Route Origin Authorization
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/0/323030313a3637633a6438303a3a2f34382d3438203d3e20343031353531.roa
File: 323030313a3637633a6438303a3a2f34382d3438203d3e20343031353531.roa (raw, json)
Hash identifier: mqadfIJnOHBwBW3bzOjsszkG4yNmowPDrD6AKDG5B1Q=
Subject key identifier: CD:DF:D4:6D:F5:07:C0:FE:39:B5:F9:A0:7B:E2:68:2B:8D:C1:B0:D9
Certificate issuer: /CN=b60561dffbfde255fec14d4d9f0e13f4375352e4
Certificate serial: 4DB9854A02509F34FD998B4DBC74FE089B7F0A5A
Authority key identifier: B6:05:61:DF:FB:FD:E2:55:FE:C1:4D:4D:9F:0E:13:F4:37:53:52:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgVh3_v94lX-wU1Nnw4T9DdTUuQ.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/0/323030313a3637633a6438303a3a2f34382d3438203d3e20343031353531.roa
Signing time: Thu 02 Jan 2025 19:19:23 +0000
ROA not before: Thu 02 Jan 2025 19:14:23 +0000
ROA not after: Thu 01 Jan 2026 19:19:23 +0000
asID: 401551
IP address blocks: 2001:67c:d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/0/B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.crl
rsync://rpki.nellicus.net/repo/nellicus/0/B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgVh3_v94lX-wU1Nnw4T9DdTUuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b9:85:4a:02:50:9f:34:fd:99:8b:4d:bc:74:fe:08:9b:7f:0a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60561dffbfde255fec14d4d9f0e13f4375352e4
Validity
Not Before: Jan 2 19:14:23 2025 GMT
Not After : Jan 1 19:19:23 2026 GMT
Subject: CN=CDDFD46DF507C0FE39B5F9A07BE2682B8DC1B0D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:29:dd:5d:eb:09:21:0b:3e:c1:d1:f3:95:
1c:8d:51:f3:15:52:1b:e8:ec:35:70:a1:5d:6d:03:
b5:8e:38:b4:e0:28:21:a9:a8:93:4b:90:99:39:ee:
96:7b:c7:b2:85:af:7f:0c:de:b3:79:1c:a7:bb:f3:
e2:14:e6:82:3a:30:f4:e5:1e:30:5f:92:21:35:e7:
59:65:88:9d:f2:00:ec:f6:f6:94:4f:de:b1:d9:12:
b2:c9:d6:7e:c4:66:56:c2:4e:61:fa:fc:62:05:8c:
f3:32:78:39:48:7e:bb:d1:45:05:73:98:e8:56:50:
47:b2:df:6a:01:2e:98:f1:d5:ed:41:29:e3:c6:b1:
3a:e8:11:f5:7d:e9:62:01:af:0c:68:8f:2a:5d:bf:
b1:82:e7:51:9c:37:9b:59:84:1c:c9:e0:33:a4:5b:
8a:30:dc:1e:7d:5f:b7:e5:65:cb:9c:3f:94:08:1c:
d5:d4:0b:51:4b:fc:b2:06:9c:c6:18:90:7f:05:6e:
07:06:cf:ce:23:11:0d:26:dc:12:3b:b4:e9:3c:fc:
7a:00:20:b9:0c:2f:5b:43:c8:f8:37:38:4c:f6:22:
d9:84:b4:0f:d8:d3:f5:45:b2:2e:4c:f3:0a:d3:07:
23:58:de:4a:6a:b7:b8:2d:3f:ce:a0:a7:98:86:91:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DF:D4:6D:F5:07:C0:FE:39:B5:F9:A0:7B:E2:68:2B:8D:C1:B0:D9
X509v3 Authority Key Identifier:
keyid:B6:05:61:DF:FB:FD:E2:55:FE:C1:4D:4D:9F:0E:13:F4:37:53:52:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/0/B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgVh3_v94lX-wU1Nnw4T9DdTUuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/0/323030313a3637633a6438303a3a2f34382d3438203d3e20343031353531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d80::/48
Signature Algorithm: sha256WithRSAEncryption
56:cd:a1:31:de:06:0b:76:42:d1:73:dd:46:cf:32:13:fc:f4:
fc:35:65:bc:dd:f4:f1:0f:2d:d3:a6:9b:9f:99:99:a9:6b:55:
a2:71:4b:4c:dc:83:85:1c:af:3e:bf:5e:e4:6e:48:8a:e6:e2:
64:7f:70:80:c3:65:44:3d:f1:61:0a:08:65:94:5b:8b:bc:ed:
27:e6:5e:92:44:b5:8c:5c:24:03:b8:84:59:55:55:61:a3:27:
58:68:d0:c4:02:f8:a6:a6:7e:b0:9d:8e:61:33:07:ef:5d:64:
5b:a7:63:b9:22:57:c7:22:1a:00:e0:10:8c:aa:25:03:04:77:
3a:38:65:7d:3e:33:af:ad:a1:6b:7e:76:dc:23:2c:c3:18:47:
15:3e:28:11:f7:2e:64:09:b2:88:38:32:37:32:43:ab:ad:c6:
e0:ac:82:e4:ae:c2:76:90:dc:c1:2d:fd:a0:f0:d2:ad:f4:e3:
d4:9f:3e:21:04:99:61:ed:03:92:51:eb:48:49:28:d3:e8:21:
cc:a0:5b:47:9b:e8:7e:38:82:16:65:03:3b:a0:98:b2:5b:b8:
14:f7:71:d5:28:1d:6f:39:22:23:70:11:4a:c6:ab:01:63:4e:
6b:89:99:a6:5d:85:06:38:26:99:a7:fd:25:b0:a3:00:6f:51:
37:71:f1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:05:12 2025 by rpki-client