb:e9:b5:a2:86:5a:35:d9:ee:01:3d:f7:8a:c2:76:8e:c9:
         80:35:18:3b:cb:fa:61:2a:0f:56:e4:a5:28:de:74:7b:01:5f:
         6e:0f:9c:76:cb:ca:6f:23:89:a1:9f:1d:90:5d:6b:8e:d0:34:
         d0:39:da:d7:a8:0c:fe:9c:5f:91:1e:4b:f4:50:3a:e9:a9:2c:
         eb:bf:4f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:51:58 2021 by LibreSSL & rpki-client.