Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/326130373a643838333a3130303a3a2f34302d3438203d3e20323038343736.roa
File: 326130373a643838333a3130303a3a2f34302d3438203d3e20323038343736.roa (raw, json)
Hash identifier: Iph5p04uieQC3sdfKteYckAlnEp2w3fvSk67gsB3QMI=
Subject key identifier: 8E:CE:1A:B0:6D:0B:93:28:40:63:5F:6C:63:A2:63:3C:C2:C1:F3:D8
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 3A0E64C2FD3507EB0117CBB553E9CDBA360DF5AB
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/326130373a643838333a3130303a3a2f34302d3438203d3e20323038343736.roa
Signing time: Thu 14 Aug 2025 17:43:56 +0000
ROA not before: Thu 14 Aug 2025 17:38:56 +0000
ROA not after: Thu 13 Aug 2026 17:43:56 +0000
asID: 208476
IP address blocks: 2a07:d883:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:33:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:0e:64:c2:fd:35:07:eb:01:17:cb:b5:53:e9:cd:ba:36:0d:f5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Aug 14 17:38:56 2025 GMT
Not After : Aug 13 17:43:56 2026 GMT
Subject: CN=8ECE1AB06D0B932840635F6C63A2633CC2C1F3D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:17:1c:2f:58:73:db:2b:fe:ed:05:28:a5:
60:1f:11:b2:e8:3e:2f:0b:a3:15:e1:90:69:8d:b8:
49:8a:2c:c8:47:44:cf:85:09:a6:0e:e9:00:54:68:
a5:5c:ab:da:02:04:07:d0:88:9a:14:9b:dc:18:e5:
08:08:d8:b6:e9:d7:30:f9:13:66:36:7e:9c:32:21:
72:e2:d2:c9:32:48:3d:8b:b3:21:d3:c1:72:d4:57:
1e:86:27:68:a0:8a:9c:1f:10:5f:a1:f8:4c:19:b3:
81:a0:75:94:77:5a:f1:5b:7d:b1:eb:3b:1f:f7:2d:
39:02:d0:be:ae:58:71:de:dc:7c:27:71:2e:2b:9d:
51:ac:e4:31:f5:7c:35:a4:6a:b4:50:d7:6f:fa:f3:
1c:2c:2c:75:86:c2:85:92:37:c4:8e:ff:fb:cb:69:
a7:f2:f8:63:f6:1f:d8:b5:72:67:ee:a7:c8:a1:52:
45:8e:d1:69:f7:de:1e:23:06:1b:09:58:9a:da:bb:
88:52:a7:40:32:bf:67:f3:89:66:04:b2:99:7d:60:
5f:34:26:cc:b1:0f:d1:c3:41:c7:11:1a:42:49:f3:
13:19:1a:be:bb:8d:09:77:42:5f:8f:fc:7e:55:f8:
3d:0e:ab:dd:a1:76:02:c7:43:16:47:7a:cc:93:e0:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CE:1A:B0:6D:0B:93:28:40:63:5F:6C:63:A2:63:3C:C2:C1:F3:D8
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/326130373a643838333a3130303a3a2f34302d3438203d3e20323038343736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:d883:100::/40
Signature Algorithm: sha256WithRSAEncryption
c6:05:e6:be:b6:34:7b:6c:91:53:36:ba:f9:a6:cf:e9:c2:68:
fa:68:60:63:e9:e8:a9:d2:b2:a9:c7:c9:d3:d7:20:1c:da:1f:
0b:2a:55:04:62:59:f4:21:b1:6a:de:dd:30:5e:d4:4e:24:25:
6a:65:33:87:0e:67:f9:25:c2:6d:92:7c:d2:b3:a9:66:96:79:
ff:d2:28:69:57:42:2a:1e:fb:f2:cd:5c:39:aa:47:df:1c:bd:
48:66:9b:ca:5f:fe:57:13:63:83:e1:af:00:1b:75:ae:ba:d3:
df:57:e9:45:58:7a:09:9f:62:6e:50:71:c5:55:73:06:96:bd:
85:e5:12:a1:45:a3:53:b0:b7:f6:d9:5f:c3:c7:66:b7:14:31:
5a:80:14:96:ce:d4:1d:c5:76:30:d7:c6:25:c8:b8:7b:33:08:
86:27:4d:3e:03:89:87:09:9f:ba:72:be:9d:9c:ef:de:53:3a:
2d:d1:59:8a:91:3b:ba:65:16:ad:a6:7e:e4:e9:b5:53:66:17:
60:8c:58:7f:6e:45:50:ef:f5:38:fe:e8:7f:9f:7b:c1:f4:1f:
90:6d:c4:82:df:bf:e8:8b:a0:6b:b9:b6:79:00:22:ef:51:4e:
ca:0c:05:67:31:e1:86:2e:69:08:84:a2:19:ce:8a:c6:4f:88:
c2:46:5c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:15:16 2025 by rpki-client