Route Origin Authorization

$ rpki-client -vvf k02.rrdp-rpki.athene-center.net/repo/k02-rpki-athene-center/0/3135382e3232302e3133312e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3133312e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          wW4WQp0fVm3LJGtO2/iSri5nXgnIh7yuZa7WcslBtWw=
Subject key identifier:   55:7D:EC:17:06:07:FB:EC:48:56:9A:83:8F:23:1E:74:AA:A2:01:EB
Certificate issuer:       /CN=BEE0201408FC136FDDA8BC4AF8BA8F37BCE2C90A
Certificate serial:       6A7F72C783405B57F04F8ABC870115487C98D43C
Authority key identifier: BE:E0:20:14:08:FC:13:6F:DD:A8:BC:4A:F8:BA:8F:37:BC:E2:C9:0A
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/BEE0201408FC136FDDA8BC4AF8BA8F37BCE2C90A.cer
Subject info access:      rsync://k02.rrdp-rpki.athene-center.net/repo/k02-rpki-athene-center/0/3135382e3232302e3133312e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:38:06 +0000
ROA not before:           Wed 27 Mar 2024 19:33:06 +0000
ROA not after:            Wed 26 Mar 2025 19:38:06 +0000
asID:                     208162
IP address blocks:        158.220.131.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:7f:72:c7:83:40:5b:57:f0:4f:8a:bc:87:01:15:48:7c:98:d4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEE0201408FC136FDDA8BC4AF8BA8F37BCE2C90A
        Validity
            Not Before: Mar 27 19:33:06 2024 GMT
            Not After : Mar 26 19:38:06 2025 GMT
        Subject: CN=557DEC170607FBEC48569A838F231E74AAA201EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:46:56:8f:59:f3:85:2d:82:ce:e4:fb:86:
                    fe:5e:55:d4:3f:02:24:cf:6c:43:00:5f:9c:8d:64:
                    0c:c8:4e:39:17:be:37:da:d0:2f:5d:b0:4c:61:bb:
                    39:4a:fa:88:24:8e:05:07:30:41:45:52:90:a3:eb:
                    67:07:99:87:83:79:a1:ed:c3:5a:85:8e:ee:a5:cc:
                    94:d2:6a:27:14:ff:5e:0c:e4:d4:40:47:9d:cf:2f:
                    21:a6:0b:28:94:2c:c8:bb:75:5b:86:6e:75:68:0b:
                    80:65:73:cf:d4:6a:b4:73:75:28:cc:78:27:82:45:
                    ea:32:b6:e0:5c:0b:cd:15:18:40:dc:63:ef:26:02:
                    0d:52:73:b7:08:77:6b:c4:f7:d0:9f:9f:93:86:4d:
                    13:57:21:49:33:52:04:37:91:eb:72:6a:14:25:a5:
                    c5:92:6c:11:b2:52:a3:af:af:21:4f:0a:ac:38:cb:
                    46:12:be:88:84:d2:f6:4e:03:c4:33:dd:90:ec:60:
                    88:92:8a:15:e4:62:34:7b:56:22:fa:8e:fb:e2:d2:
                    57:59:a9:c2:54:40:14:1c:65:0a:06:ce:64:11:26:
                    50:d3:fa:6d:28:94:c1:d3:d1:50:1a:03:84:52:42:
                    bc:28:be:fd:ab:96:7d:42:83:42:51:e5:97:b0:a6:
                    9a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7D:EC:17:06:07:FB:EC:48:56:9A:83:8F:23:1E:74:AA:A2:01:EB
            X509v3 Authority Key Identifier:
                keyid:BE:E0:20:14:08:FC:13:6F:DD:A8:BC:4A:F8:BA:8F:37:BC:E2:C9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k02.rrdp-rpki.athene-center.net/repo/k02-rpki-athene-center/0/BEE0201408FC136FDDA8BC4AF8BA8F37BCE2C90A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/BEE0201408FC136FDDA8BC4AF8BA8F37BCE2C90A.cer

            Subject Information Access:
                Signed Object - URI:rsync://k02.rrdp-rpki.athene-center.net/repo/k02-rpki-athene-center/0/3135382e3232302e3133312e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:bd:69:82:00:41:bf:04:5a:12:1b:57:b4:42:df:44:83:6b:
         64:61:9f:d5:d3:b3:1d:57:af:0a:5c:86:2d:c8:2e:2a:6a:91:
         af:70:7f:82:0a:dc:84:a0:e3:50:6f:fa:ca:5c:da:b7:12:aa:
         11:24:64:8d:c2:44:a3:17:ff:b8:a3:7d:8c:69:8c:fd:02:f2:
         2a:48:92:4f:ff:bc:9e:d1:b0:8b:47:aa:2b:2f:39:5f:e6:50:
         6a:26:7c:3d:c9:81:fc:2d:2d:0c:45:7c:ac:6a:61:5e:1c:7b:
         34:2f:5b:bd:3e:3b:51:61:39:76:58:b3:bd:be:d7:5c:bc:2e:
         d4:97:79:af:9e:41:db:6c:35:25:04:29:14:55:5d:dd:b3:94:
         e9:da:5d:3a:f0:c7:a1:63:24:1a:3d:b7:23:70:f3:75:b9:65:
         28:38:96:d3:92:da:e9:ab:95:54:a0:85:97:17:6c:1a:15:0d:
         8a:24:b6:17:a6:db:e0:61:5e:f0:19:03:de:64:07:f1:80:c9:
         eb:72:dc:24:32:1d:9f:f0:7f:e9:14:b4:bb:63:c0:66:b7:97:
         0a:c2:00:59:2f:db:2f:aa:0f:9c:16:be:42:50:42:a9:bf:f3:
         53:32:8b:18:df:0f:47:98:29:bc:8c:85:86:34:18:3f:08:dd:
         26:15:33:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 23:24:03 2024 by rpki-client on console-ams.rpki-client.org