Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/3139342e3132372e3136352e302f32342d3234203d3e203437353533.roa
File: 3139342e3132372e3136352e302f32342d3234203d3e203437353533.roa (raw, json)
Hash identifier: Eae43f59caCwqW+lcnRjzfctWI+k7gn8GUNfzgzqb7Q=
Subject key identifier: 55:1E:28:DE:8A:C0:AD:3E:70:D0:73:2C:46:8D:92:27:D4:2D:CC:6E
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 4BF13057F7E83710604A6F236630F4237D67607C
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136352e302f32342d3234203d3e203437353533.roa
Signing time: Thu 14 Aug 2025 17:43:56 +0000
ROA not before: Thu 14 Aug 2025 17:38:56 +0000
ROA not after: Thu 13 Aug 2026 17:43:56 +0000
asID: 47553
IP address blocks: 194.127.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f1:30:57:f7:e8:37:10:60:4a:6f:23:66:30:f4:23:7d:67:60:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Aug 14 17:38:56 2025 GMT
Not After : Aug 13 17:43:56 2026 GMT
Subject: CN=551E28DE8AC0AD3E70D0732C468D9227D42DCC6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:3c:ed:3f:0a:70:0c:a6:53:24:1d:7a:12:
cd:ae:59:bf:f9:16:6f:fc:29:b1:ce:80:34:44:5f:
bc:29:f7:df:3c:dc:6b:9b:14:3a:e6:2c:33:e0:a0:
2e:9b:c2:89:22:4b:b9:71:25:09:bc:99:2f:7e:76:
0d:4e:b9:29:6f:6a:bf:37:7e:e4:62:73:90:ca:96:
0c:f0:8b:5f:d3:59:79:12:40:bc:c8:fb:48:fd:2a:
86:9d:39:ac:41:f2:c9:4c:5b:6d:c1:d3:02:f1:50:
4c:cd:9e:eb:73:8b:3d:df:ce:32:a2:1b:03:3c:fb:
e2:94:97:79:33:a3:25:59:57:84:a6:fa:88:93:22:
d2:a0:fd:cf:bf:27:05:f1:37:96:dc:e8:78:9c:2c:
89:24:22:0e:f6:b5:ac:e8:ba:2f:05:a7:2c:ca:13:
11:b6:06:1f:e4:7b:8b:be:83:67:bb:b6:6f:9b:be:
d2:eb:64:0b:de:3d:0f:8c:6a:f9:25:8b:23:dc:5c:
80:c4:83:b2:9f:15:36:19:20:ad:0a:12:e3:63:ae:
45:fb:f6:b0:42:9b:e3:b2:82:5f:d6:cd:d7:b3:f8:
1f:d9:f3:2b:14:22:c5:43:a2:e4:38:86:78:ca:25:
4d:dc:c8:60:8f:31:f4:49:ae:f9:4e:e5:dd:1a:85:
b3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1E:28:DE:8A:C0:AD:3E:70:D0:73:2C:46:8D:92:27:D4:2D:CC:6E
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136352e302f32342d3234203d3e203437353533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.165.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e8:d6:f6:2a:15:e8:2e:68:8d:9f:3c:d2:1e:f9:d8:d3:2e:
9a:5f:1d:5d:59:24:ab:92:5f:0c:6a:c1:81:35:32:a7:96:95:
18:95:a2:da:ba:70:6a:aa:e0:69:43:5d:f5:17:99:ec:ec:cc:
