Route Origin Authorization

$ rpki-client -vvf k02.pp-rpki.athene-center.net/repo/k02-rpki-athene-center/0/3135382e3232302e3133312e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3133312e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          1rk8VNIkHYQP3sw1RLMolkLNsnEw15aU1clG38//9e0=
Subject key identifier:   00:21:5C:F9:75:93:7C:9A:78:24:F9:62:6D:09:D9:EB:41:E5:BC:DF
Certificate issuer:       /CN=B47F809271A7A123646C5ADFF023CF855C9BE5E4
Certificate serial:       2DCDA9E70C9972BC1559B7171B780888E9452B8C
Authority key identifier: B4:7F:80:92:71:A7:A1:23:64:6C:5A:DF:F0:23:CF:85:5C:9B:E5:E4
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/B47F809271A7A123646C5ADFF023CF855C9BE5E4.cer
Subject info access:      rsync://k02.pp-rpki.athene-center.net/repo/k02-rpki-athene-center/0/3135382e3232302e3133312e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:17:40 +0000
ROA not before:           Fri 22 Mar 2024 10:12:40 +0000
ROA not after:            Fri 21 Mar 2025 10:17:40 +0000
asID:                     208162
IP address blocks:        158.220.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:cd:a9:e7:0c:99:72:bc:15:59:b7:17:1b:78:08:88:e9:45:2b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47F809271A7A123646C5ADFF023CF855C9BE5E4
        Validity
            Not Before: Mar 22 10:12:40 2024 GMT
            Not After : Mar 21 10:17:40 2025 GMT
        Subject: CN=00215CF975937C9A7824F9626D09D9EB41E5BCDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:34:c3:6d:8b:ee:3b:56:88:6c:80:30:93:
                    72:1b:7e:a7:89:e6:2d:48:8e:10:b0:6e:d1:8f:71:
                    98:ea:be:6e:9b:18:ba:b8:d0:7f:c6:c6:27:50:e3:
                    91:6e:ca:2a:45:9b:09:c2:8b:25:8f:ca:9a:ff:da:
                    6f:e4:8f:00:78:bb:a3:7a:e7:f9:38:b0:74:c6:d1:
                    7a:c1:41:37:84:e5:99:df:7a:80:28:9c:9b:68:dd:
                    5a:c3:05:d7:5a:2a:e3:4e:8f:cf:e7:41:c5:5f:62:
                    39:ea:a2:5c:f5:38:4b:e0:c0:95:ec:05:c5:ec:73:
                    34:9a:85:31:2f:e0:66:d1:4c:3c:fb:8d:d7:79:88:
                    93:9a:cf:d9:ca:19:10:a8:20:18:bd:4c:8b:6d:90:
                    47:fc:e5:6f:60:65:19:d4:52:87:20:dc:f1:49:b0:
                    78:56:9e:8b:6a:82:0b:ec:17:09:ba:29:bd:31:7a:
                    3a:b2:a5:ac:d8:16:3a:c4:e0:f2:d7:31:3b:41:44:
                    1e:f1:48:dc:ff:b6:72:40:38:1a:4c:ef:ee:4a:0b:
                    f6:8b:85:9a:cc:55:e5:69:8d:9a:1c:65:97:19:22:
                    59:4d:8e:f4:3b:81:08:a7:55:31:eb:1c:03:2c:7a:
                    0f:52:6b:e4:d5:84:46:1f:58:38:53:97:36:ec:d2:
                    f1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:21:5C:F9:75:93:7C:9A:78:24:F9:62:6D:09:D9:EB:41:E5:BC:DF
            X509v3 Authority Key Identifier:
                keyid:B4:7F:80:92:71:A7:A1:23:64:6C:5A:DF:F0:23:CF:85:5C:9B:E5:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k02.pp-rpki.athene-center.net/repo/k02-rpki-athene-center/0/B47F809271A7A123646C5ADFF023CF855C9BE5E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/B47F809271A7A123646C5ADFF023CF855C9BE5E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://k02.pp-rpki.athene-center.net/repo/k02-rpki-athene-center/0/3135382e3232302e3133312e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:e9:94:24:29:c6:03:fc:dd:ec:b3:34:55:b0:57:38:c2:d8:
         de:38:39:e2:f3:cd:41:14:50:68:4b:c9:1c:70:2e:b9:0e:36:
         1b:54:bb:04:7c:82:50:5c:c6:b6:8e:57:97:79:5a:51:20:fe:
         81:a5:95:27:52:52:db:7b:b7:a3:09:cd:a7:c2:5c:c1:51:a5:
         9f:4d:61:84:cf:82:d7:43:00:27:7c:5b:6a:39:f7:f2:ee:6c:
         28:e3:0c:93:67:06:4b:ee:28:ac:14:a5:e7:31:b6:1e:b1:8c:
         5e:0f:cb:c7:4b:a1:ac:89:c6:0e:0f:66:99:b7:b7:25:2c:34:
         42:d1:b2:0a:d2:ac:1b:00:24:97:98:5e:39:85:c2:cc:6c:ab:
         44:7b:b0:f4:cd:05:75:bb:e6:c7:51:67:2e:5f:4a:47:5d:97:
         99:bd:9e:2a:1f:77:f5:71:fd:1a:f3:96:07:1e:b3:f0:69:db:
         1c:5d:1c:c4:10:dc:83:e2:68:83:24:9a:66:a5:85:19:6e:e0:
         a2:b7:66:d2:cf:24:01:10:37:a5:dd:9e:32:96:c7:96:d1:52:
         a3:0a:26:20:a3:7d:cd:de:6f:91:52:a8:01:96:0b:3f:09:47:
         6c:b4:3b:ef:d6:32:5a:65:64:f3:ae:ce:8a:30:db:ab:53:7a:
         a1:ca:57:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org