Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25160.roa
File: AS25160.roa (raw, json)
Hash identifier: NHi29vfEJ/cjB47795n7HqWqd0iSXMzjhWE0jyA+bpU=
Subject key identifier: FA:CD:E1:39:FF:86:55:C8:FA:5D:BD:CD:E9:9B:B9:F4:7C:FF:ED:9D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2632777503AEC6500A9D332572C8F24656F33305
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25160.roa
Signing time: Tue 25 Mar 2025 02:34:11 +0000
ROA not before: Tue 25 Mar 2025 02:29:11 +0000
ROA not after: Tue 24 Mar 2026 02:34:11 +0000
asID: 25160
IP address blocks: 46.203.197.0/24 maxlen: 24
46.203.205.0/24 maxlen: 24
95.134.83.0/24 maxlen: 24
95.134.148.0/24 maxlen: 24
95.134.150.0/24 maxlen: 24
95.135.194.0/24 maxlen: 24
95.135.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:32:77:75:03:ae:c6:50:0a:9d:33:25:72:c8:f2:46:56:f3:33:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 25 02:29:11 2025 GMT
Not After : Mar 24 02:34:11 2026 GMT
Subject: CN=FACDE139FF8655C8FA5DBDCDE99BB9F47CFFED9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:1d:d0:d3:d4:37:ca:fd:f2:8e:db:96:9b:
47:da:f1:b0:c8:04:4d:5b:78:84:a8:c3:c8:03:32:
e7:d1:82:4f:28:6a:f7:4c:69:6d:dd:75:a5:e6:aa:
42:eb:38:2e:54:4c:9e:38:4f:e3:78:e9:c2:44:99:
5e:9a:73:b2:b0:0a:d3:85:4b:c4:0e:be:ab:b7:da:
89:40:47:11:65:bc:d3:81:44:0b:2b:d9:1d:75:7e:
af:ca:a1:72:ee:8c:f3:9e:78:0a:6e:de:de:bb:e3:
e3:e6:94:1b:73:fe:3c:2f:db:50:d5:7c:b1:ec:5c:
12:9c:a3:f0:01:c7:dd:f8:1d:b5:9e:f2:76:ec:40:
9b:fd:0c:1e:43:33:df:66:a6:10:34:ce:b3:7f:1f:
41:49:c3:ee:a8:8a:2f:9e:9b:b4:8d:c6:7f:7f:52:
76:92:de:d1:6f:02:63:05:c6:ca:33:c8:a8:5d:72:
80:c3:45:e5:57:d7:c4:4d:3f:be:fe:b8:d2:21:fb:
22:f9:a5:e7:ed:b6:14:71:74:a2:0c:54:00:49:a8:
5b:20:94:06:22:fe:85:95:76:7e:58:71:57:e6:52:
1b:61:d7:a1:ab:0a:39:8b:e3:62:c4:ba:3a:d0:32:
70:ed:e4:d6:0f:b3:8c:e8:1f:ac:a4:2a:4f:d5:18:
c6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CD:E1:39:FF:86:55:C8:FA:5D:BD:CD:E9:9B:B9:F4:7C:FF:ED:9D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25160.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.197.0/24
46.203.205.0/24
95.134.83.0/24
95.134.148.0/24
95.134.150.0/24
95.135.194.0/24
95.135.223.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4e:4a:c6:da:c4:cd:9c:2d:b9:a1:84:ab:9f:ed:b7:be:2e:
f6:17:0f:37:12:62:18:21:f8:3d:80:6f:b3:ff:54:4b:58:3b:
37:10:43:ea:06:ef:57:48:aa:45:06:78:6c:76:a3:91:b7:66:
af:f9:f5:ad:6d:b8:df:db:91:1e:08:7d:29:3c:e8:bc:32:17:
ba:5e:69:b9:c6:da:fa:06:fa:6b:3f:81:64:83:95:5c:e4:41:
2f:27:21:98:fa:fe:fd:f0:2d:53:cf:6a:7a:67:bb:36:23:72:
96:3e:64:3d:28:5a:88:f8:17:9a:a0:29:9f:b1:15:2e:f2:38:
0b:82:77:5b:2e:2f:f4:f5:02:a0:9a:d5:6b:64:71:94:a1:c8:
4e:83:f2:b9:88:cc:57:13:6d:af:5d:79:41:a8:74:18:fa:18:
26:79:95:57:cd:0a:c3:34:c3:e6:5b:21:d4:ef:b2:8f:3d:be:
d9:2c:5c:ce:be:20:61:58:bc:ad:8c:f4:45:85:c7:2a:42:a5:
0e:2d:3b:85:f8:cd:15:86:9d:f8:04:dc:59:24:4a:e7:d0:f7:
9a:93:18:dc:28:4e:52:aa:3e:3f:c6:ed:c9:a1:3c:ee:bc:f4:
98:31:88:15:be:50:a9:cd:3a:04:a8:5a:51:42:20:1a:9c:d1:
4a:63:04:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net