Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/3139342e3132372e3136372e302f32342d3234203d3e203433333537.roa
File: 3139342e3132372e3136372e302f32342d3234203d3e203433333537.roa (raw, json)
Hash identifier: uvd9+7igLtP8cByZnvfvsOswui6hZT+ptZpwB4k1F9Q=
Subject key identifier: BB:58:E7:92:84:8D:BB:47:2A:EF:14:75:35:37:F9:9B:66:D6:A7:A9
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 48F91D9A4B0459C3998CBB89F0739B44F613D512
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136372e302f32342d3234203d3e203433333537.roa
Signing time: Wed 24 Sep 2025 21:43:57 +0000
ROA not before: Wed 24 Sep 2025 21:38:57 +0000
ROA not after: Wed 23 Sep 2026 21:43:57 +0000
asID: 43357
IP address blocks: 194.127.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f9:1d:9a:4b:04:59:c3:99:8c:bb:89:f0:73:9b:44:f6:13:d5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Sep 24 21:38:57 2025 GMT
Not After : Sep 23 21:43:57 2026 GMT
Subject: CN=BB58E792848DBB472AEF14753537F99B66D6A7A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:63:23:65:e8:51:55:e7:7f:43:c6:8d:7a:
f4:ad:03:ef:43:29:cc:8a:63:02:c0:4a:ab:28:f3:
42:8e:56:3d:73:4f:2f:9e:52:82:54:f9:09:a7:02:
46:e9:0f:48:6e:34:9b:46:40:02:04:31:3e:5c:b2:
c1:cb:52:11:13:3c:f1:85:e2:fa:10:2a:1a:04:c6:
e7:a6:a1:56:ac:8c:c0:cb:8c:08:33:1c:97:28:af:
05:c1:b8:51:53:6a:d1:e5:1a:4a:5d:1f:52:44:a9:
9a:5c:cd:36:64:00:10:ee:66:5a:93:93:e6:45:e2:
d6:fc:55:40:2c:be:66:fe:70:34:91:05:ee:3e:1b:
4e:41:1c:12:e4:e9:02:5c:5a:25:2d:f3:f9:50:4e:
56:d9:23:2b:34:d4:4f:3e:d1:cd:a3:58:e2:ca:0c:
5f:b8:2b:5b:e3:fc:e9:e0:d2:f3:44:dc:85:80:eb:
6f:a2:a8:ca:59:b9:de:76:0f:36:6a:02:c0:62:46:
a0:e3:b3:30:74:98:e2:c3:1f:5a:07:26:97:d5:4a:
00:7a:98:dd:1a:83:6f:6d:27:8a:17:cc:35:52:eb:
69:ec:ab:c9:4a:78:b9:24:a5:e2:5a:32:0a:97:c9:
6b:85:65:8e:26:64:3d:e9:f4:65:b3:d7:3c:22:e6:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:58:E7:92:84:8D:BB:47:2A:EF:14:75:35:37:F9:9B:66:D6:A7:A9
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136372e302f32342d3234203d3e203433333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.167.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d9:8c:1a:6e:91:9e:62:86:2a:6f:7f:7d:ed:65:8c:5d:a2:
f1:7f:2f:7a:2b:3f:bc:0f:ad:d5:1b:ed:09:4b:0f:51:cd:dc:
71:c8:18:0d:2b:ae:a8:cd:b4:6b:a2:83:c0:f1:80:27:96:57:
73:2e:6a:1c:69:31:c0:bb:39:93:47:77:81:46:59:1f:64:ef:
23:35:6f:71:40:66:71:66:72:ea:ef:b6:60:f8:a3:3f:d9:77:
0d:67:f7:d3:b7:58:aa:42:69:19:ad:f7:9b:5c:a8:af:b9:af:
20:bd:bc:0f:62:c8:dc:17:bb:7f:fb:b4:12:19:3f:e5:c4:99:
2e:a8:93:fe:3f:ad:16:6e:e4:85:81:02:7b:02:c3:a1:35:27:
70:3a:22:b4:df:18:a0:5e:e1:0d:63:31:fb:51:31:06:9f:e0:
29:67:6c:e8:f1:45:9a:e1:7f:48:52:72:f7:b6:94:e4:52:04:
c1:cc:fe:7d:8c:a4:3b:ca:b2:25:d3:7b:c7:03:68:ba:22:94:
e1:70:8a:b6:24:5e:56:04:f9:a5:a4:af:15:1e:fd:b1:29:ee:
a0:a7:2b:e1:1a:f0:ef:32:b0:a4:7f:78:d4:46:c1:a5:3a:32:
36:9a:9f:48:b3:9a:15:c0:6a:46:6f:5f:14:dc:97:10:d6:7e:
98:6c:5e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:04 2025 by rpki-client