Route Origin Authorization

$ rpki-client -vvf k05.rrdp-rpki.athene-center.net/repo/k05-rpki-athene-center/0/3135382e3232302e3133342e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3133342e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          zGvvL92tKwK3Evb3nBXm4T2/LM8ESzp4wjYhfd4Od3s=
Subject key identifier:   3E:13:81:06:7C:22:72:3E:6E:0E:4C:5F:03:79:37:0D:84:5D:65:83
Certificate issuer:       /CN=4F5008B7628318E6F25209FA47B9EA0427D9E017
Certificate serial:       348DBF35DDD42BF674DEEF4246F2E989A964CF17
Authority key identifier: 4F:50:08:B7:62:83:18:E6:F2:52:09:FA:47:B9:EA:04:27:D9:E0:17
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/4F5008B7628318E6F25209FA47B9EA0427D9E017.cer
Subject info access:      rsync://k05.rrdp-rpki.athene-center.net/repo/k05-rpki-athene-center/0/3135382e3232302e3133342e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:38:40 +0000
ROA not before:           Wed 27 Mar 2024 19:33:40 +0000
ROA not after:            Wed 26 Mar 2025 19:38:40 +0000
asID:                     208162
IP address blocks:        158.220.134.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8d:bf:35:dd:d4:2b:f6:74:de:ef:42:46:f2:e9:89:a9:64:cf:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F5008B7628318E6F25209FA47B9EA0427D9E017
        Validity
            Not Before: Mar 27 19:33:40 2024 GMT
            Not After : Mar 26 19:38:40 2025 GMT
        Subject: CN=3E1381067C22723E6E0E4C5F0379370D845D6583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f2:18:1e:79:f4:aa:71:1d:8f:fb:d8:00:db:
                    7a:ef:d8:3d:0f:4e:dc:fe:96:14:7d:78:ba:26:54:
                    28:fc:da:f6:d1:37:94:68:7e:46:d4:45:1b:1a:40:
                    e4:ea:0e:11:cd:41:09:bb:a6:dd:fa:e8:ab:a2:7d:
                    62:fd:eb:e9:fa:a5:17:07:02:55:09:22:fe:bb:c2:
                    7a:76:0f:19:05:52:68:38:64:ef:55:4c:a4:16:7e:
                    d1:1e:46:3d:55:8e:e3:c3:8d:66:51:20:09:7c:86:
                    02:8e:d0:2f:39:18:df:f0:2e:45:30:7e:e1:f3:c7:
                    ae:15:0d:23:b5:98:18:71:66:9c:51:b3:2d:6c:8b:
                    c7:82:af:0f:25:de:03:a8:de:4a:e1:58:61:9a:37:
                    0a:68:74:8e:0e:6b:c5:b9:08:c8:58:92:3c:80:f0:
                    03:ba:43:b6:2b:59:27:12:9d:be:cb:6a:19:3e:0b:
                    b5:4a:50:aa:35:21:9a:52:55:28:c2:7d:1b:05:f7:
                    a1:2a:65:d1:2d:08:d5:66:a4:d4:dd:d7:0c:0f:36:
                    9a:5a:7c:e8:7f:21:40:a9:4c:a6:b3:f5:aa:bc:a4:
                    76:0e:4b:b1:bc:b1:0b:e1:ec:08:fc:49:bc:3e:ec:
                    78:dd:43:1f:13:34:f4:9f:f8:25:7c:e1:79:2c:db:
                    0e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:13:81:06:7C:22:72:3E:6E:0E:4C:5F:03:79:37:0D:84:5D:65:83
            X509v3 Authority Key Identifier:
                keyid:4F:50:08:B7:62:83:18:E6:F2:52:09:FA:47:B9:EA:04:27:D9:E0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k05.rrdp-rpki.athene-center.net/repo/k05-rpki-athene-center/0/4F5008B7628318E6F25209FA47B9EA0427D9E017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/4F5008B7628318E6F25209FA47B9EA0427D9E017.cer

            Subject Information Access:
                Signed Object - URI:rsync://k05.rrdp-rpki.athene-center.net/repo/k05-rpki-athene-center/0/3135382e3232302e3133342e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:47:1d:a6:8b:38:7f:70:5f:aa:e2:03:fa:4f:86:bf:04:1d:
         46:38:2b:d5:8b:5b:1c:75:74:20:aa:5c:86:78:49:d7:b5:ea:
         7a:b1:87:fd:de:4d:79:52:4a:0f:91:f7:5c:ca:2b:1a:a6:da:
         0e:1f:5a:f6:c3:32:b9:4b:4a:5a:34:cc:f4:f7:02:45:bd:f7:
         43:f4:60:f6:2d:28:46:10:0d:54:f8:cb:8d:4a:91:d6:5f:3f:
         e4:6f:5c:05:e6:a3:0d:e1:03:4b:c3:0b:ad:7c:c5:3b:45:d8:
         eb:73:58:79:b3:fb:db:bf:cf:94:89:8b:39:8c:7c:da:95:30:
         ee:f9:02:01:fe:f5:82:53:97:e0:25:5f:41:88:23:9a:da:69:
         b8:a0:13:de:14:44:8f:f0:dd:53:cb:c1:ac:00:09:65:1e:d1:
         4e:70:37:94:bd:3e:d2:00:b0:95:f4:9d:4d:72:3c:b7:c7:2c:
         b1:17:b6:c2:93:4e:6e:b4:87:bc:9a:ca:99:37:ae:3f:c2:62:
         90:12:66:4d:5d:3c:89:fc:1e:e5:b1:67:4e:41:51:7b:be:7e:
         78:1b:81:51:a7:24:36:91:46:a1:91:48:46:bb:e4:ed:38:2a:
         dd:b2:3b:fe:e2:d2:ca:69:d2:b0:42:36:79:ca:e5:42:c1:76:
         a9:5f:89:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 23:24:03 2024 by rpki-client on console-ams.rpki-client.org