Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/hetelT-FRG_bHpO0RqW2JskTYug.roa
File: hetelT-FRG_bHpO0RqW2JskTYug.roa (raw, json)
Hash identifier: je/CZRQfYGzlTl5t2Ogh0NcIDSAzmn8Eoi/V49KsI0Y=
Subject key identifier: 85:EB:5E:95:3F:85:44:6F:DB:1E:93:B4:46:A5:B6:26:C9:13:62:E8
Certificate issuer: /CN=a3c0b3ee890e7dec5b249ea625bed59b91032c02
Certificate serial: 018CC2DADC55E60EFE3E84F25EEDE22F783B
Authority key identifier: A3:C0:B3:EE:89:0E:7D:EC:5B:24:9E:A6:25:BE:D5:9B:91:03:2C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/hetelT-FRG_bHpO0RqW2JskTYug.roa
Signing time: Mon 01 Jan 2024 02:29:32 +0000
ROA not before: Mon 01 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60850
IP address blocks: 185.0.26.0/24 maxlen: 24
2001:7f8:146::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 13:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:dc:55:e6:0e:fe:3e:84:f2:5e:ed:e2:2f:78:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c0b3ee890e7dec5b249ea625bed59b91032c02
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85eb5e953f85446fdb1e93b446a5b626c91362e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:42:e2:f4:25:6c:33:c0:60:60:d9:07:75:
a2:dd:3e:c9:0b:3c:72:af:d3:6a:58:e2:5b:48:05:
bd:c4:5b:fe:0d:d4:e7:f7:bb:b7:8c:61:d6:01:27:
66:e1:de:b3:fa:ea:5c:6e:84:ef:dd:a0:e4:7a:65:
39:d7:d3:ac:65:a6:19:ae:8d:68:41:96:ff:33:cb:
40:b5:55:05:1a:07:50:55:52:35:70:c3:48:24:14:
3d:a8:81:26:ed:e8:09:0b:86:32:ae:d9:5d:02:91:
3a:24:75:ab:92:a1:28:92:d5:80:3f:9e:bf:3b:0e:
a9:65:8c:b0:a8:b4:b7:27:47:24:08:a4:f7:96:af:
c8:d3:9c:e8:ca:4b:94:07:28:60:8e:cd:c7:78:47:
61:07:57:7c:e5:08:d1:9e:7d:73:0b:00:02:cb:bd:
bf:1e:56:51:d2:f3:ca:7d:fa:01:48:1a:37:a7:9b:
d2:41:08:76:15:6a:9f:79:24:c8:f4:46:ca:18:cd:
89:7c:97:e5:1c:35:a9:9e:5d:d5:55:cd:ef:34:28:
b1:89:77:df:37:d5:9f:af:72:5f:e8:ff:f8:88:7a:
07:95:cf:4d:67:89:f6:f6:32:93:7a:18:af:37:8a:
be:27:f6:63:18:f9:23:fe:f1:a1:37:2b:e5:f6:9b:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EB:5E:95:3F:85:44:6F:DB:1E:93:B4:46:A5:B6:26:C9:13:62:E8
X509v3 Authority Key Identifier:
keyid:A3:C0:B3:EE:89:0E:7D:EC:5B:24:9E:A6:25:BE:D5:9B:91:03:2C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/hetelT-FRG_bHpO0RqW2JskTYug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.0.26.0/24
IPv6:
2001:7f8:146::/48
Signature Algorithm: sha256WithRSAEncryption
3a:db:ef:ad:e2:1a:2d:82:a6:d2:b2:3b:7b:8b:41:de:d8:f3:
71:05:20:81:09:f2:d5:a5:db:8b:cd:f3:de:43:71:18:95:29:
99:ea:d4:08:54:17:c8:99:78:70:31:79:5e:3e:93:cb:43:22:
32:54:0f:d9:1a:7b:eb:44:9e:dc:cd:97:48:76:ae:12:3b:69:
07:63:da:dd:63:f0:c3:b3:11:23:3d:98:4c:10:df:b6:f3:6c:
a2:a2:b8:2c:92:0e:a4:71:0b:67:1c:4e:37:5c:89:d3:b1:36:
1e:32:4a:6d:0c:b2:4a:da:6a:a5:2c:c5:fb:6f:59:d3:d0:90:
5d:56:ee:ae:72:c7:51:51:4d:26:23:34:05:7c:4c:2d:64:20:
8e:34:13:4e:3f:d1:80:e4:f0:c1:f8:67:8b:b4:c4:cb:8e:d3:
94:df:c8:f0:98:4d:2e:01:28:98:a8:2b:d2:11:15:e4:47:f9:
33:80:4c:af:90:02:56:67:21:f3:57:3d:62:c9:10:74:c8:1d:
34:53:3d:d3:37:f4:23:36:99:1f:a8:a9:c8:d6:e1:86:68:12:
50:51:2f:e7:4d:59:c9:f2:17:ff:74:f9:c6:46:8f:f6:d5:61:
e9:b5:16:ab:e4:33:17:b0:12:c9:d4:74:e1:98:5a:d3:ac:a4:
a3:96:9d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:04:46 2024 by rpki-client on console-fra.rpki-client.org