Route Origin Authorization
$ rpki-client -vvf k60.rrdp-rpki.athene-center.net/repo/k60-rpki-athene-center/0/3135382e3232302e3138392e302f32342d3234203d3e20323038313632.roa
File: 3135382e3232302e3138392e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier: LbpFCVQM7Zfgmri7JHzoDTHNGMvZbd+dH0/YCP1lHrE=
Subject key identifier: 1E:7E:CA:39:A4:4A:50:5D:F4:C0:50:8D:A1:F6:49:F7:D7:95:FE:7C
Certificate issuer: /CN=C33D2588D10D405934D305D69FB217FF8CBFAFE0
Certificate serial: 585EEA735AA082123BCFF52E568CAFB9A0E55CC0
Authority key identifier: C3:3D:25:88:D1:0D:40:59:34:D3:05:D6:9F:B2:17:FF:8C:BF:AF:E0
Authority info access: rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/C33D2588D10D405934D305D69FB217FF8CBFAFE0.cer
Subject info access: rsync://k60.rrdp-rpki.athene-center.net/repo/k60-rpki-athene-center/0/3135382e3232302e3138392e302f32342d3234203d3e20323038313632.roa
Signing time: Wed 27 Mar 2024 19:49:01 +0000
ROA not before: Wed 27 Mar 2024 19:44:01 +0000
ROA not after: Wed 26 Mar 2025 19:49:01 +0000
asID: 208162
IP address blocks: 158.220.189.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:5e:ea:73:5a:a0:82:12:3b:cf:f5:2e:56:8c:af:b9:a0:e5:5c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C33D2588D10D405934D305D69FB217FF8CBFAFE0
Validity
Not Before: Mar 27 19:44:01 2024 GMT
Not After : Mar 26 19:49:01 2025 GMT
Subject: CN=1E7ECA39A44A505DF4C0508DA1F649F7D795FE7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:ce:23:fa:9e:7b:28:51:54:f8:ab:00:02:
19:c7:0e:68:19:8d:9a:9e:df:90:cf:7d:c9:68:a3:
ab:35:a6:46:d5:58:6f:a7:9b:c3:df:61:7b:b6:b0:
45:bd:85:aa:fd:e9:9d:4d:ec:0d:9f:92:37:17:3e:
4a:67:c1:a5:cf:14:e1:70:7a:e9:2a:40:e1:a5:d4:
6e:17:f1:5c:ae:30:9d:96:9b:2f:64:40:f7:79:02:
e7:5c:5b:52:a0:06:12:25:f0:9d:c9:1d:aa:e6:2d:
32:a9:c1:07:03:64:93:56:f3:25:0e:27:8a:74:0b:
43:b9:df:81:fe:96:a1:47:92:8a:25:e5:0c:37:c9:
fa:66:bd:d6:a9:7d:df:ad:a1:c1:be:b8:95:cc:cb:
f3:01:0d:84:5a:50:ba:d6:a3:62:d6:a0:04:7a:b2:
c0:00:5f:0f:f4:e6:fc:4e:2a:79:09:00:54:96:37:
3e:14:c6:d7:9b:af:9f:32:cb:13:de:ab:ba:3c:b6:
a5:ca:db:f7:6f:66:c0:e1:9a:ca:cb:81:b0:67:46:
4e:9e:d6:0b:9a:12:f6:74:7c:bb:ca:86:32:1d:c9:
ff:5b:86:66:c6:dc:c7:33:eb:85:e4:2b:5b:f4:12:
0b:31:58:78:0f:03:0e:17:be:b5:3f:3c:6c:3c:21:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7E:CA:39:A4:4A:50:5D:F4:C0:50:8D:A1:F6:49:F7:D7:95:FE:7C
X509v3 Authority Key Identifier:
keyid:C3:3D:25:88:D1:0D:40:59:34:D3:05:D6:9F:B2:17:FF:8C:BF:AF:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://k60.rrdp-rpki.athene-center.net/repo/k60-rpki-athene-center/0/C33D2588D10D405934D305D69FB217FF8CBFAFE0.crl
Authority Information Access:
CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/C33D2588D10D405934D305D69FB217FF8CBFAFE0.cer
Subject Information Access:
Signed Object - URI:rsync://k60.rrdp-rpki.athene-center.net/repo/k60-rpki-athene-center/0/3135382e3232302e3138392e302f32342d3234203d3e20323038313632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.189.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:20:46:56:3f:0a:5f:10:fb:9f:cc:25:a0:ae:2e:a3:e1:01:
1c:bf:db:1d:6c:51:ac:1b:77:bb:8c:8e:b2:9b:31:53:8c:41:
6f:57:99:38:32:a7:82:0c:82:0e:74:49:31:d6:1f:9b:ea:ab:
2c:57:92:27:b8:85:92:00:98:85:99:97:22:c9:a4:55:0c:3c:
c5:71:bc:13:d5:f6:b1:59:13:24:c6:63:0a:99:bc:4d:77:c3:
d1:b3:fc:ad:46:86:f1:12:19:a7:9f:5a:73:b7:2f:c7:57:80:
27:31:b9:6f:15:20:f3:c8:df:d9:c6:e9:73:d0:1a:12:68:bf:
1b:91:f0:da:e1:87:a2:3e:7a:86:a3:35:e8:ba:52:97:e4:67:
18:0e:58:56:fd:c7:41:74:d8:bc:7b:a0:b5:21:7b:ad:40:df:
6e:9d:20:91:bb:06:b6:21:01:4c:26:1e:5b:fc:c4:c9:96:ac:
23:f6:ee:4a:57:33:74:42:b4:03:c1:e4:33:59:0b:8d:ee:fb:
1b:9a:6d:03:fa:dc:32:57:f2:33:71:fc:1d:54:3d:f8:f3:da:
e8:f3:ae:75:72:1c:2a:1b:f3:10:5a:fe:4d:30:3c:89:5d:b5:
ab:22:f6:79:50:bb:c9:54:20:f8:a9:ce:64:f1:43:4e:60:7a:
b4:c5:d2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 23:24:03 2024 by rpki-client on console-ams.rpki-client.org