Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131343a3a2f34382d3438203d3e20323030393132.roa
File:                     326131343a373538313a353131343a3a2f34382d3438203d3e20323030393132.roa (raw, json)
Hash identifier:          u9NPjaT+eG5W3PvOHYzmmtswSuuMN4Q8nVGnBbcPAAE=
Subject key identifier:   45:51:06:8C:25:C1:32:71:41:AE:E4:0F:26:2F:97:85:8E:E6:B0:2F
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       4C2F3AFC9B706350C061EE1B688B64978D677016
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131343a3a2f34382d3438203d3e20323030393132.roa
Signing time:             Thu 29 Oct 2026 22:09:50 +0000
ROA not before:           Thu 29 Oct 2026 22:04:50 +0000
ROA not after:            Thu 28 Oct 2027 22:09:50 +0000
asID:                     200912
IP address blocks:        2a14:7581:5114::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2f:3a:fc:9b:70:63:50:c0:61:ee:1b:68:8b:64:97:8d:67:70:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:50 2026 GMT
            Not After : Oct 28 22:09:50 2027 GMT
        Subject: CN=4551068C25C1327141AEE40F262F97858EE6B02F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:48:71:89:82:22:84:0c:c0:fe:d7:a8:9b:0e:
                    74:c7:8c:3f:4a:2c:c8:17:25:b8:44:98:4c:74:3d:
                    1b:33:1d:ea:d3:de:d5:42:6e:0b:a9:d6:83:8a:82:
                    86:f8:d8:83:93:6b:59:fe:2a:f6:f2:a5:d5:bb:6d:
                    fb:23:b4:87:59:68:63:cd:5d:f9:db:82:55:bb:0a:
                    c8:f4:fd:9d:ea:d1:97:a9:bf:25:f0:80:db:d3:cb:
                    ab:a3:6d:d9:4b:a6:71:a3:a9:0c:d5:87:4f:3a:cc:
                    2e:4f:19:ef:5a:b9:89:63:57:63:a9:68:1f:d2:3e:
                    9b:24:f8:8c:ee:0d:de:6c:44:a6:b5:c4:32:61:67:
                    ad:cc:be:5d:a3:c7:2e:f6:1a:4f:ad:40:70:d1:b7:
                    03:4c:11:82:32:b1:f6:a7:52:c1:e4:d8:bd:47:e7:
                    ce:93:42:b6:ea:44:45:c2:c6:80:82:fb:86:bb:7c:
                    4e:31:17:c4:83:33:aa:09:d0:a7:4d:fd:9e:a8:fc:
                    72:7d:a0:3f:6b:d7:bb:89:82:50:b6:ea:70:ef:76:
                    b3:35:38:48:56:7b:f4:9e:c4:55:7a:e3:21:6f:00:
                    1b:ff:7f:f8:9e:00:66:3e:6e:f9:42:63:c4:9e:d5:
                    09:1f:8e:52:36:df:41:df:76:6b:3a:a6:c3:4f:d7:
                    c2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:51:06:8C:25:C1:32:71:41:AE:E4:0F:26:2F:97:85:8E:E6:B0:2F
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131343a3a2f34382d3438203d3e20323030393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5114::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:88:92:0c:63:a5:45:90:d9:f3:fc:e4:ee:07:97:bb:9c:b0:
         68:71:0f:10:f7:2e:fc:02:63:a9:33:5a:17:47:3a:76:50:d6:
         59:99:ae:28:92:dc:17:2c:f0:f5:df:86:0d:39:28:a2:13:e2:
         c9:e1:6c:5b:32:4c:ed:75:9b:fc:40:fa:ca:9a:90:0b:85:c7:
         bf:d2:e8:c0:fc:b1:7d:bf:c5:eb:09:86:47:01:62:02:3d:8b:
         9d:24:15:ab:f3:54:94:71:f8:f2:be:ac:76:f4:21:0c:0f:32:
         db:02:1b:3e:31:9a:3a:8c:5a:21:98:2b:47:5b:66:d5:70:0f:
         f4:b8:5d:ff:a1:97:57:9e:a0:d8:1e:e3:69:30:55:e3:d8:65:
         46:24:13:1f:ad:75:94:01:a7:e4:3c:be:5a:d2:f4:28:2e:fb:
         d0:6a:3b:47:10:c8:5f:72:9c:fc:d7:ef:34:20:f6:b6:dc:7a:
         41:57:d3:56:43:10:d4:23:27:df:69:e5:20:17:14:dc:29:c9:
         47:6a:3c:89:9c:37:1c:db:47:78:7d:cc:4c:06:70:a6:68:f4:
         1f:d4:bb:7b:c3:b5:68:87:71:9e:33:ce:60:7e:b9:ba:ac:69:
         13:2f:df:da:06:c2:e0:73:88:0f:24:1d:27:1e:32:51:14:66:
         80:a7:b8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:36:31 2026 by rpki-client