Route Origin Authorization
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa
File: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (raw, json)
Hash identifier: aQtSJ+DrPdjI6tdPjH35DjDz8hbObLwmapnYguKW8IE=
Subject key identifier: 9A:D6:E8:95:74:F4:6E:AF:C8:A8:4D:73:63:6B:C8:49:68:0F:8C:B6
Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial: 53C9D8A5D476B1B767563A32770FF2CF90962986
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa
Signing time: Fri 07 Feb 2025 13:12:14 +0000
ROA not before: Fri 07 Feb 2025 13:07:14 +0000
ROA not after: Fri 06 Feb 2026 13:12:14 +0000
asID: 204012
IP address blocks: 2001:678:5e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c9:d8:a5:d4:76:b1:b7:67:56:3a:32:77:0f:f2:cf:90:96:29:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Validity
Not Before: Feb 7 13:07:14 2025 GMT
Not After : Feb 6 13:12:14 2026 GMT
Subject: CN=9AD6E89574F46EAFC8A84D73636BC849680F8CB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:c9:dc:19:73:40:01:ac:93:f6:89:3f:53:
dc:8b:c0:22:8b:c1:15:1a:9f:28:77:38:cf:4e:76:
a9:69:3e:a2:fc:dd:f3:11:63:eb:08:f1:6d:95:74:
30:7f:8e:1a:2f:c8:19:fe:25:a0:4a:83:17:50:10:
73:b2:c8:40:c4:a5:76:03:7b:f4:cd:86:ec:e2:9e:
b4:85:c7:7b:49:82:e4:7e:5a:d5:e0:01:66:97:11:
ea:78:94:aa:3a:57:e1:69:71:9a:3e:39:95:b2:4f:
60:2f:53:9e:c5:2b:f2:92:d8:53:ea:77:9e:4c:11:
4c:c0:d5:75:4e:3f:20:c5:75:19:57:61:2f:25:b5:
8a:4c:97:02:03:ab:96:05:82:82:6e:d4:3f:4b:72:
85:03:8b:51:29:45:4f:1c:e6:b0:00:53:2d:2a:b4:
f9:79:27:cc:4f:bc:0c:61:51:ff:d7:11:f5:30:98:
15:19:09:e2:d1:1d:23:84:61:8d:d9:87:95:8a:a3:
c0:91:2d:58:2d:28:10:58:26:25:7f:ed:43:14:10:
a2:97:42:69:be:fb:29:3f:ac:62:9f:d0:6f:87:da:
63:b9:73:49:e9:01:ea:da:be:ab:ed:e1:79:87:f5:
69:61:82:8c:37:e8:18:17:ab:fd:28:15:b0:9e:b9:
db:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D6:E8:95:74:F4:6E:AF:C8:A8:4D:73:63:6B:C8:49:68:0F:8C:B6
X509v3 Authority Key Identifier:
keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:5e4::/48
Signature Algorithm: sha256WithRSAEncryption
0c:05:28:21:ab:7c:eb:ea:5c:44:c0:9b:49:b9:a0:08:2f:e2:
39:c4:0a:51:ff:c9:9a:16:28:1a:b8:02:b5:23:5e:dc:7c:6c:
f1:ac:4d:8a:24:d2:f7:7f:6b:24:81:5c:dc:4d:2d:17:3f:ce:
ca:1b:57:a0:40:fe:be:16:0d:e8:09:fd:11:f1:e5:0f:4f:e5:
f9:c1:fa:a7:59:ae:af:98:ff:bb:69:f3:f8:15:e5:e9:b1:0a:
b4:07:22:a8:2e:0f:c9:62:69:2b:a9:e2:91:a7:92:2e:a1:cc:
53:af:67:66:ca:67:a9:59:84:a7:ce:9b:02:db:3d:ba:c4:4a:
32:46:66:33:87:f6:b2:c0:77:be:71:56:30:75:ec:98:fe:ca:
c6:f2:b7:6b:57:4c:50:63:bf:e8:fd:17:5a:39:27:4b:3d:7a:
c7:68:89:28:0a:52:3d:85:4f:97:6e:b8:28:ad:dc:e6:b3:88:
b0:f8:00:4f:65:7f:4f:ea:0e:ac:44:99:8b:ed:f9:81:8c:a8:
14:0a:97:ce:70:c3:e0:e4:c5:6b:e9:38:16:24:70:44:03:68:
5f:54:75:f6:a9:0f:55:4e:b4:b7:40:38:a1:2e:b0:83:07:37:
7e:04:5f:a2:7e:85:d7:65:b0:5d:a5:44:e4:57:e0:5a:81:19:
be:2b:b4:1b
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUU8nYpdR2sbdnVjoydw/yz5CWKYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx
N2JkZTlhODAeFw0yNTAyMDcxMzA3MTRaFw0yNjAyMDYxMzEyMTRaMDMxMTAvBgNV
BAMTKDlBRDZFODk1NzRGNDZFQUZDOEE4NEQ3MzYzNkJDODQ5NjgwRjhDQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQ8ncGXNAAayT9ok/U9yLwCKL
wRUanyh3OM9OdqlpPqL83fMRY+sI8W2VdDB/jhovyBn+JaBKgxdQEHOyyEDEpXYD
e/TNhuzinrSFx3tJguR+WtXgAWaXEep4lKo6V+FpcZo+OZWyT2AvU57FK/KS2FPq
d55MEUzA1XVOPyDFdRlXYS8ltYpMlwIDq5YFgoJu1D9LcoUDi1EpRU8c5rAAUy0q
tPl5J8xPvAxhUf/XEfUwmBUZCeLRHSOEYY3Zh5WKo8CRLVgtKBBYJiV/7UMUEKKX
Qmm++yk/rGKf0G+H2mO5c0npAeravqvt4XmH9Wlhgow36BgXq/0oFbCeudsnAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUmtbolXT0bq/IqE1zY2vISWgPjLYwHwYDVR0j
BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs
aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC
ZTk2YWcuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5jOi8v
cnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8xLzMyMzAzMDMxM2EzNjM3
MzgzYTM1NjUzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNDMwMzEzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABBngF5DANBgkqhkiG9w0BAQsFAAOCAQEADAUoIat86+pcRMCb
SbmgCC/iOcQKUf/JmhYoGrgCtSNe3Hxs8axNiiTS939rJIFc3E0tFz/OyhtXoED+
vhYN6An9EfHlD0/l+cH6p1mur5j/u2nz+BXl6bEKtAciqC4PyWJpK6nikaeSLqHM
U69nZspnqVmEp86bAts9usRKMkZmM4f2ssB3vnFWMHXsmP7KxvK3a1dMUGO/6P0X
WjknSz16x2iJKApSPYVPl264KK3c5rOIsPgAT2V/T+oOrESZi+35gYyoFAqXznDD
4OTFa+k4FiRwRANoX1R19qkPVU60t0A4oS6wgwc3fgRfon6F12WwXaVE5FfgWoEZ
viu0Gw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:19:37 2025 by rpki-client