Route Origin Authorization

$ rpki-client -vvf k25.pp-rpki.athene-center.net/repo/k25-rpki-athene-center/0/3135382e3232302e3135342e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135342e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          n/wiU4grK4VeDyUSmUmu39Sy932FzImtUE2UKlzsjfQ=
Subject key identifier:   B9:41:8B:51:11:47:F8:9D:60:57:E8:82:05:6E:61:81:5F:C6:F6:A9
Certificate issuer:       /CN=E1FA95EF178E03CDB3AF4FA732C8C72E6B1663F9
Certificate serial:       2545133D008342DF08625FD85A6B8301018668D3
Authority key identifier: E1:FA:95:EF:17:8E:03:CD:B3:AF:4F:A7:32:C8:C7:2E:6B:16:63:F9
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/E1FA95EF178E03CDB3AF4FA732C8C72E6B1663F9.cer
Subject info access:      rsync://k25.pp-rpki.athene-center.net/repo/k25-rpki-athene-center/0/3135382e3232302e3135342e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:28:50 +0000
ROA not before:           Fri 22 Mar 2024 10:23:50 +0000
ROA not after:            Fri 21 Mar 2025 10:28:50 +0000
asID:                     208162
IP address blocks:        158.220.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:45:13:3d:00:83:42:df:08:62:5f:d8:5a:6b:83:01:01:86:68:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FA95EF178E03CDB3AF4FA732C8C72E6B1663F9
        Validity
            Not Before: Mar 22 10:23:50 2024 GMT
            Not After : Mar 21 10:28:50 2025 GMT
        Subject: CN=B9418B511147F89D6057E882056E61815FC6F6A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bb:1a:aa:bc:83:8d:f2:f1:82:1b:a1:02:63:
                    c1:19:91:d7:39:cc:85:12:90:b7:67:db:bd:d4:b0:
                    ec:d5:a7:14:e8:70:4d:e4:7e:02:2c:99:61:d6:de:
                    93:e0:04:b8:61:30:23:6e:19:28:61:db:c9:e6:19:
                    27:c6:db:0f:6a:e1:95:87:a0:63:a7:8b:5a:bf:12:
                    a8:d1:b5:d1:71:7e:e1:a5:30:15:6b:d1:98:f9:c4:
                    73:5b:14:f9:0c:19:9f:69:8a:fb:69:40:fc:28:a4:
                    bc:ec:6a:7b:71:fe:18:66:6e:fa:1e:f7:6f:02:54:
                    5e:96:b7:fd:56:95:a1:44:5e:ce:d1:c8:ca:dd:ea:
                    4c:e4:dc:86:5c:c8:41:a9:99:f4:01:d5:62:f1:07:
                    e0:38:c7:3c:75:b0:e3:c6:fd:90:7f:2a:af:5d:00:
                    1a:ac:3d:8b:33:d5:56:dd:20:8c:7d:7b:28:f7:7f:
                    e7:8e:7e:2e:53:9e:40:fb:aa:ef:b3:49:37:2c:70:
                    8c:26:f2:3b:6a:fe:4b:a2:31:a2:ca:a6:d5:5e:b5:
                    c5:5a:1f:f5:f5:da:79:00:db:d9:ab:fd:29:b7:34:
                    70:a1:e2:2e:cc:67:a8:73:ce:45:d3:de:56:33:6c:
                    b0:1f:79:5c:b7:10:d9:59:f1:32:9d:7d:ad:8f:f7:
                    53:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:41:8B:51:11:47:F8:9D:60:57:E8:82:05:6E:61:81:5F:C6:F6:A9
            X509v3 Authority Key Identifier:
                keyid:E1:FA:95:EF:17:8E:03:CD:B3:AF:4F:A7:32:C8:C7:2E:6B:16:63:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k25.pp-rpki.athene-center.net/repo/k25-rpki-athene-center/0/E1FA95EF178E03CDB3AF4FA732C8C72E6B1663F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/E1FA95EF178E03CDB3AF4FA732C8C72E6B1663F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://k25.pp-rpki.athene-center.net/repo/k25-rpki-athene-center/0/3135382e3232302e3135342e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:e3:68:71:62:5f:96:46:a5:78:58:72:8b:b1:66:46:0f:ae:
         07:f9:a3:f3:c9:a9:83:a5:a9:25:54:a0:49:91:71:6d:d2:e1:
         54:7c:14:57:e9:3d:44:2d:1d:35:2e:34:b9:1c:e3:8c:30:25:
         3a:1a:c3:08:67:49:da:dc:d7:22:7e:66:9e:0c:8b:64:e1:bc:
         25:06:07:30:6a:22:c3:d1:15:98:b5:14:e3:40:49:ff:cb:fa:
         fc:34:e7:ae:81:4e:cd:18:3e:36:d5:54:7b:bc:59:02:16:a6:
         37:b2:e1:7e:10:89:fc:89:08:cd:3c:76:d9:3b:e6:ed:41:8b:
         cc:49:f1:98:69:38:e9:ae:fe:6f:18:2f:d7:5b:92:98:61:df:
         3a:c9:2b:bf:81:98:3b:06:e6:be:59:b4:0f:3b:ef:cf:7c:c0:
         90:3f:a6:d4:91:f8:57:df:8f:47:a7:23:a8:cf:1e:ff:00:de:
         27:2e:1b:38:69:63:a7:f2:f1:b1:7b:3a:82:3f:71:f6:af:80:
         c6:6a:aa:2a:f8:83:9c:66:f6:0f:ec:9c:d1:cc:ae:af:bc:df:
         20:bf:44:14:2f:c0:61:ae:67:f4:9a:b7:5d:ac:0e:87:30:2a:
         fc:1a:c1:ef:be:9d:35:21:d8:6c:6d:23:90:f0:a3:98:69:92:
         4f:93:53:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org