Route Origin Authorization
$ rpki-client -vvf rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3133302e302f32342d3234203d3e20323038313632.roa
File: 3135382e3232302e3133302e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier: 6A018K1q6T6mM2OzBCgfcysy8CQwPY8gqKuxYP7+ufU=
Subject key identifier: 90:AB:9F:6D:04:7B:38:0E:D9:1F:F0:F2:24:F0:C0:37:F6:C4:20:36
Certificate issuer: /CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
Certificate serial: 47A4DDFDE7975559FD973154FDA9C029E3B8C852
Authority key identifier: EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
Subject info access: rsync://rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3133302e302f32342d3234203d3e20323038313632.roa
Signing time: Mon 09 Dec 2024 15:30:00 +0000
ROA not before: Mon 09 Dec 2024 15:25:00 +0000
ROA not after: Mon 08 Dec 2025 15:30:00 +0000
asID: 208162
IP address blocks: 158.220.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.crl
rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 12:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a4:dd:fd:e7:97:55:59:fd:97:31:54:fd:a9:c0:29:e3:b8:c8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
Validity
Not Before: Dec 9 15:25:00 2024 GMT
Not After : Dec 8 15:30:00 2025 GMT
Subject: CN=90AB9F6D047B380ED91FF0F224F0C037F6C42036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:83:86:59:f6:59:5a:7a:7e:cb:65:18:65:
5c:b8:f1:08:91:a6:f3:c3:48:25:e6:1e:5a:38:44:
e4:d5:07:7d:63:05:61:b4:b6:1d:54:18:91:05:57:
22:8f:9c:8e:b4:27:b8:dd:1b:2c:56:4d:9e:79:55:
a5:9f:70:67:68:a3:50:9f:9a:bc:f2:63:94:3f:b6:
3f:b8:09:0e:37:41:38:b1:ca:8b:15:e2:9f:4b:6f:
bb:ac:51:80:61:b7:67:5c:ad:8f:a6:be:d6:dd:f4:
0c:24:6b:04:80:d2:5c:c3:39:11:40:a0:07:6c:25:
6c:49:b0:5a:e6:a1:e7:bc:f9:8b:4e:26:11:2b:ed:
13:0c:b2:50:1c:79:53:5b:67:39:92:79:4f:b7:ed:
4b:bb:f3:d0:a4:8e:d2:33:6d:9f:d8:9f:85:c1:5b:
73:f7:e8:00:3d:6f:79:76:b5:05:0e:fe:7e:b3:e1:
ee:11:73:cc:1b:cc:91:0b:f8:fa:da:f3:cd:d1:29:
02:7c:98:ca:ae:e7:6c:5f:10:61:fc:4e:4e:f3:48:
cd:4f:d2:d1:2d:3a:b2:fb:e2:4f:57:4a:4d:c9:20:
ce:27:2f:8e:ee:74:78:8c:50:34:01:32:03:f2:0f:
75:d2:01:2e:f8:ab:51:dd:ee:f5:9a:d4:7c:ee:eb:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AB:9F:6D:04:7B:38:0E:D9:1F:F0:F2:24:F0:C0:37:F6:C4:20:36
X509v3 Authority Key Identifier:
keyid:EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3133302e302f32342d3234203d3e20323038313632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.130.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f7:d5:01:7d:91:2c:67:4b:fc:d9:92:36:68:77:b6:d1:e7:
bd:a2:cd:38:e0:f5:b6:8c:3e:f8:37:34:aa:c3:43:72:50:c7:
