Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62160.roa
File: AS62160.roa (raw, json)
Hash identifier: qKwBm0TiqatsPT5hWdpxX+lQXWGcuUdZSxrdhvrbmMI=
Subject key identifier: 8B:73:1F:F2:6E:59:16:B3:75:18:FD:EA:CC:98:5E:80:29:8C:54:B0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3F1AF69152C31FE5ECCD20FD6B5DF81134450274
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62160.roa
Signing time: Thu 22 May 2025 07:54:08 +0000
ROA not before: Thu 22 May 2025 07:49:08 +0000
ROA not after: Thu 21 May 2026 07:54:08 +0000
asID: 62160
IP address blocks: 92.112.213.0/24 maxlen: 24
92.112.216.0/24 maxlen: 24
92.112.222.0/24 maxlen: 24
92.112.227.0/24 maxlen: 24
92.112.235.0/24 maxlen: 24
92.112.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:1a:f6:91:52:c3:1f:e5:ec:cd:20:fd:6b:5d:f8:11:34:45:02:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 22 07:49:08 2025 GMT
Not After : May 21 07:54:08 2026 GMT
Subject: CN=8B731FF26E5916B37518FDEACC985E80298C54B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:44:a9:dc:57:e1:76:2b:6d:45:b5:d7:f9:
c5:bf:0b:e0:cb:69:b3:54:15:09:c9:a0:3a:33:0c:
ff:32:91:0d:ef:d0:c9:ce:31:dd:0c:19:f1:96:ab:
52:ab:41:a9:b8:85:6a:31:d6:aa:96:9a:b3:e5:60:
e3:59:af:bb:5b:cf:aa:2f:de:92:fe:b0:83:4d:4d:
88:b1:50:63:9e:ff:e8:2c:5b:5d:ee:54:3c:2b:1e:
47:80:77:01:6b:9b:4a:72:e4:3b:2c:29:53:57:4e:
e7:c8:14:23:17:3a:71:7d:c1:e9:a7:49:cf:fa:d7:
67:3f:dc:25:52:55:74:98:e7:4f:e7:81:05:5a:95:
53:24:2a:21:8d:66:4c:0e:f8:b4:b2:fe:8a:51:c0:
24:3b:79:b7:d8:1f:01:07:b6:ae:f1:47:6a:e2:8f:
f8:0d:ac:e0:79:f6:4d:93:5e:e8:10:bc:11:84:9d:
33:8f:ec:87:2e:8e:e0:c3:a4:a2:02:a7:d2:5e:7e:
55:9c:60:2a:1b:2f:39:22:d9:75:73:56:df:ad:45:
1c:83:42:a6:88:88:89:7d:26:16:e9:3c:9e:1c:02:
2c:0f:57:c8:1c:64:87:58:e7:fd:b0:cc:fd:e6:9c:
b5:e3:31:23:10:97:d6:f6:0e:20:4d:b2:30:78:4a:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:73:1F:F2:6E:59:16:B3:75:18:FD:EA:CC:98:5E:80:29:8C:54:B0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62160.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.213.0/24
92.112.216.0/24
92.112.222.0/24
92.112.227.0/24
92.112.235.0/24
92.112.238.0/24
Signature Algorithm: sha256WithRSAEncryption
65:12:69:64:5a:3f:9e:4d:02:06:c9:01:3b:ba:33:18:87:3b:
6d:21:92:1b:f0:50:d8:6a:06:0b:0d:93:6c:26:31:cd:7f:3e:
81:a7:2f:47:54:04:da:e5:a3:05:ed:9c:52:53:40:40:63:11:
58:55:a2:61:f5:fc:b1:d8:6f:b1:dc:c7:0e:f2:6f:83:8f:b7:
15:fb:06:a4:92:f3:c0:78:26:2f:ac:49:0b:b9:90:bd:28:68:
48:ac:c8:ee:1c:38:aa:48:7c:c4:a1:ca:8f:1c:5d:cc:ea:6b:
6c:2b:d2:5a:75:96:01:b4:43:90:82:0c:46:96:d6:3e:87:d0:
f5:fd:22:0a:27:fd:55:e6:0c:2a:74:df:f5:95:bf:48:e6:87:
76:28:4e:eb:90:c7:8e:2c:32:c5:c0:78:18:71:c7:62:b0:07:
69:65:d7:94:90:c0:3a:56:e6:69:21:8d:6d:fb:bc:75:5a:5c:
6c:76:b9:2a:99:d5:2b:77:73:6e:ef:60:9c:b7:07:e0:82:09:
7d:41:d6:6f:b6:4f:41:91:d8:74:dc:db:6b:7f:b7:46:d4:3c:
ea:c4:2f:8f:1d:f0:19:7d:ff:a8:a0:5d:9a:c7:12:49:34:46:
eb:7f:a9:f0:e8:60:6c:cf:07:2f:b0:88:c0:5a:71:5a:d4:a1:
f8:77:68:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:00:10 2025 by rpki-client