Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/326130373a643838353a3a2f34302d3438203d3e20323132353132.roa
File: 326130373a643838353a3a2f34302d3438203d3e20323132353132.roa (raw, json)
Hash identifier: AnlA5jJXFQEbB8H4mErWRKr+B6tKsKdKFfBD74I1P4Q=
Subject key identifier: BA:4E:76:4F:2F:8B:1E:D3:05:29:B5:EE:6D:0C:38:98:44:E3:93:60
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 48588E8B82E30620F97D6C4897C826E5A209117B
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/326130373a643838353a3a2f34302d3438203d3e20323132353132.roa
Signing time: Wed 23 Apr 2025 12:06:38 +0000
ROA not before: Wed 23 Apr 2025 12:01:38 +0000
ROA not after: Wed 22 Apr 2026 12:06:38 +0000
asID: 212512
IP address blocks: 2a07:d885::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:58:8e:8b:82:e3:06:20:f9:7d:6c:48:97:c8:26:e5:a2:09:11:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Apr 23 12:01:38 2025 GMT
Not After : Apr 22 12:06:38 2026 GMT
Subject: CN=BA4E764F2F8B1ED30529B5EE6D0C389844E39360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e9:c4:68:b3:8c:b9:38:5f:8b:bd:96:2d:76:
1a:22:63:26:1f:e4:d5:48:85:61:eb:e2:51:e3:07:
e4:76:8c:a0:89:fc:6f:ad:1a:2d:72:e0:96:c8:97:
3c:af:d7:d7:31:aa:8d:e6:4e:1c:04:f8:a8:ff:37:
b8:c9:b6:15:dd:79:48:2a:62:5a:7e:62:da:e6:0b:
c8:58:f5:a9:96:e9:92:d6:e1:f2:2d:52:0f:7f:97:
37:1e:d6:e7:ad:0e:5f:37:ed:a9:df:a3:c9:35:3f:
0d:71:79:a9:ea:9e:0f:cc:69:41:36:46:7f:ac:a8:
0f:2f:8f:05:fa:30:fb:a7:17:0b:d6:7e:7b:5c:45:
94:cc:94:32:69:08:8a:d8:53:85:43:20:9e:e2:f5:
5e:c9:4c:85:65:89:7b:47:bc:6a:fe:d8:4e:91:27:
d5:77:0d:48:08:de:5d:a5:f6:79:c2:ce:8d:d0:b5:
aa:fd:02:a2:fc:54:30:96:50:0f:d6:8a:8a:d9:70:
08:b1:af:8e:a2:76:b5:5a:c2:9e:82:0e:4e:4c:84:
a1:22:0f:7d:2d:88:17:e7:ab:a5:9b:18:a9:05:ae:
04:3f:f3:16:cb:27:d8:f5:03:7f:66:1e:c1:b6:0f:
fc:ca:e5:f6:ee:79:43:82:06:1c:92:47:e2:a9:22:
0d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4E:76:4F:2F:8B:1E:D3:05:29:B5:EE:6D:0C:38:98:44:E3:93:60
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/326130373a643838353a3a2f34302d3438203d3e20323132353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:d885::/40
Signature Algorithm: sha256WithRSAEncryption
ca:b2:8e:5e:77:6e:7f:cc:e6:6e:5a:25:cb:1d:27:31:62:57:
f0:af:13:38:5e:e5:2a:c1:c6:ca:75:a5:65:12:2c:01:a1:72:
9a:00:de:7b:f1:b4:57:e8:a0:2f:2f:c5:b2:d4:3d:23:52:49:
07:84:2a:1d:75:97:5a:9b:86:c1:b0:c6:1f:09:3c:b5:bc:d3:
41:e1:b0:28:17:76:ae:22:54:cf:56:e8:12:77:b1:e8:2c:37:
a3:de:6a:07:96:80:5b:41:67:15:e3:2a:2a:8f:bf:29:87:9d:
82:47:54:85:90:27:e9:a2:97:af:71:a9:a8:6e:59:cf:36:bc:
e8:04:7d:31:3a:f2:d4:59:3c:c9:fb:6c:b4:be:c0:2d:14:2e:
74:43:05:48:71:f8:37:3f:1b:31:35:4d:77:14:78:56:ee:4b:
c0:60:23:af:b5:f2:11:e3:0d:7a:c7:7b:25:5a:b1:78:42:a0:
6f:77:60:4e:33:c1:2d:a8:f2:30:a4:12:69:bb:2b:ab:cd:42:
4c:30:98:6d:fd:db:be:ff:db:c3:0c:ec:24:b6:cc:ba:8e:04:
31:9c:e9:28:cc:7a:67:c4:95:8f:54:48:1c:8d:56:23:41:9b:
60:81:98:d1:ad:51:d7:ad:3c:c2:52:59:f2:69:5b:c5:f9:86:
e7:fd:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:22:55 2025 by rpki-client