Route Origin Authorization

$ rpki-client -vvf k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/3135382e3232302e3132382e302f32342d3234203d3e20323132373935.roa
File:                     3135382e3232302e3132382e302f32342d3234203d3e20323132373935.roa (raw, json)
Hash identifier:          rJiWc/XqyJLbOO+ZsS7UYHY/dpCTV3Nerv5SVqoTVf0=
Subject key identifier:   6E:40:33:92:91:B0:FF:68:E6:16:CB:94:70:A4:2F:DF:A0:1F:32:45
Certificate issuer:       /CN=0B6700B7D5FF83936E2441D69F0E65D68BA388D6
Certificate serial:       29480010400A71BD6942928D624B54B0ED154F9A
Authority key identifier: 0B:67:00:B7:D5:FF:83:93:6E:24:41:D6:9F:0E:65:D6:8B:A3:88:D6
Authority info access:    rsync://rpki.athene-center.net/repo/rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.cer
Subject info access:      rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/3135382e3232302e3132382e302f32342d3234203d3e20323132373935.roa
Signing time:             Wed 27 Mar 2024 20:22:47 +0000
ROA not before:           Wed 27 Mar 2024 20:17:47 +0000
ROA not after:            Wed 26 Mar 2025 20:22:47 +0000
asID:                     212795
IP address blocks:        158.220.128.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:48:00:10:40:0a:71:bd:69:42:92:8d:62:4b:54:b0:ed:15:4f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B6700B7D5FF83936E2441D69F0E65D68BA388D6
        Validity
            Not Before: Mar 27 20:17:47 2024 GMT
            Not After : Mar 26 20:22:47 2025 GMT
        Subject: CN=6E40339291B0FF68E616CB9470A42FDFA01F3245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f2:ca:ca:35:16:30:06:01:b8:cc:45:bf:c2:
                    5d:00:96:65:a1:f6:e6:7c:5e:47:7b:99:e1:cb:15:
                    08:24:ad:f0:c9:1a:77:c6:cd:c8:16:e2:6d:f6:54:
                    ee:33:89:26:2e:5b:41:08:43:32:2c:02:ab:a7:e7:
                    dd:de:2a:df:f7:f0:2d:9f:c1:5b:b9:35:a2:bc:d2:
                    35:ee:b8:cc:a3:0e:7c:44:d2:52:b5:0f:e5:6b:2a:
                    fb:47:87:dd:07:86:dc:32:62:2e:8c:4e:86:59:f9:
                    59:6b:fc:e1:d9:58:1b:65:63:de:d6:78:d6:e4:55:
                    8f:fd:18:c9:67:df:b8:4a:a5:a3:fb:5b:84:08:98:
                    b6:55:5b:98:d6:34:2a:65:95:3c:35:f7:18:7a:0d:
                    ac:dd:0c:83:17:9c:df:3f:c2:ec:49:ec:86:71:56:
                    d0:aa:99:18:a2:26:f0:12:12:52:a9:dc:02:fa:79:
                    e8:3d:04:b2:7c:e5:1f:c4:2f:e4:76:bc:fb:82:21:
                    55:9e:30:61:1f:19:92:21:ee:db:e1:c4:39:62:0a:
                    d5:1a:b7:77:fd:37:8d:ad:2c:ae:5c:85:d1:83:60:
                    0b:d1:90:6a:20:76:17:f6:75:d4:60:6a:60:8a:d4:
                    43:4d:a1:7c:6d:89:ec:b2:7c:5c:b1:bc:84:48:40:
                    76:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:40:33:92:91:B0:FF:68:E6:16:CB:94:70:A4:2F:DF:A0:1F:32:45
            X509v3 Authority Key Identifier:
                keyid:0B:67:00:B7:D5:FF:83:93:6E:24:41:D6:9F:0E:65:D6:8B:A3:88:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/3135382e3232302e3132382e302f32342d3234203d3e20323132373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:7e:38:47:b2:0b:be:69:81:e7:5f:c4:39:01:f4:24:4a:43:
         8c:bd:e3:52:e4:b9:c4:a5:b7:38:c4:00:66:ed:a1:9d:5d:7a:
         b6:e2:eb:3d:86:be:b4:4f:7c:b7:55:82:3d:bf:77:da:1e:a9:
         d1:b9:2d:69:da:95:73:c2:41:bb:1b:f3:01:64:c2:86:9d:a5:
         25:85:6a:19:79:0c:fa:e7:5e:11:80:08:2d:0a:10:5d:bc:7f:
         10:32:e6:4e:0f:70:69:68:89:61:5a:4a:98:8b:37:ac:43:a5:
         b2:12:62:64:d9:94:e8:38:82:01:e0:29:6e:f0:2b:17:3f:37:
         5a:53:65:11:8f:91:f5:87:f5:9b:63:3f:c6:b7:ad:e1:8f:2d:
         7c:34:3d:5a:91:f8:0e:39:fa:60:5c:85:a4:76:da:e9:b4:6c:
         53:fb:2c:69:66:8a:16:41:0d:f1:57:bb:d1:de:a9:21:15:3c:
         54:a6:51:35:d3:66:2c:c3:ad:8c:eb:0f:4b:ab:8c:27:ca:1c:
         1d:c0:f2:3d:7f:19:ab:2c:2e:23:80:e7:6b:5e:64:38:4d:60:
         22:6c:5f:6f:d3:5b:66:47:71:26:5e:c7:dd:f8:6d:dd:3e:10:
         57:30:17:7b:94:0c:96:41:43:ba:01:e4:fc:52:63:3a:ee:1d:
         50:7a:58:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 02:11:39 2024 by rpki-client on console-ams.rpki-client.org