Route Origin Authorization

$ rpki-client -vvf k23.pp-rpki.athene-center.net/repo/k23-rpki-athene-center/0/3135382e3232302e3135322e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135322e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          bLCnct4dDyPcESEXIQvj879AJPs6nrAzpvZTT/Wst2U=
Subject key identifier:   BA:B2:66:1A:7A:E9:B7:15:1F:EC:B4:55:7B:07:97:78:EB:7D:63:F2
Certificate issuer:       /CN=0C24FB5BE1EB12D5A04D8F1A4057A4E694619862
Certificate serial:       482E0CA242D6878A41574EBC6710B98776667F46
Authority key identifier: 0C:24:FB:5B:E1:EB:12:D5:A0:4D:8F:1A:40:57:A4:E6:94:61:98:62
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/0C24FB5BE1EB12D5A04D8F1A4057A4E694619862.cer
Subject info access:      rsync://k23.pp-rpki.athene-center.net/repo/k23-rpki-athene-center/0/3135382e3232302e3135322e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:28:27 +0000
ROA not before:           Fri 22 Mar 2024 10:23:27 +0000
ROA not after:            Fri 21 Mar 2025 10:28:27 +0000
asID:                     208162
IP address blocks:        158.220.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2e:0c:a2:42:d6:87:8a:41:57:4e:bc:67:10:b9:87:76:66:7f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C24FB5BE1EB12D5A04D8F1A4057A4E694619862
        Validity
            Not Before: Mar 22 10:23:27 2024 GMT
            Not After : Mar 21 10:28:27 2025 GMT
        Subject: CN=BAB2661A7AE9B7151FECB4557B079778EB7D63F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a3:5a:78:a8:51:63:36:3a:a9:95:cf:7b:5a:
                    a5:c8:4b:f0:9d:a6:4e:d1:23:4d:e5:0a:2f:1b:29:
                    ff:84:65:15:1a:ba:67:d1:b1:9c:fa:23:2b:53:45:
                    59:a3:c2:e4:f5:3f:ca:36:fe:de:83:e9:62:4c:a3:
                    35:d8:1b:58:d0:8a:42:85:c1:a7:a3:2e:7e:e6:bf:
                    a3:85:bc:5e:6c:a9:8d:b7:30:7b:58:ab:c0:4b:d0:
                    af:ec:ac:8f:17:fa:df:99:e4:dc:30:77:b3:3b:dc:
                    ec:da:87:ad:17:ad:ca:58:fa:7a:0d:41:5f:8d:1e:
                    06:f2:23:ba:2f:67:29:e1:a1:b2:12:82:64:43:2a:
                    be:93:39:06:11:6f:a6:5a:16:96:67:e1:ac:dc:04:
                    0d:dc:fa:56:37:8d:79:e2:27:e8:6b:c5:ab:9a:d8:
                    24:50:fa:99:d9:c4:c6:24:d9:88:ec:72:03:78:e0:
                    d9:7e:2a:f0:6e:ad:01:9e:8f:e6:a5:0f:5f:10:68:
                    73:60:29:ed:0b:11:fc:12:4f:25:04:49:e2:83:23:
                    02:e4:be:82:c2:34:50:9e:b6:f9:ed:bb:c1:fe:f2:
                    2f:42:31:c7:96:ac:35:0d:4c:d3:c6:a0:12:88:34:
                    aa:92:a9:8a:6e:39:ff:6e:95:a0:2b:23:d4:65:b9:
                    de:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B2:66:1A:7A:E9:B7:15:1F:EC:B4:55:7B:07:97:78:EB:7D:63:F2
            X509v3 Authority Key Identifier:
                keyid:0C:24:FB:5B:E1:EB:12:D5:A0:4D:8F:1A:40:57:A4:E6:94:61:98:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k23.pp-rpki.athene-center.net/repo/k23-rpki-athene-center/0/0C24FB5BE1EB12D5A04D8F1A4057A4E694619862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/0C24FB5BE1EB12D5A04D8F1A4057A4E694619862.cer

            Subject Information Access:
                Signed Object - URI:rsync://k23.pp-rpki.athene-center.net/repo/k23-rpki-athene-center/0/3135382e3232302e3135322e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:3b:e5:74:ab:41:36:da:22:1c:6b:34:42:1b:48:7d:fd:c6:
         b6:a4:46:b4:60:df:d9:40:e3:f1:bb:d6:6c:3e:b2:46:8b:1a:
         89:89:0d:6d:f3:b3:af:10:2d:81:c9:60:98:f8:0b:6f:3d:aa:
         08:7b:13:6d:d8:47:30:d7:40:c7:47:e1:21:68:63:a0:a6:cd:
         22:df:ac:de:51:8e:c0:20:1d:e3:3b:d8:d0:b4:d7:2f:c4:5b:
         f1:9d:13:00:9c:2b:bd:8b:2f:d2:e0:91:69:08:4a:2a:f6:a9:
         3e:f5:7a:68:b3:91:f6:da:3f:69:da:39:e7:5a:93:70:fb:83:
         0c:3d:f2:20:b3:cf:5f:7a:a5:4b:b9:28:a9:9e:0d:c1:30:48:
         08:c1:fb:6d:f1:d0:82:95:18:f5:15:dc:96:09:16:84:5d:18:
         df:8e:90:fb:ea:92:a8:8e:27:9d:06:70:a1:53:9c:ce:43:3b:
         95:d9:ed:0d:b0:98:b3:f1:21:72:c6:de:4f:06:ff:a4:60:b5:
         6d:7a:31:23:6f:4b:31:ed:d2:8d:b6:cd:cf:4b:b3:fa:b6:6d:
         e7:46:5c:64:0f:ab:89:29:86:f0:74:90:ce:94:6a:51:14:bc:
         c6:7a:5f:2c:8b:b2:22:01:a5:4a:58:9f:66:6b:a2:2b:50:3a:
         46:67:40:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org