Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f33322d3438203d3e2033323134.roa
File: 326130373a643838303a3a2f33322d3438203d3e2033323134.roa (raw, json)
Hash identifier: 0ni4IUpgPklU3n7hRicspHNkpwy/rP3z3cNu4pC+XOg=
Subject key identifier: AD:F0:9E:42:E7:36:88:AA:CF:95:E5:F9:9F:24:F9:02:1D:E7:18:F6
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 6362DD561A88B2956BDD5802B96875B0868B7129
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f33322d3438203d3e2033323134.roa
Signing time: Thu 14 Aug 2025 17:43:56 +0000
ROA not before: Thu 14 Aug 2025 17:38:56 +0000
ROA not after: Thu 13 Aug 2026 17:43:56 +0000
asID: 3214
IP address blocks: 2a07:d880::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:62:dd:56:1a:88:b2:95:6b:dd:58:02:b9:68:75:b0:86:8b:71:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Aug 14 17:38:56 2025 GMT
Not After : Aug 13 17:43:56 2026 GMT
Subject: CN=ADF09E42E73688AACF95E5F99F24F9021DE718F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e1:11:b3:72:58:b0:21:ec:51:cb:a6:3b:98:
db:33:5b:bb:2d:88:75:cb:6d:46:0b:e9:2d:9c:15:
c5:7b:12:a7:2a:05:aa:b0:26:44:01:a5:63:d7:56:
a4:44:b8:5c:ed:0b:5e:0c:4b:11:20:c5:e6:cb:7b:
53:74:af:0e:29:f5:a9:8e:76:24:0d:2f:ab:c2:c3:
5d:e2:fb:87:63:33:da:32:52:fe:d9:4c:0a:82:8f:
dc:be:80:7a:66:be:a1:ea:1c:d9:1e:b5:cd:76:9c:
eb:11:1a:15:19:90:52:f2:1f:56:77:bc:80:a9:59:
6f:36:2c:68:ac:64:44:5e:ee:8c:a1:f6:f6:3d:ca:
54:bc:82:0d:d2:4b:29:b1:e3:bc:5d:56:0c:bc:5a:
f8:13:39:57:d7:23:8b:c0:dc:d5:3d:5a:48:fe:3f:
dc:f3:cb:26:28:98:25:5a:fc:4d:e9:a4:bf:d3:1b:
99:3a:1d:44:e4:68:1f:16:1a:5e:c3:d4:2a:2e:1e:
76:d2:18:30:b2:46:29:b4:7c:74:6d:35:11:dc:9f:
8c:35:6b:41:5c:01:00:d5:2b:d3:78:0e:e7:49:bd:
4f:f5:d3:bd:f0:8e:23:a7:9d:ef:47:03:e4:9f:ad:
4d:d9:2e:00:3a:13:5b:da:70:a4:70:f9:66:82:1b:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F0:9E:42:E7:36:88:AA:CF:95:E5:F9:9F:24:F9:02:1D:E7:18:F6
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f33322d3438203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:d880::/32
Signature Algorithm: sha256WithRSAEncryption
ab:2b:17:0e:df:99:86:1a:70:d7:c6:ea:0b:54:24:c4:9a:30:
f3:1a:96:cf:d8:00:b8:22:b9:ff:16:38:49:2f:36:c8:48:98:
34:6c:6f:24:53:fa:79:1e:00:1b:e0:5c:95:a4:1a:85:dd:bf:
f2:f9:59:20:b2:c8:37:5d:3a:56:f5:77:ad:3a:7e:2b:05:5a:
dc:5c:18:ab:88:e5:84:4b:a3:37:fc:17:e2:4f:45:61:7b:74:
8e:6b:ab:9d:d3:f0:2c:8a:0a:1e:8a:50:97:32:12:fa:df:17:
ad:8b:78:66:65:c3:34:d0:01:c0:58:f6:14:41:11:6d:6c:28:
8f:41:b8:9b:97:01:98:5b:73:ae:6c:65:0b:9d:6e:c0:72:04:
f3:74:17:16:3c:3f:a6:57:d0:19:84:89:d9:00:b0:9a:ce:09:
ca:19:52:1c:9d:01:15:3a:6b:6f:9e:06:e1:82:20:da:b5:29:
26:b1:fe:0b:d1:ef:7e:e9:e7:0c:ec:4f:1d:73:9c:72:b6:92:
b7:40:48:f4:37:60:ec:ab:6d:59:02:5e:19:b9:a7:67:fc:41:
25:da:30:22:c4:c1:7e:7a:77:a1:fa:27:ae:03:f2:a7:af:e3:
d2:24:55:92:de:c3:e8:17:f3:6e:e5:a6:10:8e:df:b8:3c:df:
a8:da:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:25:06 2025 by rpki-client