Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25160.roa
File: AS25160.roa (raw, json)
Hash identifier: sFfQwVcbaHHIMddzEwukROvTjjnwsMYahutmMEq7g3E=
Subject key identifier: FA:8E:A6:27:82:CF:79:E3:7E:47:D9:56:7B:CD:36:BE:5B:40:82:93
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 08A9E96A69C917BB85053F27E5AC8613DD304948
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25160.roa
Signing time: Wed 08 Jan 2025 05:35:39 +0000
ROA not before: Wed 08 Jan 2025 05:30:39 +0000
ROA not after: Wed 07 Jan 2026 05:35:39 +0000
asID: 25160
IP address blocks: 82.26.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a9:e9:6a:69:c9:17:bb:85:05:3f:27:e5:ac:86:13:dd:30:49:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 8 05:30:39 2025 GMT
Not After : Jan 7 05:35:39 2026 GMT
Subject: CN=FA8EA62782CF79E37E47D9567BCD36BE5B408293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ae:07:18:01:38:62:45:64:43:15:a7:36:7f:
64:3c:f7:bb:8d:8c:f2:14:c2:c9:87:ba:3c:bd:f5:
46:d6:6d:18:7f:ba:7a:fb:62:d9:0a:71:24:23:cb:
d1:4c:98:2e:e2:0e:b9:e6:56:de:30:a0:23:81:6e:
71:46:18:3b:85:94:1f:09:34:82:d3:9c:81:d8:f9:
55:55:8b:d7:7b:08:5f:0c:71:33:42:59:2e:a5:d3:
0a:b3:e3:ae:c5:5a:d3:12:82:35:f4:e0:3d:85:79:
7d:0a:22:34:f6:7b:40:7b:c0:79:1a:5c:18:b1:5f:
d6:a9:af:74:4b:9a:5c:17:37:3e:02:10:39:27:07:
c5:7d:d0:be:cb:94:a2:e3:95:4f:f1:7c:9c:83:d2:
d4:fc:a9:2b:04:1c:40:db:38:be:ae:7f:73:25:9c:
1e:ce:18:94:6a:14:c0:a3:50:ad:a5:60:55:7f:9b:
59:74:f0:e1:38:ab:67:45:93:a7:c6:d3:fc:0e:ec:
b9:43:2e:76:bf:74:5e:f2:3e:4e:82:97:fd:f6:1b:
e4:12:c3:95:f6:13:23:0a:f6:f9:3e:78:74:2b:0f:
dd:69:ce:1a:e7:74:46:a2:df:df:26:71:a5:d4:2a:
e2:aa:ba:6c:4a:b8:a6:21:30:59:3e:f5:87:28:b9:
cf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8E:A6:27:82:CF:79:E3:7E:47:D9:56:7B:CD:36:BE:5B:40:82:93
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25160.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.207.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d8:16:ca:1d:b7:5c:1f:f9:70:0a:08:76:f8:1f:4d:23:d9:
eb:3a:f0:62:43:3b:39:b7:fe:3c:37:91:a9:a3:12:f4:61:d8:
a0:ff:73:db:f6:a9:52:6f:29:45:fa:f3:ec:bc:82:0b:d1:45:
23:79:96:f2:08:ad:9f:d3:3d:e3:ea:d3:c1:52:35:aa:c2:b0:
14:78:38:2a:87:db:0f:5a:6e:53:95:c5:d7:28:44:18:90:6f:
d2:28:f0:8f:76:c6:16:49:5d:70:1e:01:cd:ba:a9:8a:00:e9:
10:fe:a1:64:5c:71:e5:39:05:a8:dd:08:27:06:21:16:ab:36:
69:43:20:57:81:06:c7:c9:c9:2c:32:71:b6:e1:39:6f:c7:bd:
64:69:cc:73:88:b8:38:be:4b:80:2a:d8:c6:e3:41:e6:02:f0:
cd:29:d0:35:ca:88:22:62:83:31:30:16:f7:8c:84:58:b3:59:
ae:e8:ce:d1:f0:b3:8d:64:68:ae:bb:8e:b8:3a:47:0d:1b:f5:
92:eb:bd:38:8c:a9:41:72:95:9d:8a:be:59:b4:04:bf:ae:b9:
b3:77:69:e2:97:aa:d2:cb:7a:32:4b:05:b2:1b:a3:cd:4b:6d:
75:ab:0f:0d:22:f8:46:4b:98:77:16:ed:5c:b1:3c:d2:16:ec:
6a:d2:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:42 2025 by rpki-client