Route Origin Authorization

$ rpki-client -vvf k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/3135382e3232302e3132392e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3132392e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          wo6pu1jvDsUYKu9J71Ay2wTSqkuUwl2doFWfeYvt/uA=
Subject key identifier:   A5:37:E6:29:C8:30:75:63:2E:D9:96:AE:98:60:3C:E9:71:D5:13:51
Certificate issuer:       /CN=0B6700B7D5FF83936E2441D69F0E65D68BA388D6
Certificate serial:       7E5494CB7DBB3B80D2A359C697926A8652E06E84
Authority key identifier: 0B:67:00:B7:D5:FF:83:93:6E:24:41:D6:9F:0E:65:D6:8B:A3:88:D6
Authority info access:    rsync://rpki.athene-center.net/repo/rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.cer
Subject info access:      rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/3135382e3232302e3132392e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 20:21:11 +0000
ROA not before:           Wed 27 Mar 2024 20:16:11 +0000
ROA not after:            Wed 26 Mar 2025 20:21:11 +0000
asID:                     208162
IP address blocks:        158.220.129.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:54:94:cb:7d:bb:3b:80:d2:a3:59:c6:97:92:6a:86:52:e0:6e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B6700B7D5FF83936E2441D69F0E65D68BA388D6
        Validity
            Not Before: Mar 27 20:16:11 2024 GMT
            Not After : Mar 26 20:21:11 2025 GMT
        Subject: CN=A537E629C83075632ED996AE98603CE971D51351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:48:ff:94:d7:b8:d6:91:80:3a:ca:2b:36:
                    ed:6e:68:39:84:d8:58:fe:a9:87:08:35:db:f8:f1:
                    3d:29:b7:8a:bc:2e:e9:63:24:e3:ab:58:94:61:fd:
                    5e:de:71:85:30:b3:5d:60:ba:e6:ae:5e:fb:ea:ff:
                    36:1f:3e:d0:0f:ad:49:2b:f8:00:0c:23:03:62:fc:
                    66:87:9b:53:67:a3:5e:9d:52:3c:0f:65:a0:0f:e8:
                    46:1f:5b:6a:43:6e:a5:8d:b0:21:36:9a:2b:91:6a:
                    be:4d:6e:2c:20:00:ff:4e:ba:f4:2f:63:ba:56:3a:
                    a5:02:d7:28:ec:31:48:5c:51:cf:31:13:73:a0:6e:
                    91:9d:7e:0e:bf:ab:05:96:e5:13:08:eb:98:80:79:
                    31:d3:93:70:9e:34:92:5f:ee:45:2f:48:e4:22:8b:
                    a7:22:99:65:0e:ec:b6:c3:b3:9a:07:05:84:56:88:
                    43:4d:39:e0:c2:cc:69:a4:7e:0d:5c:fa:a6:69:fc:
                    82:fe:fb:ac:2e:1a:c9:67:fe:54:cb:97:0e:5f:d8:
                    3b:6c:5a:1e:a5:58:10:3c:2c:d7:4c:b7:f4:a2:ea:
                    a8:f8:e1:fb:32:73:f5:d9:6c:e5:ce:d8:26:8d:79:
                    1b:c0:77:b4:8a:33:a3:68:e6:db:c0:be:db:58:09:
                    3a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:37:E6:29:C8:30:75:63:2E:D9:96:AE:98:60:3C:E9:71:D5:13:51
            X509v3 Authority Key Identifier:
                keyid:0B:67:00:B7:D5:FF:83:93:6E:24:41:D6:9F:0E:65:D6:8B:A3:88:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/3135382e3232302e3132392e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:27:b2:83:6c:3b:31:e5:9a:6b:05:fc:8f:f9:d3:63:63:7d:
         32:74:99:1e:6f:d3:d8:37:05:80:68:c6:0d:75:3f:9c:bf:43:
         4c:16:1d:8f:dc:83:61:ee:8d:1b:27:73:a0:ed:7f:a5:76:4b:
         ef:bd:2c:11:f1:2d:cc:73:eb:63:9a:2c:b6:f9:50:05:7a:6c:
         36:e3:92:67:e0:15:61:7c:14:8e:cf:6c:56:84:11:20:c3:32:
         98:a4:44:54:98:9b:ac:79:76:88:e1:d2:50:dd:fd:e6:b0:10:
         76:eb:7e:37:fe:15:1c:67:63:23:6a:f1:e8:01:c3:cf:76:51:
         82:07:04:1f:07:85:8a:35:16:46:63:61:10:bc:db:4c:61:2f:
         79:33:c0:5a:fd:92:5c:b8:da:d6:fd:d5:b2:d3:0f:ba:92:2d:
         b3:7e:a0:57:ae:c4:fd:47:89:96:25:59:9e:8c:91:3b:2d:0f:
         dd:b3:fe:5f:76:e1:ee:45:75:38:15:77:f9:23:c2:1d:6c:63:
         b8:61:04:18:c6:ce:4b:45:04:4b:92:48:16:26:6c:6a:21:59:
         28:c6:7e:5e:c4:bb:f6:8a:5a:cc:d1:cb:44:ac:f1:96:41:cb:
         5d:ea:69:35:c1:03:b6:76:17:d0:58:20:a9:36:28:95:ac:6c:
         67:37:71:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 02:11:39 2024 by rpki-client on console-ams.rpki-client.org