Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/3139342e3132372e3136372e302f32342d3234203d3e2033323134.roa
File: 3139342e3132372e3136372e302f32342d3234203d3e2033323134.roa (raw, json)
Hash identifier: yx+rdcTyHATmFHbhhHzjMWS9TliCEMXJio04m6PB7m0=
Subject key identifier: 5D:B4:91:10:A8:82:C2:89:59:CC:CF:5B:D4:01:B4:07:6E:9F:CC:97
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 37477E0FD799D5D7826277F56A60CBB5E44F02A0
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136372e302f32342d3234203d3e2033323134.roa
Signing time: Thu 14 Aug 2025 17:43:56 +0000
ROA not before: Thu 14 Aug 2025 17:38:56 +0000
ROA not after: Thu 13 Aug 2026 17:43:56 +0000
asID: 3214
IP address blocks: 194.127.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:33:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:47:7e:0f:d7:99:d5:d7:82:62:77:f5:6a:60:cb:b5:e4:4f:02:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Aug 14 17:38:56 2025 GMT
Not After : Aug 13 17:43:56 2026 GMT
Subject: CN=5DB49110A882C28959CCCF5BD401B4076E9FCC97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:50:e3:92:6d:eb:e9:cb:e4:bd:31:32:d8:
f9:17:14:0f:4b:6b:ea:d6:01:94:55:91:a3:13:19:
66:78:bb:9e:73:e2:dd:bc:2f:e5:a2:ee:63:45:a4:
3c:12:32:56:90:1d:7a:ac:9b:97:7c:3a:39:d4:8d:
a5:57:6e:f2:64:3c:b5:a2:64:6c:4c:53:6c:c5:9c:
ed:35:da:ef:a9:47:2f:9d:5d:64:c3:02:79:5a:8e:
84:3f:a3:19:fc:7d:fa:51:fb:f8:bd:86:34:46:78:
92:51:82:33:e8:6f:9c:e2:ac:75:c1:bf:0f:ad:40:
5c:99:d7:21:4a:9a:8f:42:02:b9:a8:c4:83:9e:63:
5d:3b:02:0a:7c:61:8f:c9:2d:54:cb:96:dc:8e:98:
5f:d8:7d:db:0e:af:00:ac:66:db:6c:df:3e:42:0d:
9d:1d:b0:be:f5:ca:30:ef:60:2e:15:45:5f:2c:71:
c8:05:a7:6f:ec:33:46:a4:bf:b6:02:07:13:5a:5f:
3b:8a:0c:8d:36:97:bb:4f:75:85:b9:cf:a4:17:9f:
94:bb:db:55:75:08:39:43:e9:8a:34:60:0a:0f:de:
fe:04:53:ec:6d:64:88:0b:fa:f0:6e:b9:15:89:fc:
4a:45:1e:63:78:ef:8e:95:27:94:03:f3:f6:c0:8d:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B4:91:10:A8:82:C2:89:59:CC:CF:5B:D4:01:B4:07:6E:9F:CC:97
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136372e302f32342d3234203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.167.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:20:ac:fc:e2:ad:3c:c7:04:26:6b:56:32:8b:02:1b:24:91:
bc:19:d8:54:14:d4:e5:5e:21:0b:27:0d:5e:9e:52:b6:ee:b1:
e1:1f:6d:61:f8:dc:7e:55:79:d6:a0:91:ed:d8:9a:9c:44:be:
06:4d:8d:a2:0d:7f:96:80:a0:ea:7e:fd:78:03:8e:c0:27:65:
03:60:4a:06:d7:97:b2:a0:bd:e5:a4:35:da:a2:1a:41:83:c3:
b6:ff:21:ee:5c:36:85:79:56:c9:30:ec:1b:39:56:b6:a0:37:
98:21:b8:b6:78:39:79:fb:05:d8:21:b3:71:f4:bf:26:48:39:
17:42:47:90:a0:0a:aa:c3:ff:44:4b:09:40:8c:76:a7:44:ad:
47:d7:7e:b3:a7:2c:64:88:f1:94:39:1d:37:37:46:e5:27:2b:
8a:c2:ec:ea:3a:3c:da:bd:e6:55:83:7c:61:b2:40:94:1f:53:
5a:9e:d9:72:74:3a:09:e8:d0:35:03:64:b1:88:f0:3c:f9:f7:
d7:d5:a3:3e:b5:c6:b5:37:43:63:fb:2d:f5:95:13:6b:68:b5:
fc:63:5a:70:29:49:e5:0b:58:0f:f3:ce:c9:35:ed:1b:2b:51:
be:74:d6:72:54:38:7a:68:23:a3:d6:fa:fc:3e:a2:c8:bb:e6:
3e:51:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:56:40 2025 by rpki-client