Route Origin Authorization

$ rpki-client -vvf k22.pp-rpki.athene-center.net/repo/k22-rpki-athene-center/0/3135382e3232302e3135312e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135312e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          Nuj/DqnUBqH3BRWBGTmz7m46xiinwtIm/yaYPeIl/+0=
Subject key identifier:   D8:DF:CD:BD:67:0D:82:85:F7:4D:7B:A8:34:EF:B0:71:75:01:E6:91
Certificate issuer:       /CN=2B497A3E5ACA35306DC080FBE5F456D70EDA576F
Certificate serial:       689623F096EF2EBC46B598CBB47FBA96C938C2AD
Authority key identifier: 2B:49:7A:3E:5A:CA:35:30:6D:C0:80:FB:E5:F4:56:D7:0E:DA:57:6F
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/2B497A3E5ACA35306DC080FBE5F456D70EDA576F.cer
Subject info access:      rsync://k22.pp-rpki.athene-center.net/repo/k22-rpki-athene-center/0/3135382e3232302e3135312e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:28:16 +0000
ROA not before:           Fri 22 Mar 2024 10:23:16 +0000
ROA not after:            Fri 21 Mar 2025 10:28:16 +0000
asID:                     208162
IP address blocks:        158.220.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:96:23:f0:96:ef:2e:bc:46:b5:98:cb:b4:7f:ba:96:c9:38:c2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B497A3E5ACA35306DC080FBE5F456D70EDA576F
        Validity
            Not Before: Mar 22 10:23:16 2024 GMT
            Not After : Mar 21 10:28:16 2025 GMT
        Subject: CN=D8DFCDBD670D8285F74D7BA834EFB0717501E691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c6:92:c6:5f:e1:24:11:fe:09:02:98:f3:4a:
                    0c:39:a3:6e:18:64:ab:d5:b8:82:42:bf:60:83:05:
                    54:10:0d:91:c2:c0:30:aa:e8:6e:86:a5:cb:dd:b5:
                    86:f5:c4:ce:25:31:9e:a1:22:c1:d8:ef:1d:fd:52:
                    98:f3:1e:13:ae:62:9e:bd:12:a3:28:ff:f9:60:79:
                    e5:32:66:b3:5a:b3:3c:fb:64:09:80:e4:b8:73:bc:
                    78:6a:e5:e4:10:ff:c4:9f:ce:08:35:85:d1:a1:b2:
                    1b:34:01:56:7a:97:ae:cc:a4:77:66:fa:1f:b2:8f:
                    9e:13:70:2b:83:3d:7d:4a:f6:7d:36:7b:39:a8:5b:
                    4a:59:11:42:e9:32:22:f3:f0:6d:8e:52:23:41:53:
                    8f:49:9a:37:61:2b:bf:ec:2e:a9:41:3f:6a:e7:6c:
                    5f:86:2f:77:d8:12:dd:fc:a0:c4:d9:8e:50:22:8c:
                    93:f9:08:00:65:67:ac:d2:ec:5e:b6:f1:35:d9:61:
                    48:c8:64:73:74:0e:e0:50:26:57:0e:43:37:3c:b2:
                    45:90:a8:f6:9a:d2:1f:66:da:b6:93:d4:c9:13:05:
                    ab:27:5c:19:36:8c:33:24:46:39:b8:d1:d8:e8:c2:
                    c3:74:78:51:a9:42:45:af:47:f2:a1:ed:0c:7e:95:
                    c5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DF:CD:BD:67:0D:82:85:F7:4D:7B:A8:34:EF:B0:71:75:01:E6:91
            X509v3 Authority Key Identifier:
                keyid:2B:49:7A:3E:5A:CA:35:30:6D:C0:80:FB:E5:F4:56:D7:0E:DA:57:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k22.pp-rpki.athene-center.net/repo/k22-rpki-athene-center/0/2B497A3E5ACA35306DC080FBE5F456D70EDA576F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/2B497A3E5ACA35306DC080FBE5F456D70EDA576F.cer

            Subject Information Access:
                Signed Object - URI:rsync://k22.pp-rpki.athene-center.net/repo/k22-rpki-athene-center/0/3135382e3232302e3135312e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:94:4e:3f:b3:ae:eb:5a:5c:56:88:e6:3b:6d:2d:21:16:81:
         d4:09:dc:16:0f:98:20:a3:94:1c:bc:b8:05:08:d8:a9:97:59:
         9d:48:52:e3:73:a1:5c:c5:55:e0:3a:7a:9a:23:c3:5d:55:9d:
         68:e6:ba:21:19:11:8b:4b:13:d9:01:17:8e:7e:f8:eb:03:a1:
         ab:72:aa:db:ae:13:1c:20:47:44:09:13:58:c8:4e:5c:fc:49:
         d9:9a:04:4b:5f:10:73:fd:48:91:8b:0a:de:07:b8:89:b0:ef:
         12:ab:1a:7e:fc:2a:77:4c:d4:7a:81:6b:3c:63:03:04:b0:10:
         9b:a7:1f:07:80:f3:de:20:cc:0b:f2:67:3c:c6:79:cb:35:5a:
         4a:b0:36:26:75:53:17:96:90:25:2f:92:36:d9:2f:a1:9d:f5:
         56:f1:a9:20:72:53:31:72:84:ed:68:1a:10:25:0a:e0:31:d3:
         d2:2d:61:d2:21:ea:4f:29:14:53:fd:47:c2:09:3c:b9:1f:1a:
         f5:c5:ff:01:af:cc:50:21:5b:2e:4d:39:30:7c:00:09:ba:a7:
         21:65:ca:14:ec:f3:ac:00:2d:f6:68:a4:0a:2f:8f:10:b9:48:
         66:a3:d9:25:54:b1:0b:e6:da:fa:d2:f6:12:ed:ac:33:a0:7d:
         18:7e:1d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 22:50:52 2024 by rpki-client on console-ams.rpki-client.org