Route Origin Authorization
$ rpki-client -vvf k29.rrdp-rpki.athene-center.net/repo/k29-rpki-athene-center/0/3135382e3232302e3135382e302f32342d3234203d3e20323038313632.roa
File: 3135382e3232302e3135382e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier: 18xnbhi+LbzDwNWWw+MXJkFgee4KaeC/bwvRnub1t1k=
Subject key identifier: E2:28:93:3F:EE:8F:A8:E3:37:1A:B6:BD:23:78:29:70:DD:91:D8:77
Certificate issuer: /CN=B768E0D460A3A8EC6306BB3D09CAB78787E4BB03
Certificate serial: 3A52BA6F171377F4102855623571E273AE1D2A5A
Authority key identifier: B7:68:E0:D4:60:A3:A8:EC:63:06:BB:3D:09:CA:B7:87:87:E4:BB:03
Authority info access: rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/B768E0D460A3A8EC6306BB3D09CAB78787E4BB03.cer
Subject info access: rsync://k29.rrdp-rpki.athene-center.net/repo/k29-rpki-athene-center/0/3135382e3232302e3135382e302f32342d3234203d3e20323038313632.roa
Signing time: Wed 27 Mar 2024 19:43:10 +0000
ROA not before: Wed 27 Mar 2024 19:38:10 +0000
ROA not after: Wed 26 Mar 2025 19:43:10 +0000
asID: 208162
IP address blocks: 158.220.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:52:ba:6f:17:13:77:f4:10:28:55:62:35:71:e2:73:ae:1d:2a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B768E0D460A3A8EC6306BB3D09CAB78787E4BB03
Validity
Not Before: Mar 27 19:38:10 2024 GMT
Not After : Mar 26 19:43:10 2025 GMT
Subject: CN=E228933FEE8FA8E3371AB6BD23782970DD91D877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c6:f0:ec:93:03:2b:3f:39:af:f3:71:59:67:
80:10:1a:b6:13:2d:94:54:45:65:c7:11:db:e2:82:
e9:91:b1:51:0b:a3:63:f4:4e:9e:24:33:77:fb:1b:
8a:00:ca:18:90:57:45:8e:38:84:5c:26:94:37:9e:
9b:3c:72:0d:fc:70:ac:ee:06:aa:5a:26:a0:6f:a1:
8b:ec:a1:1e:60:c7:fb:5e:37:eb:15:d0:6f:91:26:
71:c6:6c:86:8c:36:bf:0a:cd:da:b1:1a:a6:f7:2c:
ad:c9:8e:d6:ee:1f:b5:0a:75:83:cc:ad:e1:74:8b:
9c:e0:bc:da:d2:48:7a:90:ae:66:5a:1b:d5:0a:e7:
83:41:98:6a:a8:25:09:a1:dd:06:52:76:f5:9d:b2:
a0:de:6d:f8:59:0c:3f:4f:31:dc:1a:37:de:25:58:
9b:34:c5:a4:c4:4c:2c:dc:74:f0:c5:d6:5a:aa:3a:
1f:85:f5:72:30:f7:ac:42:9e:07:a4:b0:b2:72:ad:
f7:0b:77:92:f7:df:90:10:b6:a5:05:1e:81:ee:01:
ad:58:b5:20:96:53:ca:eb:2a:78:1a:21:88:b5:18:
1e:8b:5e:88:96:ba:f6:9a:3b:e8:c0:fb:84:58:24:
11:7d:d0:e9:7b:82:5c:78:de:1f:7c:1d:61:9b:27:
96:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:28:93:3F:EE:8F:A8:E3:37:1A:B6:BD:23:78:29:70:DD:91:D8:77
X509v3 Authority Key Identifier:
keyid:B7:68:E0:D4:60:A3:A8:EC:63:06:BB:3D:09:CA:B7:87:87:E4:BB:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://k29.rrdp-rpki.athene-center.net/repo/k29-rpki-athene-center/0/B768E0D460A3A8EC6306BB3D09CAB78787E4BB03.crl
Authority Information Access:
CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/B768E0D460A3A8EC6306BB3D09CAB78787E4BB03.cer
Subject Information Access:
Signed Object - URI:rsync://k29.rrdp-rpki.athene-center.net/repo/k29-rpki-athene-center/0/3135382e3232302e3135382e302f32342d3234203d3e20323038313632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.158.0/24
Signature Algorithm: sha256WithRSAEncryption
59:7b:e3:ec:88:f4:32:16:1f:45:b9:88:0e:3e:08:27:e1:fe:
bc:54:02:04:e8:12:4a:0d:c3:c6:b1:aa:54:e3:c3:e3:b2:da:
83:3b:37:53:02:36:c2:22:b3:9b:84:96:4c:7f:9b:2a:c5:bb:
21:19:98:12:a5:f2:79:38:3c:39:d4:a1:74:cf:09:e3:e3:37:
ef:cf:70:cf:5d:4d:52:03:d1:3b:2d:4b:9d:78:23:61:95:94:
b4:fd:8d:34:00:67:e7:a0:61:ed:ab:dc:07:06:23:5e:07:69:
8d:3c:50:21:5c:b2:49:75:68:d2:ef:01:af:79:5f:17:3a:ff:
d2:85:5e:2c:c1:a0:0f:51:3b:56:e1:de:a3:ec:bd:cb:86:e0:
50:71:77:1d:f1:82:08:ab:48:19:40:49:cb:3c:43:2e:cc:fa:
02:2f:cc:a4:38:ca:a4:5d:0d:98:86:37:e4:68:cb:c9:f9:7a:
de:f8:63:5b:13:73:22:b2:78:94:a6:40:e5:78:6d:f0:44:8a:
a1:42:da:9b:3d:d1:94:39:4b:8c:3d:23:b4:54:0a:8a:48:7f:
55:23:05:f3:d1:70:98:64:bd:99:c1:29:42:6f:cb:2f:3c:7d:
66:3a:f6:8b:04:ba:73:ca:8d:24:ea:d3:ef:90:20:f4:69:fb:
22:2c:af:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 02:11:39 2024 by rpki-client on console-ams.rpki-client.org