Route Origin Authorization

$ rpki-client -vvf k19.pp-rpki.athene-center.net/repo/k19-rpki-athene-center/0/3135382e3232302e3134382e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3134382e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          Ze+J8ELyVtEzVEARGXLjdBvz4q6PTbuE4eINXojJcnA=
Subject key identifier:   BF:FD:1A:1F:32:8D:88:0A:8C:C2:48:2E:BF:61:D1:9F:6A:E4:A4:DD
Certificate issuer:       /CN=1F9128CD3F8C6B03DB0A0D4C3198B49D2161B2B7
Certificate serial:       2CC6944CDB72E3D7EF0A0463FFA4AF087C366C39
Authority key identifier: 1F:91:28:CD:3F:8C:6B:03:DB:0A:0D:4C:31:98:B4:9D:21:61:B2:B7
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/1F9128CD3F8C6B03DB0A0D4C3198B49D2161B2B7.cer
Subject info access:      rsync://k19.pp-rpki.athene-center.net/repo/k19-rpki-athene-center/0/3135382e3232302e3134382e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:27:42 +0000
ROA not before:           Fri 22 Mar 2024 10:22:42 +0000
ROA not after:            Fri 21 Mar 2025 10:27:42 +0000
asID:                     208162
IP address blocks:        158.220.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c6:94:4c:db:72:e3:d7:ef:0a:04:63:ff:a4:af:08:7c:36:6c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F9128CD3F8C6B03DB0A0D4C3198B49D2161B2B7
        Validity
            Not Before: Mar 22 10:22:42 2024 GMT
            Not After : Mar 21 10:27:42 2025 GMT
        Subject: CN=BFFD1A1F328D880A8CC2482EBF61D19F6AE4A4DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:b9:73:06:05:e2:d2:1d:d0:b3:50:93:9a:
                    da:51:fe:f1:a2:d6:42:78:44:fc:e3:e9:0e:2c:94:
                    25:72:4a:59:6e:ba:7d:18:05:4c:c0:6f:ba:6b:8d:
                    78:cd:e3:3a:fb:61:e7:21:ae:64:d4:12:cc:c2:66:
                    5d:30:5a:2f:e4:fe:30:a7:1b:b1:4b:23:8e:55:92:
                    88:95:19:79:ca:2b:8f:4d:96:53:b9:b7:fd:02:06:
                    36:6f:75:b6:f5:90:f1:5b:1a:67:11:38:d5:17:d0:
                    a3:f1:3e:03:61:fe:70:37:16:fe:e5:2d:eb:aa:66:
                    1c:0b:24:50:75:e8:45:13:91:d9:27:16:bb:51:33:
                    46:2a:4b:cf:47:47:ba:b5:51:23:97:3b:54:53:6c:
                    91:d3:ca:ec:83:61:31:56:88:25:af:32:01:68:fd:
                    ea:d9:23:35:02:26:8a:e5:c3:23:e5:b6:b3:02:c5:
                    ec:36:8e:5a:1e:3b:91:d4:36:59:9f:bf:09:33:be:
                    d3:7d:69:b0:12:cc:d6:53:21:51:97:52:de:9f:02:
                    05:22:67:d0:9a:46:f4:b2:28:91:17:f2:e6:1a:5e:
                    f0:06:f5:a8:6d:5f:6d:b6:21:85:a4:50:df:73:de:
                    1b:37:d1:04:46:4b:70:ec:83:4e:73:dc:a8:f0:df:
                    24:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FD:1A:1F:32:8D:88:0A:8C:C2:48:2E:BF:61:D1:9F:6A:E4:A4:DD
            X509v3 Authority Key Identifier:
                keyid:1F:91:28:CD:3F:8C:6B:03:DB:0A:0D:4C:31:98:B4:9D:21:61:B2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k19.pp-rpki.athene-center.net/repo/k19-rpki-athene-center/0/1F9128CD3F8C6B03DB0A0D4C3198B49D2161B2B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/1F9128CD3F8C6B03DB0A0D4C3198B49D2161B2B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://k19.pp-rpki.athene-center.net/repo/k19-rpki-athene-center/0/3135382e3232302e3134382e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:36:33:3f:57:d9:f4:93:54:56:de:36:ee:53:48:fb:4f:a6:
         b0:ba:ef:2c:e8:cd:df:07:67:1b:62:fd:7b:e2:2e:44:c8:b5:
         af:40:21:38:0c:75:86:18:02:72:c8:3d:c3:3d:18:91:72:57:
         f1:cd:73:77:83:9a:c0:11:bd:62:ab:16:6f:f5:8d:d0:0d:06:
         96:4d:0b:36:98:d7:16:4d:2a:2b:a0:d1:1d:b9:d9:92:35:f1:
         20:a9:93:f8:1d:70:a0:85:fd:c4:b6:79:a8:87:16:a4:78:48:
         a9:95:d0:b8:f5:4a:e3:d6:54:e1:76:32:8e:79:3b:a7:04:93:
         ec:9a:c8:c7:04:b7:58:c0:a5:3d:a9:87:75:6a:b5:e2:39:79:
         ca:2b:cc:3d:d8:8f:bb:90:36:78:59:fa:7c:17:54:21:d4:0b:
         02:b0:56:89:f6:8a:b9:ea:39:00:97:d7:3c:bd:80:84:e5:28:
         24:41:eb:84:7f:2a:0c:14:98:32:2b:86:ad:87:32:11:74:51:
         e3:33:57:a3:67:57:eb:18:6c:6f:c1:7e:cb:e8:f7:71:da:72:
         09:a9:10:71:4d:80:42:b7:f4:51:84:f8:fb:81:ce:41:99:ac:
         20:61:c5:64:e2:37:ad:99:f3:79:9d:14:b9:d9:c3:cc:5c:e5:
         16:02:cd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org