Route Origin Authorization

$ rpki-client -vvf k17.rrdp-rpki.athene-center.net/repo/k17-rpki-athene-center/0/3135382e3232302e3134362e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3134362e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          8xI+bAqaJ+OoQ37Vl2Rmvd7So6ZJ+zF21lAyEjJY5Ns=
Subject key identifier:   FC:C4:67:D8:3A:90:3D:22:13:FB:BF:6C:54:D1:8F:10:78:8D:3F:6A
Certificate issuer:       /CN=E6EE2AA55865EA943ED945B512106209596081DF
Certificate serial:       062CC4FD472E122A10A05A02B537D8B5D8C0BDE5
Authority key identifier: E6:EE:2A:A5:58:65:EA:94:3E:D9:45:B5:12:10:62:09:59:60:81:DF
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/E6EE2AA55865EA943ED945B512106209596081DF.cer
Subject info access:      rsync://k17.rrdp-rpki.athene-center.net/repo/k17-rpki-athene-center/0/3135382e3232302e3134362e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:40:55 +0000
ROA not before:           Wed 27 Mar 2024 19:35:55 +0000
ROA not after:            Wed 26 Mar 2025 19:40:55 +0000
asID:                     208162
IP address blocks:        158.220.146.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2c:c4:fd:47:2e:12:2a:10:a0:5a:02:b5:37:d8:b5:d8:c0:bd:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EE2AA55865EA943ED945B512106209596081DF
        Validity
            Not Before: Mar 27 19:35:55 2024 GMT
            Not After : Mar 26 19:40:55 2025 GMT
        Subject: CN=FCC467D83A903D2213FBBF6C54D18F10788D3F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:25:41:94:10:cc:e6:ec:77:ad:9d:fb:e9:7a:
                    a9:ae:17:d5:60:f0:a3:e5:01:b1:37:34:f8:e7:ee:
                    d9:a8:d4:80:7c:bd:bf:4a:c5:99:23:c5:46:dc:09:
                    b8:a8:7a:2f:d1:a6:39:3e:55:9e:78:8b:f0:c7:cd:
                    e6:f7:8d:dd:2f:78:c5:5c:b8:f6:6f:44:63:3a:11:
                    97:1e:0f:ec:d7:e3:1b:aa:4c:d9:e7:e9:73:98:64:
                    8a:69:dc:c4:4a:f2:dc:23:86:e2:90:66:0d:43:e1:
                    a1:62:2a:84:9e:f7:d3:db:66:d9:a7:ed:c6:b2:2d:
                    e5:fc:5d:bc:1a:f9:08:48:6b:5e:f2:d6:68:0e:14:
                    25:2f:da:c3:4e:f4:31:19:7e:e6:71:6e:a6:55:6d:
                    e0:3c:12:d1:8c:8e:2f:00:69:a6:b2:57:aa:4a:ab:
                    7b:de:66:bb:32:9b:9d:de:8b:81:a5:3a:5d:2b:98:
                    e9:c9:57:95:eb:7a:7a:63:bf:4f:28:f4:ea:57:d4:
                    30:76:8e:af:8d:87:39:50:78:40:cb:d9:f4:90:0b:
                    e0:86:cb:ef:a9:44:3b:47:3b:2e:a4:89:35:da:eb:
                    d8:46:7d:aa:f4:7d:53:da:fa:de:aa:9d:8e:5e:33:
                    86:d8:a2:c6:fa:a9:d0:7c:32:1b:eb:c0:ae:f5:82:
                    08:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C4:67:D8:3A:90:3D:22:13:FB:BF:6C:54:D1:8F:10:78:8D:3F:6A
            X509v3 Authority Key Identifier:
                keyid:E6:EE:2A:A5:58:65:EA:94:3E:D9:45:B5:12:10:62:09:59:60:81:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k17.rrdp-rpki.athene-center.net/repo/k17-rpki-athene-center/0/E6EE2AA55865EA943ED945B512106209596081DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/E6EE2AA55865EA943ED945B512106209596081DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://k17.rrdp-rpki.athene-center.net/repo/k17-rpki-athene-center/0/3135382e3232302e3134362e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:d1:43:54:77:97:b9:a4:d3:8e:60:4f:b7:ea:e4:84:53:61:
         27:94:35:b0:cb:a6:dc:2e:d3:4d:e1:7f:f5:da:3b:4c:f6:9f:
         40:5f:91:eb:79:73:63:7d:50:ac:8c:e0:10:c1:11:32:6a:e7:
         d4:38:f3:70:17:83:ec:86:44:7a:28:4c:0b:b4:9e:1a:32:57:
         fe:b3:fd:19:69:68:5a:08:a1:bb:3d:fe:2e:c6:4b:1d:a3:6d:
         e7:a4:43:15:c2:c5:2f:2a:cc:94:8d:17:d7:21:ee:5d:70:42:
         ac:3f:3e:e7:54:db:ad:a0:fa:9d:83:ae:56:27:eb:fd:02:a5:
         87:c7:2e:50:5d:27:29:97:13:73:e3:a7:8e:59:ae:cc:45:0e:
         4e:93:e4:a0:ab:12:31:78:4c:46:3f:cf:40:16:16:9c:77:fa:
         36:aa:2e:64:0c:13:6f:4e:e3:10:39:82:0f:8a:94:8b:3e:27:
         2a:07:b0:d1:64:84:48:8b:60:d1:a2:82:4e:c6:e2:c8:10:6a:
         96:5c:8a:8f:e1:d8:b5:a2:e3:f3:79:b6:7b:31:97:5d:e8:d5:
         8d:4b:f3:68:00:3d:b6:45:5f:33:cd:7c:eb:5e:0d:2e:2a:c3:
         99:df:a9:53:38:a2:b3:1b:af:7e:c1:d9:35:4b:cb:e0:e9:80:
         43:25:8e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 19:36:02 2024 by rpki-client on console-ams.rpki-client.org