51:06:53:55:86:a9:ce:77:35:26:e2:53:d2:3e:1f:d8:80:ef:
9d:ae:25:21:ab:bc:56:e5:20:c4:ae:50:f7:26:ff:6b:d9:0f:
09:e3:d4:20:21:ae:10:9a:16:14:fc:03:a0:cc:e0:4a:71:1b:
e8:39:5f:e3:ba:c6:74:00:36:2a:2b:94:ed:0d:67:38:4c:f8:
97:de:7b:1c:23:f1:1e:b5:68:9e:81:55:46:cc:fc:cd:e9:6c:
6a:ce:d4:ff:1b:7a:50:f5:f5:31:8e:59:42:4b:aa:76:64:5f:
86:bc:d9:1f:0b:6c:50:bf:1e:73:43:59:e4:38:69:ba:30:5d:
84:68:21:2e:3e:52:50:67:69:11:53:4b:41:93:1f:47:74:29:
c8:88:eb:91:cf:ea:ac:24:70:fa:0d:fd:20:58:76:34:ee:3d:
4a:88:7b:fa:57:26:d6:c7:99:8a:35:2a:4b:42:69:89:d1:1a:
31:26:b6:37:22:2c:c7:48:2f:9f:22:27:f5:28:3c:6a:0f:8f:
87:76:ee:41:73:46:2e:e6:22:e9:1c:0e:06:c7:40:8a:7e:77:
74:b5:c8:bd
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIUR6Td/eeXVVn9lzFU/anAKeO4yFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWUwOTJkNmVjYjUyYmM5OWEzOWZhNjY3N2FmYmVlOWU0
MWJhZTBkOTAeFw0yNDEyMDkxNTI1MDBaFw0yNTEyMDgxNTMwMDBaMDMxMTAvBgNV
BAMTKDkwQUI5RjZEMDQ3QjM4MEVEOTFGRjBGMjI0RjBDMDM3RjZDNDIwMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpPoOGWfZZWnp+y2UYZVy48QiR
pvPDSCXmHlo4ROTVB31jBWG0th1UGJEFVyKPnI60J7jdGyxWTZ55VaWfcGdoo1Cf
mrzyY5Q/tj+4CQ43QTixyosV4p9Lb7usUYBht2dcrY+mvtbd9AwkawSA0lzDORFA
oAdsJWxJsFrmoee8+YtOJhEr7RMMslAceVNbZzmSeU+37Uu789CkjtIzbZ/Yn4XB
W3P36AA9b3l2tQUO/n6z4e4Rc8wbzJEL+Pra883RKQJ8mMqu52xfEGH8Tk7zSM1P
0tEtOrL74k9XSk3JIM4nL47udHiMUDQBMgPyD3XSAS74q1Hd7vWa1Hzu67mDAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQUkKufbQR7OA7ZH/DyJPDAN/bEIDYwHwYDVR0j
BBgwFoAU7gktbstSvJmjn6ZnevvunkG64NkwDgYDVR0PAQH/BAQDAgeAMHYGA1Ud
HwRvMG0wa6BpoGeGZXJzeW5jOi8vcnBraS5hdGhlbmUtY2VudGVyLm5ldC9yZXBv
L3Jwa2ktYXRoZW5lLWNlbnRlci8wL0VFMDkyRDZFQ0I1MkJDOTlBMzlGQTY2NzdB
RkJFRTlFNDFCQUUwRDkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZI
cnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Z2t0YnN0
U3ZKbWpuNlpuZXZ2dW5rRzY0TmsuY2VyMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYI
KwYBBQUHMAuGd3JzeW5jOi8vcnBraS5hdGhlbmUtY2VudGVyLm5ldC9yZXBvL3Jw
a2ktYXRoZW5lLWNlbnRlci8wLzMxMzUzODJlMzIzMjMwMmUzMTMzMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjMwMzgzMTM2MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACe3IIwDQYJ
KoZIhvcNAQELBQADggEBAIz31QF9kSxnS/zZkjZod7bR572izTjg9baMPvg3NKrD
Q3JQx1EGU1WGqc53NSbiU9I+H9iA752uJSGrvFblIMSuUPcm/2vZDwnj1CAhrhCa
FhT8A6DM4EpxG+g5X+O6xnQANiorlO0NZzhM+Jfeexwj8R61aJ6BVUbM/M3pbGrO
1P8belD19TGOWUJLqnZkX4a82R8LbFC/HnNDWeQ4abowXYRoIS4+UlBnaRFTS0GT
H0d0KciI65HP6qwkcPoN/SBYdjTuPUqIe/pXJtbHmYo1KktCaYnRGjEmtjciLMdI
L58iJ/UoPGoPj4d27kFzRi7mIukcDgbHQIp+d3S1yL0=
-----END CERTIFICATE-----
Generated at Mon Apr 14 16:49:14 2025 by rpki-client