Route Origin Authorization
$ rpki-client -vvf rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3132392e302f32342d3234203d3e20323132373935.roa
File: 3135382e3232302e3132392e302f32342d3234203d3e20323132373935.roa (raw, json)
Hash identifier: r1ZFj3P1o4BZoIc9YUwZWIWodz+pW4Xb9GHDVREWoWI=
Subject key identifier: B2:76:E1:DB:52:9F:8E:CE:4C:6E:D8:21:FF:CE:B9:C1:76:7D:06:B0
Certificate issuer: /CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
Certificate serial: 3BE8C7E40681C21D36C39783C00450FEFFD30A66
Authority key identifier: EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
Subject info access: rsync://rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3132392e302f32342d3234203d3e20323132373935.roa
Signing time: Mon 02 Dec 2024 11:52:23 +0000
ROA not before: Mon 02 Dec 2024 11:47:23 +0000
ROA not after: Mon 01 Dec 2025 11:52:23 +0000
asID: 212795
IP address blocks: 158.220.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e8:c7:e4:06:81:c2:1d:36:c3:97:83:c0:04:50:fe:ff:d3:0a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
Validity
Not Before: Dec 2 11:47:23 2024 GMT
Not After : Dec 1 11:52:23 2025 GMT
Subject: CN=B276E1DB529F8ECE4C6ED821FFCEB9C1767D06B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:03:7f:da:fa:45:09:2c:1a:06:74:07:c0:
df:c0:b0:56:d0:ea:fa:16:54:dd:fb:79:23:70:58:
31:d7:ce:49:28:cc:8a:64:dd:31:1a:44:97:b9:c2:
fc:a4:7f:cc:cb:5d:e4:46:d6:ce:42:a7:2d:c1:6a:
3b:89:de:84:ba:27:7a:13:4f:fc:11:ff:2c:a1:63:
c5:87:dc:e1:62:eb:4b:9c:c1:02:92:dd:d9:8c:8d:
09:8b:46:2a:00:66:01:bb:81:1d:dd:58:67:ce:aa:
1a:19:af:1a:50:76:88:66:c6:f1:78:d7:5f:45:07:
5a:57:41:4c:df:cf:ec:65:91:42:57:ee:55:f4:de:
c4:e2:7c:56:70:d2:e6:de:ce:c6:f9:88:01:60:58:
63:80:15:b3:fe:a4:00:14:75:4b:b2:85:32:9b:f3:
85:53:d1:0c:8a:22:58:a6:59:15:72:33:2e:8b:68:
2e:51:b9:e7:97:ee:28:61:fd:d1:56:eb:18:37:44:
2b:49:df:f0:bb:7d:4d:70:bc:f4:e8:db:be:4b:9b:
a7:29:66:0a:a4:5b:11:e7:44:d9:15:b1:96:3e:07:
6a:77:f2:9b:12:fb:2a:af:90:78:05:70:5c:fb:f7:
3c:a1:5c:d4:ca:c5:f5:93:cc:99:9f:2a:41:1b:86:
40:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:76:E1:DB:52:9F:8E:CE:4C:6E:D8:21:FF:CE:B9:C1:76:7D:06:B0
X509v3 Authority Key Identifier:
keyid:EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3132392e302f32342d3234203d3e20323132373935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b5:47:4b:0f:15:e8:ec:a2:99:53:a4:f8:55:72:90:e4:a4:
36:14:0e:58:df:f5:81:b8:4a:bc:69:f4:7d:f3:ab:c3:6f:61:
05:88:f6:4e:9e:9d:55:ce:8d:8b:12:c3:e9:86:d6:04:ca:2b:
93:a9:33:50:9c:37:4c:15:4e:86:c1:1c:15:67:3b:b1:8b:e9:
a0:fa:9a:4e:5c:91:36:a9:05:f5:5c:40:c9:f9:3b:88:2c:fc:
11:c5:13:93:0a:13:d4:a1:f9:da:27:a1:a2:03:8e:86:e4:1f:
48:3b:bb:d2:a3:b0:a8:6d:69:d0:9a:2d:86:f9:c3:d4:e4:31:
3b:3d:db:4a:54:93:6f:42:41:a9:f3:a1:af:87:24:d1:ce:7d:
fa:d5:36:3a:43:c8:9e:b9:29:1a:b9:d7:75:ea:79:04:3f:d6:
b9:a8:0e:75:1a:a2:19:ad:7d:f3:8d:49:39:72:c9:a2:36:c1:
cb:b2:63:31:20:a6:92:4d:b2:be:9c:e1:24:7f:7c:2f:cc:a6:
1d:b7:79:35:fc:0c:32:9f:f5:b2:c4:af:f3:b0:bf:70:f0:64:
64:d8:b3:3b:c7:2f:b9:ee:0f:ff:fb:f3:cf:e5:f7:70:2c:cd:
16:0e:67:ba:5e:31:dc:b5:8b:09:3c:05:42:29:ba:7d:2e:7b:
3d:a6:b5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:27:34 2025 by rpki-client