Route Origin Authorization

$ rpki-client -vvf k05.pp-rpki.athene-center.net/repo/k05-rpki-athene-center/0/3135382e3232302e3133342e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3133342e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          Qw4djtNtKgoPeBRwrF/2ZlF9/HVU6wpf5SqfQgGYlwU=
Subject key identifier:   CB:67:4A:0A:B0:35:88:47:36:90:01:06:27:54:E1:9E:59:93:88:3F
Certificate issuer:       /CN=1BBA925FE70B88DC24209C87E9C411D39F80F6F2
Certificate serial:       585D8CBB3AB4ABE884C01767FDEEBBB24A423689
Authority key identifier: 1B:BA:92:5F:E7:0B:88:DC:24:20:9C:87:E9:C4:11:D3:9F:80:F6:F2
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/1BBA925FE70B88DC24209C87E9C411D39F80F6F2.cer
Subject info access:      rsync://k05.pp-rpki.athene-center.net/repo/k05-rpki-athene-center/0/3135382e3232302e3133342e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:18:13 +0000
ROA not before:           Fri 22 Mar 2024 10:13:13 +0000
ROA not after:            Fri 21 Mar 2025 10:18:13 +0000
asID:                     208162
IP address blocks:        158.220.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5d:8c:bb:3a:b4:ab:e8:84:c0:17:67:fd:ee:bb:b2:4a:42:36:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BBA925FE70B88DC24209C87E9C411D39F80F6F2
        Validity
            Not Before: Mar 22 10:13:13 2024 GMT
            Not After : Mar 21 10:18:13 2025 GMT
        Subject: CN=CB674A0AB0358847369001062754E19E5993883F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:db:7a:4b:03:a6:0c:96:d1:c6:c7:1e:f8:df:
                    d4:b4:cb:34:6a:60:f4:4f:90:b1:5a:5e:b9:3b:37:
                    aa:b2:35:ec:e4:fe:0f:9c:c1:5f:0f:4a:08:5e:8e:
                    94:55:d1:29:e0:bc:13:1f:5b:11:94:6f:ab:e5:95:
                    da:1a:5c:e0:31:26:76:ab:f8:69:28:5f:64:fa:3c:
                    c2:a9:f5:bb:8f:73:d4:f3:87:14:9d:8e:80:9b:63:
                    63:44:ae:7a:8a:23:f4:c2:9d:ea:77:70:a0:ae:ea:
                    ee:06:c3:20:17:fb:cb:a8:3a:8e:4c:ce:c0:e4:b9:
                    41:31:76:19:c0:5d:7b:d0:6b:6c:f7:66:ef:b3:a8:
                    ed:05:33:ad:57:d7:9c:86:e4:7a:30:8c:a6:b6:f0:
                    c3:22:0f:de:51:61:94:60:73:29:82:ef:75:a0:9f:
                    01:cb:1a:e4:93:4a:3a:2c:59:e6:06:5b:6d:f0:e8:
                    d8:31:85:82:ee:bc:4c:99:9e:08:3e:f8:05:81:64:
                    b9:b4:40:07:11:a5:d7:46:07:64:d8:d2:8d:ed:f3:
                    3b:a7:a5:52:70:5f:ab:3b:9d:13:5e:28:f6:fc:ed:
                    a9:da:9f:28:d7:94:ba:76:c4:d6:23:72:2b:ec:93:
                    7e:96:82:cb:bc:ee:14:5c:4e:2f:f5:7c:05:29:f9:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:67:4A:0A:B0:35:88:47:36:90:01:06:27:54:E1:9E:59:93:88:3F
            X509v3 Authority Key Identifier:
                keyid:1B:BA:92:5F:E7:0B:88:DC:24:20:9C:87:E9:C4:11:D3:9F:80:F6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k05.pp-rpki.athene-center.net/repo/k05-rpki-athene-center/0/1BBA925FE70B88DC24209C87E9C411D39F80F6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/1BBA925FE70B88DC24209C87E9C411D39F80F6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://k05.pp-rpki.athene-center.net/repo/k05-rpki-athene-center/0/3135382e3232302e3133342e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:38:97:19:7d:eb:08:46:9c:e9:6c:98:69:82:61:b7:7a:7a:
         fa:60:c7:76:46:88:02:28:3e:4d:b5:8a:22:60:8b:ba:19:c1:
         ad:16:a6:67:1c:6d:40:c7:b4:1d:8c:c1:31:b5:c7:4c:7a:77:
         fb:d7:1d:c1:33:f6:cb:1a:9b:21:de:bb:ba:62:69:74:c7:a0:
         90:d1:bb:27:7d:2f:19:01:fd:9f:7a:dd:9f:71:7b:67:2b:ae:
         48:3d:9b:71:b8:e4:60:86:d5:c7:f2:6a:9b:20:01:f5:a4:6d:
         ac:d1:30:95:a7:7b:39:12:05:d2:e8:8a:e8:32:97:a1:64:49:
         dd:6f:0a:cf:93:7a:da:ae:6b:98:3e:e6:6a:93:a3:5c:93:bf:
         67:1c:c0:41:08:15:23:b3:65:fe:1d:0b:7e:a5:b8:54:ad:a4:
         8c:03:98:c0:bc:17:fb:05:0d:b6:0c:4c:77:07:1d:41:bb:38:
         09:9e:c0:b8:8b:0f:cc:48:82:ce:fd:fa:6a:cd:51:f4:bd:99:
         4f:d7:8a:a8:ca:c4:85:9e:81:9d:ee:b9:e5:1c:f1:6e:6b:49:
         ff:68:d2:86:51:be:a1:1f:56:2e:1a:f8:8a:ac:fe:d1:e0:5a:
         78:15:b5:7a:f8:ba:dc:51:82:9c:4e:46:b2:16:6f:84:75:3c:
         21:7f:e1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 22:50:51 2024 by rpki-client on console-ams.rpki-client.org