Route Origin Authorization

$ rpki-client -vvf k03.rrdp-rpki.athene-center.net/repo/k03-rpki-athene-center/0/3135382e3232302e3133322e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3133322e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          /KZcOAUdWIf0/v6QwdUuaBQkdoJb82/ATT3q0IvKtfw=
Subject key identifier:   17:9A:20:43:CD:09:AC:29:E9:CA:94:3F:FD:F1:10:99:3A:FB:BA:CA
Certificate issuer:       /CN=6DD1884F0507B76265C0F9BAAF1C0D60116D8C18
Certificate serial:       4CC4FD4EF7AE8BA9793313B02F13C4FD603708ED
Authority key identifier: 6D:D1:88:4F:05:07:B7:62:65:C0:F9:BA:AF:1C:0D:60:11:6D:8C:18
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/6DD1884F0507B76265C0F9BAAF1C0D60116D8C18.cer
Subject info access:      rsync://k03.rrdp-rpki.athene-center.net/repo/k03-rpki-athene-center/0/3135382e3232302e3133322e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:38:17 +0000
ROA not before:           Wed 27 Mar 2024 19:33:17 +0000
ROA not after:            Wed 26 Mar 2025 19:38:17 +0000
asID:                     208162
IP address blocks:        158.220.132.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c4:fd:4e:f7:ae:8b:a9:79:33:13:b0:2f:13:c4:fd:60:37:08:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DD1884F0507B76265C0F9BAAF1C0D60116D8C18
        Validity
            Not Before: Mar 27 19:33:17 2024 GMT
            Not After : Mar 26 19:38:17 2025 GMT
        Subject: CN=179A2043CD09AC29E9CA943FFDF110993AFBBACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0e:bd:e9:2d:54:3e:37:7a:95:bc:43:d6:d3:
                    24:03:1e:55:a6:3b:58:81:0f:9a:49:3e:2d:46:ce:
                    4e:b5:51:ed:75:9c:3b:f6:8f:eb:c9:7c:30:97:c2:
                    93:00:8e:b6:d3:cb:d8:9a:f7:e8:8f:60:72:97:83:
                    bf:46:01:d7:e0:95:3c:1a:41:13:8e:82:47:8c:49:
                    71:07:2f:14:4c:b6:70:54:61:1d:5f:06:00:1c:25:
                    3b:12:43:59:b3:0f:06:b4:73:85:57:00:da:4e:7a:
                    e5:fa:be:30:57:ac:5f:37:d6:a2:2c:0a:47:7a:ff:
                    3f:bb:40:9d:61:58:8f:6a:99:1c:d4:77:01:a7:41:
                    4c:99:5b:7d:70:55:85:75:bc:34:89:bc:ee:b7:8c:
                    de:0a:2f:1c:3d:76:f7:42:3d:23:27:23:1f:9d:46:
                    e4:84:34:a0:7a:87:a6:05:b0:cd:32:cc:57:f3:a5:
                    15:e8:33:5f:80:cb:4f:80:d5:0e:15:97:6c:07:6d:
                    f6:ed:fa:f3:2b:c3:8c:29:6b:20:ec:66:d8:73:31:
                    9a:42:45:2a:6e:ea:ba:f2:5d:07:ba:3a:38:90:2e:
                    af:e8:bb:56:0d:19:59:20:e5:51:b5:23:80:17:6d:
                    7c:f4:0c:52:ac:e5:22:f0:40:2b:d4:2f:59:c7:11:
                    75:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9A:20:43:CD:09:AC:29:E9:CA:94:3F:FD:F1:10:99:3A:FB:BA:CA
            X509v3 Authority Key Identifier:
                keyid:6D:D1:88:4F:05:07:B7:62:65:C0:F9:BA:AF:1C:0D:60:11:6D:8C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k03.rrdp-rpki.athene-center.net/repo/k03-rpki-athene-center/0/6DD1884F0507B76265C0F9BAAF1C0D60116D8C18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/6DD1884F0507B76265C0F9BAAF1C0D60116D8C18.cer

            Subject Information Access:
                Signed Object - URI:rsync://k03.rrdp-rpki.athene-center.net/repo/k03-rpki-athene-center/0/3135382e3232302e3133322e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ba:75:7a:ab:37:11:d5:5e:eb:74:3f:34:97:9a:66:e3:8e:
         84:55:4d:17:a5:6c:45:f3:10:5d:97:43:e8:21:20:17:1b:70:
         5f:7e:22:e8:bb:4a:1e:b1:2a:fc:d9:d9:2a:51:a7:02:b4:af:
         af:97:92:d4:bb:e6:f2:b6:85:a5:a2:fb:f4:f8:94:10:be:df:
         a2:04:b0:cb:94:84:5f:93:5d:8a:26:7a:2d:f5:ea:a4:8f:99:
         a0:8b:2a:bc:e3:04:64:5d:2a:fc:1c:07:85:f6:f5:6f:9c:7d:
         a4:41:77:33:e0:3f:7d:91:02:af:3a:3c:3a:b5:5b:72:70:27:
         98:37:ed:28:12:a2:e9:4f:b2:60:c0:2d:ce:fc:f5:40:f3:eb:
         b6:0d:76:71:b8:ab:7b:7a:65:c5:44:b6:4e:c5:a1:93:55:07:
         69:e0:c4:bc:53:8c:c2:44:5a:24:d1:c8:fa:bd:58:42:e0:c9:
         27:fd:b8:78:ef:84:53:a9:72:06:b9:9a:9f:ad:eb:bb:72:10:
         b5:76:30:9e:9f:5f:e8:6b:32:b7:3e:00:85:85:96:1f:9d:cc:
         79:fd:4f:72:fa:fc:1f:24:77:1d:da:87:22:71:c2:d6:7c:df:
         cd:64:42:64:5c:ff:ff:26:4a:74:23:d7:90:36:85:eb:22:f1:
         4a:10:43:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 01:06:46 2024 by rpki-client on console-ams.rpki-client.org