Route Origin Authorization
$ rpki-client -vvf rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3132382e302f32342d3234203d3e20323132373935.roa
File: 3135382e3232302e3132382e302f32342d3234203d3e20323132373935.roa (raw, json)
Hash identifier: ukwyA3N6hzu0MRiREdE/eNcT4nPR0zCAB2TCMGQB2ys=
Subject key identifier: 9B:BE:95:BA:45:42:46:E7:D3:B7:30:77:91:21:72:44:F6:5E:54:54
Certificate issuer: /CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
Certificate serial: 6EA616B5A01E5F87820073EFB3E317446573FBCA
Authority key identifier: EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
Subject info access: rsync://rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3132382e302f32342d3234203d3e20323132373935.roa
Signing time: Fri 04 Jul 2025 08:54:05 +0000
ROA not before: Fri 04 Jul 2025 08:49:05 +0000
ROA not after: Fri 03 Jul 2026 08:54:05 +0000
asID: 212795
IP address blocks: 158.220.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.crl
rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 07:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:a6:16:b5:a0:1e:5f:87:82:00:73:ef:b3:e3:17:44:65:73:fb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
Validity
Not Before: Jul 4 08:49:05 2025 GMT
Not After : Jul 3 08:54:05 2026 GMT
Subject: CN=9BBE95BA454246E7D3B7307791217244F65E5454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:d4:39:99:a3:fd:43:64:89:dd:5c:2c:75:
22:33:93:6a:a7:39:2a:ef:a4:71:b5:b1:f6:66:03:
d4:41:1f:ad:d9:96:2e:94:11:28:c0:cd:09:f0:f4:
7e:d3:f7:21:89:2a:56:0a:cf:53:9e:e0:ec:f4:44:
81:32:45:83:91:15:f1:89:a3:7e:cb:40:23:c9:29:
b0:a4:1c:ec:97:ec:36:e6:ed:81:37:a3:a4:a0:bc:
07:86:66:67:6c:90:b7:f9:25:6b:7b:15:17:9f:aa:
e6:b5:dd:16:67:44:3d:56:b3:e7:dc:45:53:94:8e:
dd:6e:a3:c2:70:c1:d0:d9:ba:58:8c:2e:67:f2:6c:
1f:41:c8:93:32:c1:73:83:b9:1d:b5:f5:01:26:d2:
a7:8d:9e:35:be:70:5e:94:88:3f:01:cf:7b:3d:48:
98:f8:24:61:69:30:9c:a0:e6:da:83:c7:d6:62:78:
a2:61:6d:b1:9e:09:2b:16:4e:04:40:3c:4e:7f:0e:
54:23:de:a6:a5:53:82:fb:da:51:f0:3f:a0:e6:bb:
05:e6:56:e1:83:b0:a6:db:f0:49:72:79:b9:a0:b3:
71:cf:11:6e:8c:b4:4e:ee:72:90:b9:a3:c0:0b:ce:
89:50:2e:1f:ed:c9:a3:0a:75:20:4c:74:37:2a:9e:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BE:95:BA:45:42:46:E7:D3:B7:30:77:91:21:72:44:F6:5E:54:54
X509v3 Authority Key Identifier:
keyid:EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3132382e302f32342d3234203d3e20323132373935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.128.0/24
Signature Algorithm: sha256WithRSAEncryption
34:84:3e:ac:db:24:90:18:c5:42:84:13:b2:82:73:45:9d:d6:
f0:ef:8f:9e:15:5d:14:d5:c7:78:8c:94:9e:25:34:07:3a:2f:
3f:96:86:5c:96:da:e5:b1:f1:e2:a0:40:2a:51:40:0e:aa:c5:
db:fa:89:8a:f3:21:a8:41:ed:77:1f:a0:9e:4d:3f:8a:38:83:
c6:e3:fb:20:49:7f:07:79:2f:23:74:38:f0:af:25:0e:4e:cc:
58:bd:a5:ba:13:8a:bb:cb:08:7c:21:13:e0:a3:91:41:43:13:
f7:73:03:b5:9b:55:51:cc:53:1c:fd:a2:e9:71:25:1d:f3:af:
c4:86:0f:00:b9:03:f8:3c:bf:56:ee:92:04:e9:d2:4a:d5:fe:
e2:d3:ac:45:fc:ec:b7:ef:27:28:2f:56:e7:eb:f7:e0:d8:3f:
62:af:e2:72:ab:d1:0d:ec:9b:1d:81:80:ef:bd:e8:08:87:f4:
93:57:1a:58:76:d2:84:f2:f4:7b:e9:85:43:d5:b8:c4:61:0b:
bd:f9:53:b0:79:98:a7:ee:ba:5a:6c:2e:99:79:87:10:3c:46:
5d:c4:76:a9:8a:e0:1a:90:02:37:36:87:32:68:10:cc:7b:84:
7c:ed:d4:06:5b:fb:69:37:55:96:12:ac:2f:69:3a:5f:23:28:
0a:b8:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:21:05 2025 by rpki-client