Route Origin Authorization

$ rpki-client -vvf k07.pp-rpki.athene-center.net/repo/k07-rpki-athene-center/0/3135382e3232302e3133362e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3133362e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          2t0E+GxKx7u3xtdS8dbfcfvxl2IL90dFXZNscGlAiAM=
Subject key identifier:   C1:6C:68:B8:F8:3A:DE:2B:CD:E8:8C:F7:41:6D:78:41:B0:B6:6C:6B
Certificate issuer:       /CN=EB05BCD9D09E4D06902CABBFFBD3F91A988ADAB9
Certificate serial:       1705D9D78F34E87781FFB8C8E36024C21DD00707
Authority key identifier: EB:05:BC:D9:D0:9E:4D:06:90:2C:AB:BF:FB:D3:F9:1A:98:8A:DA:B9
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/EB05BCD9D09E4D06902CABBFFBD3F91A988ADAB9.cer
Subject info access:      rsync://k07.pp-rpki.athene-center.net/repo/k07-rpki-athene-center/0/3135382e3232302e3133362e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:18:36 +0000
ROA not before:           Fri 22 Mar 2024 10:13:36 +0000
ROA not after:            Fri 21 Mar 2025 10:18:36 +0000
asID:                     208162
IP address blocks:        158.220.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:05:d9:d7:8f:34:e8:77:81:ff:b8:c8:e3:60:24:c2:1d:d0:07:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB05BCD9D09E4D06902CABBFFBD3F91A988ADAB9
        Validity
            Not Before: Mar 22 10:13:36 2024 GMT
            Not After : Mar 21 10:18:36 2025 GMT
        Subject: CN=C16C68B8F83ADE2BCDE88CF7416D7841B0B66C6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:97:6b:d0:27:54:32:21:99:95:9d:66:f9:
                    e6:3a:a7:65:f8:9a:f0:09:f6:5c:77:2f:2c:29:ea:
                    98:45:7c:1d:38:70:0c:79:6f:f4:c0:95:e3:47:d6:
                    5f:f0:d1:a2:18:66:44:b2:51:0f:04:48:c1:93:07:
                    44:a8:65:7a:76:30:c6:61:4f:84:d2:64:e9:e9:03:
                    42:93:02:0c:eb:48:ff:50:91:2a:18:ac:fe:ae:fe:
                    89:94:3c:9a:8e:1d:50:22:52:c2:87:2d:73:1f:de:
                    b2:2b:ea:b5:9d:b4:79:49:51:af:05:60:e1:2c:8e:
                    0e:0d:74:9b:87:d2:05:96:e3:d5:a8:f3:9a:e5:64:
                    0a:97:14:da:c3:f4:79:c9:ad:8c:07:1c:c9:6a:74:
                    59:23:a4:90:c4:83:8c:91:46:46:e1:44:b7:ab:db:
                    a6:d6:4f:67:3d:e6:a2:aa:2e:83:c1:ed:77:3c:e3:
                    7b:a0:25:50:35:df:e3:fa:f9:7c:cf:79:4b:38:aa:
                    78:7e:dd:97:b5:48:d5:4b:d4:cf:0a:c3:fd:29:68:
                    9d:21:6b:b1:7e:b3:2a:5c:f8:c5:8c:0d:30:1f:19:
                    96:af:1d:17:cd:2c:bd:f4:dd:3b:87:98:86:2e:aa:
                    ad:49:f8:b6:a2:e4:d0:26:7d:45:f6:06:f7:c8:9a:
                    19:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6C:68:B8:F8:3A:DE:2B:CD:E8:8C:F7:41:6D:78:41:B0:B6:6C:6B
            X509v3 Authority Key Identifier:
                keyid:EB:05:BC:D9:D0:9E:4D:06:90:2C:AB:BF:FB:D3:F9:1A:98:8A:DA:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k07.pp-rpki.athene-center.net/repo/k07-rpki-athene-center/0/EB05BCD9D09E4D06902CABBFFBD3F91A988ADAB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/EB05BCD9D09E4D06902CABBFFBD3F91A988ADAB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://k07.pp-rpki.athene-center.net/repo/k07-rpki-athene-center/0/3135382e3232302e3133362e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c9:13:62:ca:4e:9f:5b:e8:5e:72:fe:1e:5b:f6:e3:1a:c2:
         62:7d:57:e2:cc:dd:be:2d:eb:e5:ca:a3:a6:e6:57:0c:ac:f0:
         11:b6:cd:79:dc:b0:74:14:1d:25:39:4e:69:a9:47:61:b5:ff:
         90:4e:ee:10:ae:f2:1f:6b:f6:26:6c:98:88:e3:36:ad:61:57:
         11:80:07:e1:4b:0f:c8:12:d7:a2:e6:d7:53:a6:40:0e:d7:8d:
         81:53:18:08:00:7a:8c:94:25:e7:66:18:ee:1c:11:a4:a1:e2:
         cf:e0:ee:33:b0:96:8c:c3:9b:36:da:18:1b:07:83:2c:4e:ce:
         99:73:6e:5d:29:15:aa:d5:4f:80:58:1d:dd:24:24:a0:5e:2b:
         b2:b2:e6:77:c6:c0:37:a8:c2:e5:bc:28:84:c2:53:6c:37:5a:
         4e:43:6a:0b:3c:d0:b3:e1:a0:cf:de:82:92:03:29:ee:a3:f5:
         ef:2c:9a:bd:31:72:c5:a4:7f:82:82:25:85:c6:20:c2:c9:fc:
         5d:06:7f:05:9b:3d:c8:cb:e6:95:dc:aa:f6:f4:3d:19:9b:46:
         46:8d:15:44:8d:ca:25:ad:d1:e4:06:d8:6f:bd:b0:d7:88:e9:
         ec:be:7f:12:62:e4:53:69:a3:8f:4e:03:98:49:a4:74:6f:b8:
         b5:ea:7e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org