Route Origin Authorization

$ rpki-client -vvf k06.rrdp-rpki.athene-center.net/repo/k06-rpki-athene-center/0/3135382e3232302e3133352e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3133352e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          JKb6gEiP6ixEI7uxuccsv9PsuHRtwFOuH10woqA315E=
Subject key identifier:   2D:C7:53:43:C3:A4:15:87:F1:5B:F7:0C:90:3C:34:AE:7D:ED:24:F9
Certificate issuer:       /CN=23727ACA1AA3B1889696346342B9E505672642E0
Certificate serial:       40E204921F7C1A73EB5BD2A9A6727AB24BE45422
Authority key identifier: 23:72:7A:CA:1A:A3:B1:88:96:96:34:63:42:B9:E5:05:67:26:42:E0
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/23727ACA1AA3B1889696346342B9E505672642E0.cer
Subject info access:      rsync://k06.rrdp-rpki.athene-center.net/repo/k06-rpki-athene-center/0/3135382e3232302e3133352e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:38:51 +0000
ROA not before:           Wed 27 Mar 2024 19:33:51 +0000
ROA not after:            Wed 26 Mar 2025 19:38:51 +0000
asID:                     208162
IP address blocks:        158.220.135.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e2:04:92:1f:7c:1a:73:eb:5b:d2:a9:a6:72:7a:b2:4b:e4:54:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23727ACA1AA3B1889696346342B9E505672642E0
        Validity
            Not Before: Mar 27 19:33:51 2024 GMT
            Not After : Mar 26 19:38:51 2025 GMT
        Subject: CN=2DC75343C3A41587F15BF70C903C34AE7DED24F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c9:7b:9e:3c:f1:71:26:22:e1:6d:82:93:91:
                    71:9d:74:06:24:16:81:f0:27:b2:d3:82:c4:2f:bd:
                    b4:be:46:7f:12:79:f8:c9:5d:8f:8c:19:3b:06:6f:
                    3d:d1:0e:d1:af:42:1d:36:8f:9f:c5:6e:fa:46:27:
                    ba:7f:5d:9f:33:d4:45:28:9c:e7:c1:4e:c2:a9:79:
                    4c:f0:00:a8:26:56:b7:8a:30:f2:c4:02:b9:1a:ad:
                    f7:92:ad:8b:70:1c:54:c9:a1:19:f4:8f:87:af:66:
                    90:19:44:3c:88:51:23:67:e2:6d:2e:64:19:a1:7f:
                    e8:d0:19:14:5a:ee:36:1f:e7:02:c2:1e:79:b8:11:
                    fe:10:31:e2:7e:c7:ca:19:08:bb:ca:d1:2b:d1:97:
                    68:77:10:51:8b:dc:ca:68:4e:a9:49:88:40:f8:4b:
                    29:df:e0:9a:95:41:1f:f8:3f:a3:b4:23:1f:58:49:
                    9c:bf:41:5a:6d:7a:5d:ba:d6:1d:7c:e5:7b:81:b4:
                    b7:fb:3b:f4:4a:62:d9:ba:08:92:fa:11:04:9b:27:
                    a4:03:6b:45:a9:07:2d:d0:57:3b:ef:d3:5e:4b:a4:
                    57:e7:f9:3a:49:e1:1a:45:db:bb:d5:28:81:3c:cf:
                    d2:98:3d:f2:98:a6:b3:36:f9:e6:26:3e:14:cd:02:
                    3f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C7:53:43:C3:A4:15:87:F1:5B:F7:0C:90:3C:34:AE:7D:ED:24:F9
            X509v3 Authority Key Identifier:
                keyid:23:72:7A:CA:1A:A3:B1:88:96:96:34:63:42:B9:E5:05:67:26:42:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k06.rrdp-rpki.athene-center.net/repo/k06-rpki-athene-center/0/23727ACA1AA3B1889696346342B9E505672642E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/23727ACA1AA3B1889696346342B9E505672642E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://k06.rrdp-rpki.athene-center.net/repo/k06-rpki-athene-center/0/3135382e3232302e3133352e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:8d:5b:8a:48:45:4e:eb:9a:14:5a:0e:01:84:ca:37:f9:32:
