Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/LcYgZGqnFjf6533R9gYVpY-BJ34.roa
File: LcYgZGqnFjf6533R9gYVpY-BJ34.roa (raw, json)
Hash identifier: hwKhDWe5E7fW6slDPaAfzga6BaQKR7vPLYoabvjm9ec=
Subject key identifier: 2D:C6:20:64:6A:A7:16:37:FA:E7:7D:D1:F6:06:15:A5:8F:81:27:7E
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 018F3AC282A7B0D8C7C0460002FF08BD5ED5
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/LcYgZGqnFjf6533R9gYVpY-BJ34.roa
Signing time: Thu 02 May 2024 19:22:57 +0000
ROA not before: Thu 02 May 2024 19:22:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47394
IP address blocks: 46.255.144.0/21 maxlen: 21
46.255.144.0/22 maxlen: 22
46.255.144.0/24 maxlen: 24
46.255.145.0/24 maxlen: 24
46.255.146.0/24 maxlen: 24
46.255.147.0/24 maxlen: 24
46.255.148.0/22 maxlen: 22
46.255.148.0/24 maxlen: 24
46.255.149.0/24 maxlen: 24
46.255.150.0/24 maxlen: 24
46.255.151.0/24 maxlen: 24
95.107.128.0/21 maxlen: 21
95.107.129.0/24 maxlen: 24
95.107.132.0/24 maxlen: 24
95.107.135.0/24 maxlen: 24
95.107.136.0/21 maxlen: 21
95.107.136.0/24 maxlen: 24
95.107.141.0/24 maxlen: 24
95.107.144.0/23 maxlen: 23
95.107.144.0/24 maxlen: 24
95.107.145.0/24 maxlen: 24
95.107.146.0/23 maxlen: 23
95.107.150.0/24 maxlen: 24
95.107.156.0/24 maxlen: 24
95.107.157.0/24 maxlen: 24
95.107.159.0/24 maxlen: 24
95.107.160.0/21 maxlen: 21
95.107.160.0/22 maxlen: 22
95.107.160.0/24 maxlen: 24
95.107.162.0/23 maxlen: 23
95.107.162.0/24 maxlen: 24
95.107.164.0/22 maxlen: 22
95.107.164.0/24 maxlen: 24
95.107.165.0/24 maxlen: 24
95.107.166.0/24 maxlen: 24
95.107.167.0/24 maxlen: 24
95.107.168.0/22 maxlen: 22
95.107.168.0/23 maxlen: 23
95.107.170.0/23 maxlen: 23
95.107.172.0/23 maxlen: 23
95.107.174.0/24 maxlen: 24
95.107.176.0/21 maxlen: 21
95.107.177.0/24 maxlen: 24
95.107.180.0/22 maxlen: 22
95.107.182.0/24 maxlen: 24
95.107.184.0/21 maxlen: 21
95.107.184.0/22 maxlen: 22
95.107.188.0/22 maxlen: 22
95.107.188.0/24 maxlen: 24
95.107.192.0/22 maxlen: 22
95.107.192.0/24 maxlen: 24
95.107.193.0/24 maxlen: 24
95.107.194.0/23 maxlen: 23
95.107.194.0/24 maxlen: 24
95.107.195.0/24 maxlen: 24
95.107.196.0/22 maxlen: 22
95.107.196.0/23 maxlen: 23
95.107.196.0/24 maxlen: 24
95.107.198.0/23 maxlen: 23
95.107.200.0/21 maxlen: 21
95.107.200.0/22 maxlen: 22
95.107.200.0/24 maxlen: 24
95.107.201.0/24 maxlen: 24
95.107.202.0/23 maxlen: 23
95.107.204.0/22 maxlen: 22
95.107.208.0/20 maxlen: 20
95.107.208.0/21 maxlen: 21
95.107.208.0/22 maxlen: 22
95.107.208.0/23 maxlen: 23
