Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/326130373a643838333a3530303a3a2f34302d3438203d3e20323038343736.roa
File: 326130373a643838333a3530303a3a2f34302d3438203d3e20323038343736.roa (raw, json)
Hash identifier: Yt3Cx+9lLhC5B7uvaM/PDHt9qbLq04BZ+zr6b1vyp3o=
Subject key identifier: FC:03:C3:EE:5D:CF:9B:29:07:27:3F:9E:F9:24:DD:EC:BA:11:D8:87
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 4378AB9D15C9D0EA610DEB2963390BFE665CD7C2
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/326130373a643838333a3530303a3a2f34302d3438203d3e20323038343736.roa
Signing time: Tue 05 Aug 2025 02:43:56 +0000
ROA not before: Tue 05 Aug 2025 02:38:56 +0000
ROA not after: Tue 04 Aug 2026 02:43:56 +0000
asID: 208476
IP address blocks: 2a07:d883:500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:78:ab:9d:15:c9:d0:ea:61:0d:eb:29:63:39:0b:fe:66:5c:d7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Aug 5 02:38:56 2025 GMT
Not After : Aug 4 02:43:56 2026 GMT
Subject: CN=FC03C3EE5DCF9B2907273F9EF924DDECBA11D887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:cc:13:94:5c:13:25:59:5c:49:0d:3e:c9:
bf:4c:96:e3:bf:fa:4d:db:44:e6:13:95:cb:6d:d2:
41:21:0c:46:c3:5c:9f:8b:7c:e7:0f:f4:8c:1c:6e:
33:f6:f1:0d:8e:4b:85:97:e9:48:94:1e:4d:73:da:
f4:c9:f3:73:8f:48:44:d1:da:d8:65:47:88:e9:29:
5a:69:78:ec:ea:1d:b9:59:9d:58:91:4a:94:3e:35:
6e:36:19:65:3a:40:0b:da:d3:32:ce:95:4f:84:c5:
1b:69:e4:15:22:8e:60:2d:bd:62:77:44:44:bc:f4:
6f:62:db:75:1a:26:81:b0:45:55:34:20:c6:15:75:
65:39:af:66:a5:5a:5d:22:79:40:8a:b4:0d:63:9a:
22:60:38:fe:b0:e6:60:29:4d:48:01:a4:8c:09:00:
b8:4d:0e:42:3a:36:92:43:aa:8a:7b:da:a1:c4:57:
d8:28:55:87:64:d3:58:7d:84:46:18:7e:c3:16:6d:
49:a0:12:64:d4:9b:04:aa:16:2d:d9:ac:c0:34:05:
03:c4:b4:12:0b:7a:b7:cf:45:8e:af:2f:3d:45:f4:
df:6c:ee:73:67:4f:12:a3:5e:1d:5a:cd:1c:78:63:
42:ac:e1:49:6e:fb:6f:0d:7c:9f:f3:a4:a1:1f:bd:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:03:C3:EE:5D:CF:9B:29:07:27:3F:9E:F9:24:DD:EC:BA:11:D8:87
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/326130373a643838333a3530303a3a2f34302d3438203d3e20323038343736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:d883:500::/40
Signature Algorithm: sha256WithRSAEncryption
ec:c8:e6:71:b7:5e:4f:d5:06:5f:68:0d:fd:69:9e:d7:d3:1d:
30:c0:2c:c1:a7:38:43:2c:4d:f7:0d:c7:e0:2b:54:17:37:61:
2b:30:47:97:3a:c5:d4:97:84:fb:8c:77:0f:a5:68:51:44:a9:
12:7e:6a:54:07:56:08:55:87:a1:06:78:f7:97:18:ce:82:03:
f8:ca:b4:38:1d:bb:6e:c1:d3:9a:57:ec:2e:d7:df:b5:31:d3:
21:fc:dd:9f:62:cf:4f:c6:ac:c6:a2:97:41:ac:dd:f0:e0:d1:
38:ff:6a:61:b7:83:28:a8:89:31:68:78:2a:b9:cf:da:88:b7:
55:d3:d9:3d:16:0d:31:de:3e:dc:59:15:38:36:96:25:bc:64:
55:cc:c0:27:62:8d:83:2e:90:ca:d4:8c:04:61:ea:c6:6c:0c:
3e:1a:18:6e:9d:dc:50:da:e6:00:a5:be:8e:67:01:5c:cb:9b:
9e:50:c4:ce:31:c5:93:fa:c2:4b:d6:1d:28:56:a3:f6:11:86:
25:70:d5:92:6d:bd:a1:4f:62:f5:73:51:7f:47:ba:39:80:df:
44:22:9e:90:0b:be:88:e5:d8:87:8a:46:26:6c:bf:5e:3f:6a:
fb:6a:d2:4b:84:9f:7e:f2:a6:e0:e1:bc:22:96:f8:7a:df:0d:
93:22:8b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:22:19 2025 by rpki-client