Route Origin Authorization

$ rpki-client -vvf k20.rrdp-rpki.athene-center.net/repo/k20-rpki-athene-center/0/3135382e3232302e3134392e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3134392e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          59uwWUM9phc4ld6UtyGvYsawFoLghAF5ABi46OoS2L0=
Subject key identifier:   80:5B:24:1D:0A:B9:EB:3D:5F:E0:84:98:85:7B:F2:C0:28:9A:B9:75
Certificate issuer:       /CN=1412FE5AC8ECF58C70F76A429D42DEBC8CEC5BD8
Certificate serial:       311958EC6AF129F9BF83FC2A31C2D0F641C79D55
Authority key identifier: 14:12:FE:5A:C8:EC:F5:8C:70:F7:6A:42:9D:42:DE:BC:8C:EC:5B:D8
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/1412FE5AC8ECF58C70F76A429D42DEBC8CEC5BD8.cer
Subject info access:      rsync://k20.rrdp-rpki.athene-center.net/repo/k20-rpki-athene-center/0/3135382e3232302e3134392e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:41:29 +0000
ROA not before:           Wed 27 Mar 2024 19:36:29 +0000
ROA not after:            Wed 26 Mar 2025 19:41:29 +0000
asID:                     208162
IP address blocks:        158.220.149.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:19:58:ec:6a:f1:29:f9:bf:83:fc:2a:31:c2:d0:f6:41:c7:9d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1412FE5AC8ECF58C70F76A429D42DEBC8CEC5BD8
        Validity
            Not Before: Mar 27 19:36:29 2024 GMT
            Not After : Mar 26 19:41:29 2025 GMT
        Subject: CN=805B241D0AB9EB3D5FE08498857BF2C0289AB975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:93:ee:a3:34:45:e0:ab:cf:7a:9e:e8:6a:69:
                    8f:95:47:d4:9d:b3:d4:5d:01:18:20:5f:8f:78:66:
                    83:8d:aa:0b:b8:1a:b4:58:c8:c5:98:69:bb:99:20:
                    af:4d:df:5b:29:20:51:e2:86:6a:c8:26:f8:ea:58:
                    5c:e9:bf:c2:f8:6f:2c:54:30:bc:0b:fb:34:86:62:
                    47:ef:5b:c4:f0:90:af:b8:89:6b:98:d0:ab:d8:9e:
                    c7:b7:7e:69:ee:b8:55:1c:59:36:4f:ba:8a:56:ee:
                    39:6c:64:1e:e3:f0:c8:45:d9:5b:53:ec:cc:02:5d:
                    ff:ed:fb:73:7b:e9:aa:d9:5e:ea:5f:12:94:7b:b3:
                    58:08:6f:88:ab:d8:f4:47:f2:01:9b:b6:4a:b7:c7:
                    2c:0c:87:58:03:76:45:9f:01:6c:e0:4d:b8:51:81:
                    a0:cd:60:25:e2:29:4d:29:db:b3:c8:8e:61:29:17:
                    7e:a7:23:f3:1e:88:1b:35:9c:4c:b7:31:f2:0a:cd:
                    ae:51:5c:9d:fa:93:ff:98:c4:8f:14:d4:5f:af:ac:
                    1b:5f:73:dc:b3:c7:30:b0:09:5e:5f:b7:93:a5:33:
                    78:05:ec:a8:e0:3f:82:16:2a:1d:30:12:f4:06:68:
                    2d:d5:93:27:22:77:c1:e8:b3:c3:df:6b:85:c4:5f:
                    70:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5B:24:1D:0A:B9:EB:3D:5F:E0:84:98:85:7B:F2:C0:28:9A:B9:75
            X509v3 Authority Key Identifier:
                keyid:14:12:FE:5A:C8:EC:F5:8C:70:F7:6A:42:9D:42:DE:BC:8C:EC:5B:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k20.rrdp-rpki.athene-center.net/repo/k20-rpki-athene-center/0/1412FE5AC8ECF58C70F76A429D42DEBC8CEC5BD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/1412FE5AC8ECF58C70F76A429D42DEBC8CEC5BD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://k20.rrdp-rpki.athene-center.net/repo/k20-rpki-athene-center/0/3135382e3232302e3134392e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:50:60:99:68:47:58:08:1b:fb:3c:73:cd:5a:5e:4e:13:84:
         34:0d:59:12:61:8c:86:c9:2e:5f:60:e3:3b:68:e6:b9:47:c1:
         57:88:7e:6c:88:2c:bf:e6:71:cd:c6:ba:b1:03:56:99:af:9f:
         99:97:dc:b2:63:95:02:66:cc:7f:5d:75:a3:7d:89:ba:a3:4e:
         b9:bd:bb:e2:2e:fe:bf:00:76:50:ec:65:d0:21:a0:c2:ce:d0:
         79:11:ae:61:61:17:fa:cd:df:5a:3d:f4:6e:8e:e0:f1:eb:50:
         59:4f:65:ba:86:e8:0c:36:b2:28:68:b7:d7:50:4a:8b:07:82:
         f1:56:9c:00:66:76:fd:a4:24:e5:92:c8:4b:0e:1d:60:30:f7:
         c0:30:86:f8:19:2c:63:c6:d2:06:b6:3f:54:61:73:a8:79:4d:
         0d:1f:33:98:52:16:49:7f:91:fe:ad:e4:0e:7e:de:78:80:88:
         bb:3b:f1:3b:a8:0c:f3:9c:4d:d3:8c:41:b2:34:7f:2d:4f:3c:
         c5:70:ca:0a:b1:df:34:02:8d:ba:81:34:31:6b:d9:0f:4c:17:
         d9:67:91:2f:17:ed:cd:bc:19:d1:2c:98:cb:21:98:6e:35:9b:
         6b:c2:b6:b7:25:70:54:84:80:0f:7a:6d:17:41:35:21:1f:10:
         e6:5e:c0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 00:12:54 2024 by rpki-client on console-ams.rpki-client.org