Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25160.roa
File: AS25160.roa (raw, json)
Hash identifier: JKT9Oo94LS7IeGgwDjhEp1NKNJv1UyQsb/ZCBmLgTos=
Subject key identifier: 07:ED:D5:D8:D9:4D:8A:BC:CC:82:FA:ED:1C:AC:DC:3F:90:F5:D4:18
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 612B1427857AB0F10BC2CCF10189170A4E2267E2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25160.roa
Signing time: Mon 10 Mar 2025 09:07:20 +0000
ROA not before: Mon 10 Mar 2025 09:02:20 +0000
ROA not after: Mon 09 Mar 2026 09:07:20 +0000
asID: 25160
IP address blocks: 95.134.148.0/24 maxlen: 24
95.134.150.0/24 maxlen: 24
95.135.194.0/24 maxlen: 24
95.135.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:2b:14:27:85:7a:b0:f1:0b:c2:cc:f1:01:89:17:0a:4e:22:67:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 10 09:02:20 2025 GMT
Not After : Mar 9 09:07:20 2026 GMT
Subject: CN=07EDD5D8D94D8ABCCC82FAED1CACDC3F90F5D418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:59:25:fd:8c:d4:a6:d7:77:dc:e2:ca:35:08:
95:63:29:41:23:10:e8:e8:26:88:7c:e3:50:24:e0:
52:9f:50:b4:99:20:b4:3e:50:9d:45:98:9a:57:64:
a5:33:21:86:ee:07:42:70:b5:8b:e1:ee:c2:41:ee:
27:44:e6:e5:43:4e:4e:00:35:b7:91:67:96:f2:32:
12:5b:0b:f2:d8:81:6c:08:1b:5a:62:27:31:2b:07:
3d:88:63:9e:51:eb:8c:d0:8b:b2:30:38:c3:9e:26:
d6:20:15:5c:ec:c0:34:9e:97:2c:2b:eb:18:e4:82:
3b:a4:34:a5:7b:5f:c5:a6:b0:8a:70:b8:98:bd:90:
cd:06:67:2c:d7:e6:e8:b9:89:d2:4c:99:7b:ec:5a:
57:e9:47:93:fe:76:53:af:10:b2:60:f1:df:7a:4a:
31:d4:b7:04:33:d2:ea:46:3a:35:98:7e:0a:48:44:
00:ad:f6:c7:7c:17:56:2d:fc:4e:01:8c:66:b9:0a:
5b:d8:70:c6:e8:6a:bf:08:f0:95:3f:65:97:96:3c:
6d:03:dc:2c:ba:88:b9:75:26:1a:fa:ba:f9:b7:7a:
c5:b7:93:97:c9:6b:09:d6:0e:ed:4c:41:f7:bd:bd:
0e:c4:f3:a4:8a:f0:4a:a0:1b:c1:66:66:3d:7f:43:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:ED:D5:D8:D9:4D:8A:BC:CC:82:FA:ED:1C:AC:DC:3F:90:F5:D4:18
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25160.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.148.0/24
95.134.150.0/24
95.135.194.0/24
95.135.223.0/24
Signature Algorithm: sha256WithRSAEncryption
45:db:f2:31:dc:8e:e0:32:75:8e:4b:0c:0e:d0:96:fe:40:3e:
32:32:f0:47:2e:67:a5:f3:58:99:c9:6d:0b:0e:2c:41:22:c7:
5c:d9:1d:12:3f:67:78:87:07:2c:43:23:a4:87:93:3b:25:a8:
7f:e0:83:fb:91:93:f5:f8:c3:6a:e3:f5:65:f2:0f:77:1f:91:
f6:37:77:7d:f4:b2:37:03:6d:86:81:ce:81:88:f9:46:af:5b:
01:1d:99:d8:2c:16:a9:6b:a5:0a:b3:16:57:fa:41:90:e6:87:
7c:44:74:6b:6b:fd:07:29:7f:3f:b8:b6:e8:fa:9b:f6:d8:aa:
89:73:4d:80:85:d7:46:ef:cc:bb:95:1e:2a:25:46:2f:2a:53:
68:77:67:72:eb:61:c8:19:a5:34:6b:2d:f4:e1:88:42:89:96:
7c:64:96:bd:46:1d:e4:16:1f:eb:84:73:cc:ff:db:c6:81:df:
c0:ec:5f:bf:f1:fd:91:d5:d2:d6:eb:c8:8e:18:7f:e9:a4:0f:
4d:f7:36:1a:d8:32:56:7d:66:1a:d3:0c:54:94:c2:1e:b8:37:
42:f8:50:b4:1d:52:5c:32:c3:bb:b9:06:1e:73:a1:12:a1:9b:
8a:76:d4:08:46:e5:e5:a1:63:95:1c:8e:57:b0:56:fe:3d:eb:
e6:dc:31:9b
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUYSsUJ4V6sPELwszxAYkXCk4iZ+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTAzMTAwOTAyMjBaFw0yNjAzMDkwOTA3MjBaMDMxMTAvBgNV
BAMTKDA3RURENUQ4RDk0RDhBQkNDQzgyRkFFRDFDQUNEQzNGOTBGNUQ0MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfWSX9jNSm13fc4so1CJVjKUEj
EOjoJoh841Ak4FKfULSZILQ+UJ1FmJpXZKUzIYbuB0JwtYvh7sJB7idE5uVDTk4A
NbeRZ5byMhJbC/LYgWwIG1piJzErBz2IY55R64zQi7IwOMOeJtYgFVzswDSelywr
6xjkgjukNKV7X8WmsIpwuJi9kM0GZyzX5ui5idJMmXvsWlfpR5P+dlOvELJg8d96
SjHUtwQz0upGOjWYfgpIRACt9sd8F1Yt/E4BjGa5ClvYcMboar8I8JU/ZZeWPG0D
3Cy6iLl1Jhr6uvm3esW3k5fJawnWDu1MQfe9vQ7E86SK8EqgG8FmZj1/Q8sdAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUB+3V2NlNirzMgvrtHKzcP5D11BgwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjUxNjAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBABfhpQD
BABfhpYDBABfh8IDBABfh98wDQYJKoZIhvcNAQELBQADggEBAEXb8jHcjuAydY5L
DA7Qlv5APjIy8EcuZ6XzWJnJbQsOLEEix1zZHRI/Z3iHByxDI6SHkzslqH/gg/uR
k/X4w2rj9WXyD3cfkfY3d330sjcDbYaBzoGI+UavWwEdmdgsFqlrpQqzFlf6QZDm
h3xEdGtr/Qcpfz+4tuj6m/bYqolzTYCF10bvzLuVHiolRi8qU2h3Z3LrYcgZpTRr
LfThiEKJlnxklr1GHeQWH+uEc8z/28aB38DsX7/x/ZHV0tbryI4Yf+mkD033NhrY
MlZ9ZhrTDFSUwh64N0L4ULQdUlwyw7u5Bh5zoRKhm4p21AhG5eWhY5UcjlewVv49
6+bcMZs=
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:12:14 2025 by rpki-client