95.107.209.0/24 maxlen: 24
95.107.212.0/22 maxlen: 22
95.107.212.0/23 maxlen: 23
95.107.212.0/24 maxlen: 24
95.107.216.0/21 maxlen: 21
95.107.216.0/22 maxlen: 22
95.107.216.0/23 maxlen: 23
95.107.218.0/23 maxlen: 23
95.107.220.0/22 maxlen: 22
95.107.220.0/23 maxlen: 23
95.107.222.0/23 maxlen: 23
95.107.224.0/20 maxlen: 20
95.107.224.0/22 maxlen: 22
95.107.228.0/22 maxlen: 22
95.107.228.0/24 maxlen: 24
95.107.232.0/22 maxlen: 22
95.107.234.0/23 maxlen: 23
95.107.236.0/22 maxlen: 22
95.107.238.0/23 maxlen: 23
95.107.240.0/20 maxlen: 20
95.107.240.0/22 maxlen: 22
95.107.244.0/22 maxlen: 22
95.107.248.0/22 maxlen: 22
95.107.248.0/23 maxlen: 23
95.107.248.0/24 maxlen: 24
95.107.252.0/22 maxlen: 22
95.107.254.0/23 maxlen: 23
141.8.200.0/21 maxlen: 21
185.118.148.0/22 maxlen: 22
185.118.148.0/23 maxlen: 23
185.118.150.0/23 maxlen: 23
185.122.228.0/22 maxlen: 22
185.122.228.0/23 maxlen: 23
185.122.228.0/24 maxlen: 24
2a03:8480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3a:c2:82:a7:b0:d8:c7:c0:46:00:02:ff:08:bd:5e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: May 2 19:22:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dc620646aa71637fae77dd1f60615a58f81277e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:4b:cc:e4:2f:73:d0:64:22:ed:f7:ea:35:
e0:8a:62:f8:43:44:bd:68:7a:d3:8b:78:35:96:7f:
32:35:57:d6:f6:99:65:6f:e9:dd:f8:37:6a:93:5b:
6d:08:75:b0:7c:d6:1b:04:3e:98:40:eb:b2:c2:7f:
e9:b4:12:ef:a5:c2:d4:1e:4a:08:45:0d:5d:ad:8e:
57:80:d9:0f:bf:69:5f:9a:58:ae:78:ce:17:49:0e:
57:c0:88:f1:60:32:1f:61:55:05:42:52:79:49:48:
05:d9:eb:b5:fa:e9:29:24:0d:20:28:e3:d6:29:10:
e7:3e:f3:7c:90:18:e9:b3:fb:80:a2:8b:d7:c6:a1:
dc:02:6f:57:5a:9b:0a:a2:9e:88:f5:09:aa:0f:f9:
9f:e6:6f:7f:d1:04:f3:04:0e:23:06:1f:f1:94:c1:
ca:60:df:68:4d:a5:21:12:5d:3e:21:5b:75:7e:97:
c5:e6:fb:95:f9:5b:63:25:90:4a:2a:60:ef:da:ce:
b3:2d:40:4c:17:3b:d0:22:0b:db:2c:c3:21:38:bb:
e6:58:91:14:d6:f2:f6:8f:63:ca:04:8d:b9:6e:58:
6e:e0:6d:4b:92:a4:dc:49:84:5e:5b:07:1f:9b:f7:
d5:78:5a:d5:70:3f:8a:15:24:7e:2b:57:9b:1e:a1:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C6:20:64:6A:A7:16:37:FA:E7:7D:D1:F6:06:15:A5:8F:81:27:7E
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/LcYgZGqnFjf6533R9gYVpY-BJ34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.144.0/21
95.107.128.0-95.107.147.255
95.107.150.0/24
95.107.156.0/23
95.107.159.0-95.107.174.255
95.107.176.0-95.107.255.255
141.8.200.0/21
185.118.148.0/22
185.122.228.0/22
IPv6:
2a03:8480::/32
Signature Algorithm: sha256WithRSAEncryption
