Route Origin Authorization

$ rpki-client -vvf rpki.athene-center.net/repo/rpki-athene-center/0/34352e3135352e3132382e302f32342d3234203d3e20323132373935.roa
File:                     34352e3135352e3132382e302f32342d3234203d3e20323132373935.roa (raw, json)
Hash identifier:          f5tufVF2y2lPzVMOLW4dUH9kF6gL2JBSGPsZ0IcSN3I=
Subject key identifier:   8F:9F:A7:65:91:64:E5:15:CE:EC:E2:8A:E2:D8:6A:B8:E7:C1:2F:FD
Certificate issuer:       /CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
Certificate serial:       48268A0D6BEE62F1D60E7C913BE92F95C4D63C69
Authority key identifier: EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
Subject info access:      rsync://rpki.athene-center.net/repo/rpki-athene-center/0/34352e3135352e3132382e302f32342d3234203d3e20323132373935.roa
Signing time:             Tue 20 Jan 2026 15:25:40 +0000
ROA not before:           Tue 20 Jan 2026 15:20:40 +0000
ROA not after:            Tue 19 Jan 2027 15:25:40 +0000
asID:                     212795
IP address blocks:        45.155.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.crl
                          rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:26:8a:0d:6b:ee:62:f1:d6:0e:7c:91:3b:e9:2f:95:c4:d6:3c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
        Validity
            Not Before: Jan 20 15:20:40 2026 GMT
            Not After : Jan 19 15:25:40 2027 GMT
        Subject: CN=8F9FA7659164E515CEECE28AE2D86AB8E7C12FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cd:2d:04:91:7e:06:eb:51:1b:46:8e:80:44:
                    5d:83:3b:f1:12:ef:f5:7e:43:e2:e1:27:b9:e4:df:
                    30:8b:3d:7c:26:99:02:47:a3:62:76:bf:2f:c4:c8:
                    0b:01:19:e9:12:a5:1c:c3:06:7d:d5:df:4c:cf:24:
                    dc:e7:12:94:69:7a:bb:c5:46:3b:6c:ba:e1:a6:91:
                    b3:15:56:09:18:dc:fe:e0:dc:39:d2:64:f3:34:4e:
                    e5:9d:e1:4d:37:1f:16:f2:e8:36:e6:89:ff:7b:be:
                    ed:59:b0:1c:8f:09:f4:aa:e0:e4:67:58:40:66:00:
                    11:6c:aa:0f:45:91:f9:f0:75:74:f1:58:cf:a9:17:
                    e2:97:cd:a3:87:b6:03:f3:18:b6:20:49:05:07:f7:
                    2d:6d:11:9c:96:90:9d:06:68:31:f5:38:34:5e:ae:
                    92:87:7a:52:f8:69:57:02:f2:31:e4:c0:0e:7e:5d:
                    cc:27:c4:31:94:15:69:e9:50:8b:41:0a:6d:6a:e7:
                    48:95:68:b3:c6:5e:b9:25:c0:be:cb:d6:e3:27:c4:
                    53:65:c5:e9:3e:56:2a:69:49:cb:fe:18:22:a5:33:
                    b4:9a:7d:02:33:1f:e5:39:e3:87:19:85:21:fd:df:
                    2c:4a:3e:74:63:73:85:81:4c:a3:71:52:14:aa:62:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9F:A7:65:91:64:E5:15:CE:EC:E2:8A:E2:D8:6A:B8:E7:C1:2F:FD
            X509v3 Authority Key Identifier:
                keyid:EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/34352e3135352e3132382e302f32342d3234203d3e20323132373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:c2:be:58:5a:a1:4d:56:30:cf:8f:fc:d0:b9:e2:0d:65:9a:
         00:4a:97:2d:f3:ef:3b:3e:e5:3b:ad:04:7e:20:ee:6b:93:e6:
         b4:f0:15:89:cb:9f:5a:37:f6:e7:2b:7f:bc:2e:af:2b:2a:80:
         89:88:49:2c:82:73:97:3e:05:78:ec:b7:5f:d2:76:16:fa:f1:
         be:d9:51:b6:ae:7f:5c:a5:05:95:8d:6e:4c:f9:8d:46:43:87:
         94:45:27:85:0c:b1:79:4c:9b:6a:87:42:f5:04:62:e0:40:ee:
         78:e9:15:71:c8:09:cd:1f:7f:f6:d3:eb:f1:b8:fc:5b:99:ff:
         c6:f2:c2:af:52:73:a8:27:5c:0c:8e:c9:7e:a4:65:0c:e2:a1:
         ae:96:57:99:fa:61:14:98:1a:ab:5c:6a:25:62:45:2e:68:f1:
         8c:c6:44:d4:15:52:f9:11:2f:b5:55:dd:29:61:c7:e1:19:5c:
         07:81:fa:fd:0c:20:40:45:97:3a:84:f6:d2:2f:7a:10:d1:92:
         ad:16:2c:78:1b:9b:4a:2d:6b:bd:d8:ae:2d:76:80:ca:7e:47:
         91:1f:de:4b:95:ff:43:e4:83:86:ab:5e:6b:18:f6:85:83:33:
         a5:b2:85:ba:7f:57:d1:59:4b:34:db:95:b4:e4:9b:06:4c:79:
         2b:68:bc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:44 2026 by rpki-client