Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62160.roa
File: AS62160.roa (raw, json)
Hash identifier: loUtnjnHDZHjKNQfeAyllU4VuqldDEw0Cqd35p6hyaI=
Subject key identifier: 9A:89:2E:1D:80:F5:E8:6E:2B:E1:71:00:46:D8:7B:1E:8E:E9:AB:49
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2706A5A34433C6DF96A8E58C8445F0254E376028
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62160.roa
Signing time: Tue 21 Jan 2025 15:20:03 +0000
ROA not before: Tue 21 Jan 2025 15:15:03 +0000
ROA not after: Tue 20 Jan 2026 15:20:03 +0000
asID: 62160
IP address blocks: 82.21.235.0/24 maxlen: 24
82.22.237.0/24 maxlen: 24
82.23.210.0/24 maxlen: 24
82.26.214.0/24 maxlen: 24
82.27.237.0/24 maxlen: 24
82.29.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:06:a5:a3:44:33:c6:df:96:a8:e5:8c:84:45:f0:25:4e:37:60:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 21 15:15:03 2025 GMT
Not After : Jan 20 15:20:03 2026 GMT
Subject: CN=9A892E1D80F5E86E2BE1710046D87B1E8EE9AB49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:d5:a7:bf:ea:37:cb:7c:a0:9e:83:dd:a3:
7e:73:6e:80:99:d9:43:25:7f:bf:01:5c:95:32:ab:
fc:5b:53:9e:0d:89:97:05:81:a4:9d:bc:f2:96:f1:
41:4e:65:d3:26:f5:f2:88:bd:39:ec:ed:ea:75:cc:
96:1b:c3:18:3a:e6:d4:3f:9c:50:07:76:79:0f:18:
c1:5f:ad:60:a5:31:4c:37:17:8e:01:92:48:da:fc:
ca:03:20:f7:31:07:d9:da:85:b6:f1:4f:cb:da:3d:
ff:d2:a8:d3:88:a5:02:a7:d5:41:95:44:c6:cf:8e:
44:4d:8a:a0:64:b8:8b:c6:49:83:06:e2:73:15:13:
29:8a:50:ed:b7:c3:37:d0:3a:62:40:5c:6a:48:4c:
50:05:08:68:97:08:c0:89:02:8a:5d:74:a0:f9:5e:
2e:ef:b2:27:75:2a:94:bd:fb:6e:82:ef:e4:c6:8e:
c4:71:ca:94:24:58:65:46:8e:53:66:31:83:b8:ec:
0e:b6:74:46:b4:b3:6b:f6:c5:ca:db:9c:1b:4e:67:
7d:6a:b2:51:5b:b3:15:e6:88:50:dd:4e:6e:45:fd:
6e:ca:ca:e9:8c:b4:b2:8d:05:6a:ee:65:7c:63:de:
b5:46:22:f6:bb:32:24:52:8b:5a:96:85:a4:eb:78:
01:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:89:2E:1D:80:F5:E8:6E:2B:E1:71:00:46:D8:7B:1E:8E:E9:AB:49
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62160.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.235.0/24
82.22.237.0/24
82.23.210.0/24
82.26.214.0/24
82.27.237.0/24
82.29.218.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:6a:08:be:78:8f:e4:d1:cd:8c:3f:d1:af:4f:9a:e0:a1:21:
f0:4c:94:19:a6:68:aa:0c:cf:f4:66:0a:9f:4a:cb:19:6f:e8:
e7:14:23:e2:da:fa:5b:c9:1a:f7:98:2c:0d:00:b9:8a:51:da:
74:10:d4:a2:f7:98:ff:4a:11:44:26:14:14:d2:df:76:82:f6:
f5:64:e0:12:50:9d:09:14:10:97:3e:20:fa:22:57:44:a3:70:
5e:d6:9f:c7:4f:58:b1:65:12:b8:a9:60:44:8c:fc:42:a5:e9:
8b:43:e2:e9:fe:82:a4:4b:e6:ed:77:52:36:fe:75:41:4a:10:
5d:59:ac:2d:f6:6a:a8:3e:08:ea:91:15:8a:7e:52:47:88:ee:
41:f7:e2:8d:52:e8:57:d9:6e:f6:dd:e6:56:b9:7b:cf:48:85:
0a:a8:d2:c9:7f:0e:a5:6e:a6:3b:a3:07:90:2a:98:3c:31:d3:
f9:d5:72:79:31:97:7a:6d:67:8d:6c:a1:cc:ee:91:40:e9:ab:
bd:5d:02:7e:3c:87:43:e7:64:ed:98:fc:5c:ea:18:e4:b7:38:
8b:57:3b:63:e9:ed:0c:45:3c:ec:a2:b7:06:09:11:6c:41:6c:
38:f8:0a:a7:1a:0c:90:24:fd:d3:6a:e7:c4:5c:06:d7:be:44:
ae:d9:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:55:49 2025 by rpki-client