Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/DsNcbk_BTPFlk33nDKu2FCWczdo.roa
File: DsNcbk_BTPFlk33nDKu2FCWczdo.roa (raw, json)
Hash identifier: YjyaSXvYzPh6eFPk71IGloQvITU9+HPYR7V584HEXj4=
Subject key identifier: 0E:C3:5C:6E:4F:C1:4C:F1:65:93:7D:E7:0C:AB:B6:14:25:9C:CD:DA
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 018CC500FF924904C46E92D3465932C85923
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/DsNcbk_BTPFlk33nDKu2FCWczdo.roa
Signing time: Mon 01 Jan 2024 12:30:26 +0000
ROA not before: Mon 01 Jan 2024 12:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 92.60.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ff:92:49:04:c4:6e:92:d3:46:59:32:c8:59:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Jan 1 12:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ec35c6e4fc14cf165937de70cabb614259ccdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:d1:e0:02:6b:a4:fc:99:f2:f3:54:d2:cd:
3e:d2:69:8f:98:f7:22:ee:2c:a3:69:5c:52:ac:2e:
24:fb:a5:60:ec:1e:4f:08:5e:0d:68:7e:44:e6:1a:
93:9c:1d:84:38:1d:7f:51:d4:e6:c4:fe:a4:d7:0e:
1d:eb:ec:db:2b:44:4c:30:5b:72:9e:f2:25:d8:8a:
9d:c1:14:10:ea:70:a4:f7:48:0f:f4:29:72:1a:50:
16:04:60:40:dc:d0:3b:9b:73:ff:ac:18:f1:7d:e8:
58:f2:80:41:8c:51:50:cf:2d:a6:0c:fb:c3:03:56:
a4:e6:87:b5:06:77:fd:8f:5a:f0:18:0c:6b:7c:59:
8d:99:c9:27:95:89:5d:67:b3:21:a7:fb:29:4a:6b:
77:06:30:d2:b8:20:79:50:19:26:0e:95:f9:aa:0b:
1e:79:e6:23:1d:9d:21:74:2c:d4:7e:40:2e:69:c1:
78:99:64:ef:b9:dc:19:c0:c7:5a:ee:f9:88:56:64:
fd:67:d6:d6:22:e4:13:43:46:3d:7e:a1:c5:03:38:
55:d1:c8:38:ad:e5:0e:63:56:55:89:c0:3f:34:bd:
62:7f:40:6b:e1:f8:c3:f8:d3:e1:50:46:6c:14:4c:
db:a0:0e:3c:97:15:98:39:01:be:fd:ef:e2:09:be:
7d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C3:5C:6E:4F:C1:4C:F1:65:93:7D:E7:0C:AB:B6:14:25:9C:CD:DA
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/DsNcbk_BTPFlk33nDKu2FCWczdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.70.0/24
Signature Algorithm: sha256WithRSAEncryption
91:89:7f:4f:65:c4:bd:8d:d3:35:ef:ab:f4:21:74:32:12:24:
70:30:32:bb:68:a0:25:fc:fd:e4:6a:67:ba:2a:71:b1:d6:b5:
e4:9e:bb:a1:38:27:e4:7e:b8:15:d0:38:fb:25:cd:f0:6b:83:
5a:91:51:7a:53:6f:de:62:6e:b7:bf:d6:2f:f6:bb:b2:01:37:
69:37:8c:a8:91:5e:e0:bd:a3:06:98:4e:97:a0:9a:f5:fb:8d:
a1:7a:4a:92:45:fc:54:b1:26:58:0d:47:8b:b7:22:7d:8a:ee:
24:ba:13:1b:c1:9c:41:a6:fa:7f:6f:a8:77:57:4a:e4:4e:09:
99:98:d1:56:ed:6e:26:82:be:97:93:5f:59:cc:46:29:e2:6f:
2b:d2:56:50:45:4d:61:5e:8a:4a:0a:01:96:21:ea:4e:ab:97:
8e:5f:c7:d5:2b:19:83:4f:9c:44:a9:09:c3:8d:40:03:8b:85:
7d:16:00:d6:97:d9:17:26:67:3c:55:7c:10:6a:63:0d:6a:ab:
18:bc:3a:b5:53:61:35:44:c2:33:50:23:57:44:14:13:ea:7f:
e2:94:35:97:e8:36:d0:5f:d3:ab:9e:2e:d0:43:88:a4:6d:6a:
e3:f2:63:b1:4c:87:6b:a2:6c:9b:03:4a:72:8e:69:22:c1:76:
fb:99:23:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:54:26 2024 by rpki-client on console-fra.rpki-client.org