Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/3139342e3132372e3136342e302f32322d3234203d3e203433333537.roa
File: 3139342e3132372e3136342e302f32322d3234203d3e203433333537.roa (raw, json)
Hash identifier: 13xjvbrzH+G3f8lcCQOy9tb/s0He4bt4vXzCEWokFzo=
Subject key identifier: 84:21:0A:11:C0:A1:05:B2:C8:8D:9E:68:F5:24:B5:4E:2B:07:8B:CC
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 09E1D724C4A99C9FC2F51CC8B706C7F03822B27B
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136342e302f32322d3234203d3e203433333537.roa
Signing time: Thu 14 Aug 2025 17:43:56 +0000
ROA not before: Thu 14 Aug 2025 17:38:56 +0000
ROA not after: Thu 13 Aug 2026 17:43:56 +0000
asID: 43357
IP address blocks: 194.127.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e1:d7:24:c4:a9:9c:9f:c2:f5:1c:c8:b7:06:c7:f0:38:22:b2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Aug 14 17:38:56 2025 GMT
Not After : Aug 13 17:43:56 2026 GMT
Subject: CN=84210A11C0A105B2C88D9E68F524B54E2B078BCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fb:c7:32:40:b2:41:3d:00:23:93:c7:37:18:
b4:79:f1:a5:c4:d2:da:3e:0a:f4:69:a2:d1:8f:91:
04:67:95:02:c1:76:8f:9b:33:c2:eb:a7:b3:f7:1b:
92:4e:a1:f7:d5:96:8b:dc:8e:cc:65:4a:fe:01:70:
da:3a:77:5f:ff:fb:98:b8:14:8e:75:1c:28:a9:43:
19:4f:98:fd:3a:6b:cb:49:e4:b7:51:ce:dd:f8:15:
59:05:97:32:56:f2:79:7e:4c:38:2f:94:1c:a4:98:
85:1c:ca:5d:34:93:bf:df:0f:1b:30:e1:d8:74:9c:
d1:5d:77:b9:b2:88:40:ac:ad:c6:d9:d3:15:e1:58:
83:f4:5c:c3:01:66:12:cd:2a:e4:9a:7e:e1:b2:ff:
29:63:a4:31:03:14:72:26:5a:d6:08:82:a1:ed:04:
b7:7a:8b:de:e1:15:b1:4e:1c:b6:03:a6:88:c2:10:
ff:9e:f9:84:65:fb:59:58:fc:7d:53:cd:90:d6:6f:
d2:f5:54:20:fb:e5:ad:27:14:fd:db:72:4b:aa:99:
c2:e4:84:6b:9e:5e:f0:f0:14:e8:fb:07:05:3c:3a:
5b:15:6e:f6:d4:dc:df:8b:25:bd:2f:bc:39:64:c2:
a1:5b:1c:7f:f8:a0:83:51:c2:32:c0:03:2d:36:e4:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:21:0A:11:C0:A1:05:B2:C8:8D:9E:68:F5:24:B5:4E:2B:07:8B:CC
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136342e302f32322d3234203d3e203433333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.164.0/22
Signature Algorithm: sha256WithRSAEncryption
f8:66:41:46:03:23:22:f0:68:46:96:1e:b0:2f:d6:a4:7d:db:
f2:97:36:98:fa:45:ae:ff:de:ca:19:09:3d:6e:0e:df:f8:09:
5a:af:46:76:4f:67:72:9d:89:22:0d:23:f4:8e:6a:cc:0f:ea:
17:e1:0c:6c:23:29:b4:a1:5e:ca:db:c7:43:ab:b1:1c:f0:c8:
3c:a3:f0:89:b2:9c:58:49:76:9c:90:ff:53:a0:7b:4d:31:fd:
05:4b:95:bd:1a:21:1e:c6:27:98:18:18:c2:dd:0a:44:c2:fa:
cb:70:fe:b0:a5:1d:82:ab:40:1b:9f:c2:28:e3:70:67:e0:37:
cd:6a:29:b0:78:7e:3d:b4:26:c4:09:6a:47:95:40:c4:6a:9b:
29:ec:bf:dd:45:13:98:a9:66:4f:4c:3c:01:11:f6:a5:55:88:
5f:11:fd:22:79:60:e1:de:e9:e8:3a:06:ce:8a:36:a9:27:50:
ce:37:6f:49:b1:1a:2c:67:c6:13:63:dd:26:cd:47:50:83:7d:
0c:ec:47:35:bf:9a:3e:b1:0e:c0:51:41:c5:6a:9b:b5:e0:b9:
9c:11:52:71:92:c6:95:b0:ab:93:95:81:f0:22:14:e7:13:7a:
39:20:1b:09:42:76:90:a9:e2:27:9c:a5:b8:50:a6:ae:23:5b:
37:11:53:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:54 2025 by rpki-client