Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/3139342e3132372e3136342e302f32322d3234203d3e203233393539.roa
File: 3139342e3132372e3136342e302f32322d3234203d3e203233393539.roa (raw, json)
Hash identifier: iU7HIJKSGSG7RCf/L4v3mR3ceAQJd5+2YdBfykiTLms=
Subject key identifier: 10:9E:03:7E:15:0D:B1:35:D6:72:D6:C2:3A:2A:79:93:B3:0C:6E:8B
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 5763BC1E41D788A77C7D37E55C991286FE3D388E
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136342e302f32322d3234203d3e203233393539.roa
Signing time: Thu 14 Aug 2025 17:43:56 +0000
ROA not before: Thu 14 Aug 2025 17:38:56 +0000
ROA not after: Thu 13 Aug 2026 17:43:56 +0000
asID: 23959
IP address blocks: 194.127.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:33:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:63:bc:1e:41:d7:88:a7:7c:7d:37:e5:5c:99:12:86:fe:3d:38:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Aug 14 17:38:56 2025 GMT
Not After : Aug 13 17:43:56 2026 GMT
Subject: CN=109E037E150DB135D672D6C23A2A7993B30C6E8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:bc:bf:eb:28:e8:fa:d6:ee:8b:b5:e8:06:
fb:83:fa:ac:2b:69:e1:4e:20:43:2b:37:2b:73:d7:
dd:51:8f:5d:23:66:36:86:ce:e4:e7:a6:91:0a:63:
5e:bc:02:12:d7:42:32:d1:1c:44:22:1f:e3:52:3e:
3a:e5:5d:b6:e3:3d:ec:dd:13:aa:e3:ab:5a:5b:36:
f3:b0:42:1e:f8:52:26:b9:ae:b1:61:fb:df:5e:fa:
1a:1d:79:7b:ca:30:3b:79:96:81:45:ed:c7:fa:72:
8e:af:52:0d:0d:a3:36:5f:8e:03:25:b5:24:90:0e:
62:11:68:bc:0f:75:20:74:0a:ec:97:22:e2:01:a2:
f1:4d:59:70:d8:ca:7a:b4:5c:19:99:18:f1:4b:10:
1a:25:d1:4c:d6:af:36:01:fe:9b:29:a9:63:f2:07:
35:88:b3:b7:47:4d:6e:e8:88:9f:d0:76:e5:db:1c:
73:b8:75:a8:f0:b2:d5:28:99:a8:d5:39:cf:aa:10:
7e:a6:d3:67:82:13:f8:f5:d8:7c:9a:67:e8:fa:52:
25:95:66:32:f8:8a:44:3e:4b:6a:be:d2:25:92:6c:
a1:c8:ac:8c:6f:3e:f1:00:16:a1:f3:01:cb:28:e8:
f3:de:02:c0:ae:29:99:86:cf:d7:4b:5d:e2:b0:88:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9E:03:7E:15:0D:B1:35:D6:72:D6:C2:3A:2A:79:93:B3:0C:6E:8B
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136342e302f32322d3234203d3e203233393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.164.0/22
Signature Algorithm: sha256WithRSAEncryption
98:9f:33:63:bb:d9:bf:32:53:b8:f1:3e:57:03:f5:d3:4f:bd:
78:0e:f6:c5:ff:a7:07:6e:29:7a:16:28:23:51:6a:2f:91:13:
0e:da:5b:f5:2b:aa:bb:28:dc:51:42:5d:80:a5:c0:e9:24:08:
cd:bd:ab:48:76:fe:d7:83:61:84:9c:0a:97:61:51:df:d8:30:
1a:cf:bc:c5:82:20:31:1c:8f:62:d4:91:8f:8e:3c:78:d2:0f:
71:ba:24:dc:8e:d8:6f:df:69:19:f6:c2:38:58:89:d1:b1:2e:
10:f1:26:bc:95:b2:de:47:58:fa:a9:9e:f0:c4:84:d5:47:52:
ad:90:d4:32:87:84:e6:fa:37:bc:4e:15:90:19:99:4e:1a:fe:
36:44:97:20:cc:4d:07:22:f7:b5:ce:5f:0e:33:1d:81:cc:bb:
09:8f:de:0d:f6:71:ea:80:e5:a3:cd:83:f6:9a:3e:2e:19:f7:
0e:bd:d0:0c:d5:27:20:0f:dc:9c:f8:a8:5d:55:75:5c:3a:da:
9b:b0:cd:58:ef:33:02:ed:11:ab:ae:ff:fe:cf:83:ff:da:10:
80:9e:3f:1c:aa:9d:9c:0a:c1:76:bc:5e:b3:44:18:c5:5d:15:
0a:13:0c:cf:a1:5c:f0:24:9a:11:30:cf:8d:ab:87:01:ab:75:
63:2b:14:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:53:06 2025 by rpki-client