39:db:19:f6:b4:a0:86:57:0b:7e:4b:3b:11:61:79:b9:aa:eb:
b5:e9:6d:6b:8f:5c:54:b0:94:74:a5:8a:67:e1:a6:39:18:60:
10:31:4f:a3:1d:db:12:4b:cc:77:ef:08:67:80:28:bf:21:ca:
fa:a0:9e:8d:0a:8b:9a:ec:3b:46:2f:a9:67:b9:7b:b3:f0:71:
9c:f0:5d:3f:e1:d3:82:cf:37:a4:2b:21:c0:59:51:df:46:90:
43:16:19:f3:fb:e6:12:e5:79:c6:9e:a9:4e:17:b2:5b:02:9a:
08:94:2b:88:53:85:fc:9b:36:38:e5:c0:2e:81:1a:26:ba:70:
29:e4:42:5c:6a:d8:05:e4:78:f7:7a:02:a3:df:a1:ec:6c:53:
5c:1f:0b:1c:13:5c:10:a7:54:69:b5:55:b2:0f:f2:c8:74:40:
4f:56:18:d8:f1:66:05:29:30:fd:2b:bc:50:0b:68:9d:4d:35:
54:7a:00:02:d2:50:21:77:5d:95:3f:9c:12:df:42:ec:e8:b8:
e0:14:8f:5c
-----BEGIN CERTIFICATE-----
MIIExDCCA6ygAwIBAgIUS/EwV/foNxBgSm8jZjD0I31nYHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU1ZTJlNzJkN2ZmZGU2YmNlYjczY2UyNmYxODVjNjc4
YTIzODkyZDAeFw0yNTA4MTQxNzM4NTZaFw0yNjA4MTMxNzQzNTZaMDMxMTAvBgNV
BAMTKDU1MUUyOERFOEFDMEFEM0U3MEQwNzMyQzQ2OEQ5MjI3RDQyRENDNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn3TztPwpwDKZTJB16Es2uWb/5
Fm/8KbHOgDREX7wp99883GubFDrmLDPgoC6bwokiS7lxJQm8mS9+dg1OuSlvar83
fuRic5DKlgzwi1/TWXkSQLzI+0j9KoadOaxB8slMW23B0wLxUEzNnutziz3fzjKi
GwM8++KUl3kzoyVZV4Sm+oiTItKg/c+/JwXxN5bc6HicLIkkIg72tazoui8FpyzK
ExG2Bh/ke4u+g2e7tm+bvtLrZAvePQ+MavkliyPcXIDEg7KfFTYZIK0KEuNjrkX7
9rBCm+Oygl/Wzdez+B/Z8ysUIsVDouQ4hnjKJU3cyGCPMfRJrvlO5d0ahbPZAgMB
AAGjggHOMIIByjAdBgNVHQ4EFgQUVR4o3orArT5w0HMsRo2SJ9QtzG4wHwYDVR0j
BBgwFoAUtV4uctf/3mvOtzzibxhcZ4ojiS0wDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5vd2wubmV0L3JyZHAvb3dsLzEvQjU1
RTJFNzJEN0ZGREU2QkNFQjczQ0UyNkYxODVDNjc4QTIzODkyRC5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL3RWNHVjdGZfM212T3R6emlieGhjWjRvamlTMC5jZXIw
eAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kub3dsLm5l
dC9ycmRwL293bC8xLzMxMzkzNDJlMzEzMjM3MmUzMTM2MzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNDM3MzUzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn+lMA0GCSqGSIb3DQEB
CwUAA4IBAQAt6Nb2KhXoLmiNnzzSHvnY0y6aXx1dWSSrkl8MasGBNTKnlpUYlaLa
unBqquBpQ131F5ns7Mw52xn2tKCGVwt+SzsRYXm5quu16W1rj1xUsJR0pYpn4aY5
GGAQMU+jHdsSS8x37whngCi/Icr6oJ6NCoua7DtGL6lnuXuz8HGc8F0/4dOCzzek
KyHAWVHfRpBDFhnz++YS5XnGnqlOF7JbApoIlCuIU4X8mzY45cAugRomunAp5EJc
atgF5Hj3egKj36HsbFNcHwscE1wQp1RptVWyD/LIdEBPVhjY8WYFKTD9K7xQC2id
TTVUegAC0lAhd12VP5wS30Ls6LjgFI9c
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:33:00 2025 by rpki-client