         6c:17:68:05:f0:fc:dc:e5:e9:22:1d:5a:5b:90:eb:27:e1:d4:
         e2:56:4e:fa:07:d1:f5:a4:ab:b3:01:4f:40:86:8c:49:4b:05:
         f0:59:84:52:62:65:d7:86:d8:68:12:50:83:ed:df:eb:5b:73:
         c4:64:68:19:b4:df:eb:92:f6:fb:b4:5a:dd:d7:d8:e9:5c:a4:
         3f:1d:cb:a5:9c:d8:be:4c:47:c2:cb:24:c9:95:9c:2a:89:7d:
         66:94:03:e2:a8:08:e5:86:ac:84:a4:4d:7d:66:6d:ae:9b:ce:
         e4:95:4c:66:82:cd:96:64:4d:1e:00:cc:73:08:42:65:c4:71:
         ec:59:76:94:da:17:8e:31:36:55:68:c9:bb:59:56:d4:32:2c:
         90:b9:10:c5:bb:8e:8e:e4:c9:4b:a4:99:7d:d3:c7:77:5e:89:
         0f:ce:4d:54:6b:83:1d:85:13:76:e8:69:9c:6e:c8:cf:51:4c:
         fa:49:73:02:12:69:5e:c4:b7:20:82:8d:4e:60:cc:08:59:bd:
         d3:c7:de:4b:e3:95:27:52:95:36:8c:05:15:7d:88:cc:8d:fe:
         4e:98:5a:e8:0e:1b:1f:b4:ca:a2:37:24:ff:93:61:7f:ea:77:
         83:bf:44:90
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQOIEkh98GnPrW9KppnJ6skvkVCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3MjdBQ0ExQUEzQjE4ODk2OTYzNDYzNDJCOUU1MDU2
NzI2NDJFMDAeFw0yNDAzMjcxOTMzNTFaFw0yNTAzMjYxOTM4NTFaMDMxMTAvBgNV
BAMTKDJEQzc1MzQzQzNBNDE1ODdGMTVCRjcwQzkwM0MzNEFFN0RFRDI0RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRyXuePPFxJiLhbYKTkXGddAYk
FoHwJ7LTgsQvvbS+Rn8SefjJXY+MGTsGbz3RDtGvQh02j5/FbvpGJ7p/XZ8z1EUo
nOfBTsKpeUzwAKgmVreKMPLEArkarfeSrYtwHFTJoRn0j4evZpAZRDyIUSNn4m0u
ZBmhf+jQGRRa7jYf5wLCHnm4Ef4QMeJ+x8oZCLvK0SvRl2h3EFGL3MpoTqlJiED4
Synf4JqVQR/4P6O0Ix9YSZy/QVptel261h185XuBtLf7O/RKYtm6CJL6EQSbJ6QD
a0WpBy3QVzvv015LpFfn+TpJ4RpF27vVKIE8z9KYPfKYprM2+eYmPhTNAj9NAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQULcdTQ8OkFYfxW/cMkDw0rn3tJPkwHwYDVR0j
BBgwFoAUI3J6yhqjsYiWljRjQrnlBWcmQuAwDgYDVR0PAQH/BAQDAgeAMIGDBgNV
HR8EfDB6MHigdqB0hnJyc3luYzovL2swNi5ycmRwLXJwa2kuYXRoZW5lLWNlbnRl
ci5uZXQvcmVwby9rMDYtcnBraS1hdGhlbmUtY2VudGVyLzAvMjM3MjdBQ0ExQUEz
QjE4ODk2OTYzNDYzNDJCOUU1MDU2NzI2NDJFMC5jcmwwgZAGCCsGAQUFBwEBBIGD
MIGAMH4GCCsGAQUFBzAChnJyc3luYzovL2swMC5ycmRwLXJwa2kuYXRoZW5lLWNl
bnRlci5uZXQvcmVwby9rMDAtcnBraS1hdGhlbmUtY2VudGVyLzAvMjM3MjdBQ0Ex
QUEzQjE4ODk2OTYzNDYzNDJCOUU1MDU2NzI2NDJFMC5jZXIwgaQGCCsGAQUFBwEL
BIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vazA2LnJyZHAtcnBraS5hdGhl
bmUtY2VudGVyLm5ldC9yZXBvL2swNi1ycGtpLWF0aGVuZS1jZW50ZXIvMC8zMTM1
MzgyZTMyMzIzMDJlMzEzMzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM4
MzEzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAntyHMA0GCSqGSIb3DQEBCwUAA4IBAQBmjVuKSEVO
65oUWg4BhMo3+TJsF2gF8Pzc5ekiHVpbkOsn4dTiVk76B9H1pKuzAU9AhoxJSwXw
WYRSYmXXhthoElCD7d/rW3PEZGgZtN/rkvb7tFrd19jpXKQ/HculnNi+TEfCyyTJ
lZwqiX1mlAPiqAjlhqyEpE19Zm2um87klUxmgs2WZE0eAMxzCEJlxHHsWXaU2heO
MTZVaMm7WVbUMiyQuRDFu46O5MlLpJl908d3XokPzk1Ua4MdhRN26GmcbsjPUUz6
SXMCEmlexLcggo1OYMwIWb3Tx95L45UnUpU2jAUVfYjMjf5OmFroDhsftMqiNyT/
k2F/6neDv0SQ
-----END CERTIFICATE-----
Generated at Wed Apr 3 23:24:03 2024 by rpki-client on console-ams.rpki-client.org