67:68:df:c3:fa:d9:eb:a8:f1:ce:6f:01:71:0c:2d:4e:be:ee:
9e:e2:92:9e:30:c8:47:a9:b7:07:68:4f:d2:3a:c6:9c:a9:1a:
58:dc:9a:78:58:ce:61:fc:d7:c9:31:df:46:ce:73:99:b7:04:
2b:9b:ed:fc:0d:28:5b:4b:c8:17:3c:da:fa:7e:8d:3b:56:16:
1c:69:57:17:b8:6a:20:78:5b:e7:73:00:df:77:1b:c4:30:92:
6e:d6:0c:0d:9b:1c:46:d0:35:07:39:48:ad:24:df:48:cb:ec:
e5:e1:40:7b:4d:56:ba:b7:40:57:18:aa:d5:97:d6:a5:76:d4:
d7:ee:c4:55:41:d2:d1:59:a0:9d:33:12:b1:4c:52:cc:13:9d:
3d:e5:86:29:8e:4e:18:38:a0:6c:e3:07:00:6c:cb:6e:79:72:
c7:1e:df:2c:fd:bc:ea:96:9c:9b:c9:45:94:1e:6f:02:6a:47:
fa:62:22:93:96:fb:7b:f1:90:44:8c:1c:78:4b:22:fb:03:cd:
1c:52:a0:0f:41:73:21:5a:89:bf:9e:e7:28:96:a4:b8:d9:f1:
f6:c8:3d:7b:4b:f6:2f:40:c1:83:ff:99:00:82:cd:af:10:e1:
3c:1d:68:58:63:5b:f6:f3:d0:ad:c1:e4:81:8e:a8:06:b3:bc:
0b:fe:4c:e4
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAY86woKnsNjHwEYAAv8IvV7VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MTY1MzllNzQ5MzRkMjNhMDU3MmY2NjI1ZGJmZGI1NGU4
MjA4NzMwHhcNMjQwNTAyMTkyMjU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGM2MjA2NDZhYTcxNjM3ZmFlNzdkZDFmNjA2MTVhNThmODEyNzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraxLzOQvc9BkIu336jXgimL4Q0S9
aHrTi3g1ln8yNVfW9pllb+nd+Ddqk1ttCHWwfNYbBD6YQOuywn/ptBLvpcLUHkoI
RQ1drY5XgNkPv2lfmliueM4XSQ5XwIjxYDIfYVUFQlJ5SUgF2eu1+ukpJA0gKOPW
KRDnPvN8kBjps/uAoovXxqHcAm9XWpsKop6I9QmqD/mf5m9/0QTzBA4jBh/xlMHK
YN9oTaUhEl0+IVt1fpfF5vuV+VtjJZBKKmDv2s6zLUBMFzvQIgvbLMMhOLvmWJEU
1vL2j2PKBI25blhu4G1LkqTcSYReWwcfm/fVeFrVcD+KFSR+K1ebHqGayQIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFC3GIGRqpxY3+ud90fYGFaWPgSd+MB8GA1UdIwQY
MBaAFPQWU550k00joFcvZiXb/bVOgghzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODkt
ZDY3YTYxZDU0MTZkLzEvTGNZZ1pHcW5GamY2NTMzUjlnWVZwWS1CSjM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODktZDY3YTYxZDU0MTZk
LzEvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBTBAIAATBNAwQDLv+QMAwD
BAdfa4ADBAJfa5ADBABfa5YDBAFfa5wwDAMEAF9rnwMEAF9rrjALAwQEX2uwAwMC
X2gDBAONCMgDBAK5dpQDBAK5euQwDQQCAAIwBwMFACoDhIAwDQYJKoZIhvcNAQEL
BQADggEBAGdo38P62euo8c5vAXEMLU6+7p7ikp4wyEeptwdoT9I6xpypGljcmnhY
zmH818kx30bOc5m3BCub7fwNKFtLyBc82vp+jTtWFhxpVxe4aiB4W+dzAN93G8Qw
km7WDA2bHEbQNQc5SK0k30jL7OXhQHtNVrq3QFcYqtWX1qV21NfuxFVB0tFZoJ0z
ErFMUswTnT3lhimOThg4oGzjBwBsy255csce3yz9vOqWnJvJRZQebwJqR/piIpOW
+3vxkESMHHhLIvsDzRxSoA9BcyFaib+e5yiWpLjZ8fbIPXtL9i9AwYP/mQCCza8Q
4TwdaFhjW/bz0K3B5IGOqAazvAv+TOQ=
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:55:03 2024 by rpki-client on console-ams.rpki-client.org