Route Origin Authorization

$ rpki-client -vvf k18.rrdp-rpki.athene-center.net/repo/k18-rpki-athene-center/0/3135382e3232302e3134372e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3134372e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          yFDP9fSaqjaCwpneC4bLAgB/mw9wcy24gjdJgUDEZWU=
Subject key identifier:   95:1F:36:10:E9:8B:C4:91:AE:07:D6:81:F6:42:23:EE:C0:E4:EF:FD
Certificate issuer:       /CN=EEABBF115BFE29F13A92357CC6E35EAF6860C175
Certificate serial:       26F1BAEA34AACEC36F3368DDA4856CAD89037D81
Authority key identifier: EE:AB:BF:11:5B:FE:29:F1:3A:92:35:7C:C6:E3:5E:AF:68:60:C1:75
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/EEABBF115BFE29F13A92357CC6E35EAF6860C175.cer
Subject info access:      rsync://k18.rrdp-rpki.athene-center.net/repo/k18-rpki-athene-center/0/3135382e3232302e3134372e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:41:06 +0000
ROA not before:           Wed 27 Mar 2024 19:36:06 +0000
ROA not after:            Wed 26 Mar 2025 19:41:06 +0000
asID:                     208162
IP address blocks:        158.220.147.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f1:ba:ea:34:aa:ce:c3:6f:33:68:dd:a4:85:6c:ad:89:03:7d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEABBF115BFE29F13A92357CC6E35EAF6860C175
        Validity
            Not Before: Mar 27 19:36:06 2024 GMT
            Not After : Mar 26 19:41:06 2025 GMT
        Subject: CN=951F3610E98BC491AE07D681F64223EEC0E4EFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1d:47:e8:e3:df:65:69:b8:b2:d0:d7:eb:89:
                    c8:46:ed:2d:89:32:e1:d6:54:83:3a:86:ea:70:11:
                    89:75:dd:04:cd:d0:a1:d3:47:93:a1:86:36:8f:36:
                    5e:0c:25:ef:a3:b4:e1:68:e1:cd:86:c1:7e:46:2a:
                    cd:c2:68:d1:f1:00:a4:e7:06:03:b1:51:4c:c1:2a:
                    c5:21:1d:3a:a7:8d:cd:ca:46:bb:47:ea:31:02:eb:
                    84:e4:7c:3a:07:13:60:e6:a5:66:2c:f1:b0:9c:26:
                    7a:00:3b:4d:8c:e6:0d:52:b7:9a:7e:d5:73:ba:62:
                    86:19:1e:b6:23:92:96:6b:6d:ea:65:81:c9:e8:85:
                    4f:df:d5:9a:81:d1:5a:97:8e:3b:f8:59:4e:ba:8f:
                    38:33:b7:91:87:07:76:51:5b:48:94:1a:2d:52:c4:
                    fb:cc:ef:07:10:88:3e:35:da:dd:56:51:a4:9f:ff:
                    32:3b:ad:e3:cf:0f:92:82:0a:41:bb:4f:41:87:13:
                    51:e6:68:40:97:bd:f9:e3:ef:36:35:db:7b:c6:e8:
                    0a:09:f8:b1:cf:eb:cd:5b:20:7d:56:c8:22:b8:cd:
                    88:47:66:9e:43:41:0b:01:c7:aa:24:f2:d0:39:3f:
                    e8:86:5f:b2:79:ae:02:23:5a:f1:ac:f4:16:11:f9:
                    4b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1F:36:10:E9:8B:C4:91:AE:07:D6:81:F6:42:23:EE:C0:E4:EF:FD
            X509v3 Authority Key Identifier:
                keyid:EE:AB:BF:11:5B:FE:29:F1:3A:92:35:7C:C6:E3:5E:AF:68:60:C1:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k18.rrdp-rpki.athene-center.net/repo/k18-rpki-athene-center/0/EEABBF115BFE29F13A92357CC6E35EAF6860C175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/EEABBF115BFE29F13A92357CC6E35EAF6860C175.cer

            Subject Information Access:
                Signed Object - URI:rsync://k18.rrdp-rpki.athene-center.net/repo/k18-rpki-athene-center/0/3135382e3232302e3134372e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:f1:1a:d4:98:76:9b:5d:61:35:81:ea:84:5f:9e:fa:2b:07:
         c7:17:8e:c1:74:b8:83:96:90:b9:4d:2c:ce:1f:d9:09:19:5e:
         09:fe:a0:27:ea:79:ed:f7:1d:e8:b1:5c:a2:b5:13:63:38:c9:
         46:ba:2c:eb:f0:cd:c0:19:79:16:e0:92:ee:9c:1a:2d:a5:f8:
         35:0a:2e:5c:b4:a9:78:a9:6c:db:ec:06:69:e0:c0:74:28:96:
         d2:22:4d:31:c9:82:8d:2d:01:88:5b:c0:55:f7:08:6e:4f:96:
         28:04:42:61:bc:6a:f2:46:80:ce:b9:66:c3:5b:eb:58:38:6a:
         5c:ce:29:8c:86:1d:a0:b3:0f:c9:de:ae:43:3f:b1:27:c6:90:
         dd:69:c2:af:3e:ca:bd:2d:10:5d:55:5f:69:c9:27:92:fa:8b:
         fc:df:d3:59:ed:4d:4e:ce:4b:1b:2f:b2:18:35:9a:df:75:d8:
         e0:71:f8:0e:65:a9:0a:d6:b5:d0:9d:6e:8c:e2:1e:73:f7:31:
         d2:13:f4:19:cd:8e:32:4e:50:5e:ab:01:53:e9:48:f3:79:d2:
         9b:01:9a:34:ac:f2:dd:36:54:34:0a:24:5a:32:0d:ed:1e:ae:
         90:2b:ea:a6:db:70:0a:4d:07:8b:2e:f0:f5:86:78:59:18:9b:
         0b:4f:57:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 19:36:02 2024 by rpki-client on console-ams.rpki-client.org