Route Origin Authorization

$ rpki-client -vvf k25.rrdp-rpki.athene-center.net/repo/k25-rpki-athene-center/0/3135382e3232302e3135342e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135342e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          SLEBrMfERi7Jb36FtV0GhtMZd2vazD+6R4PvG6NLub4=
Subject key identifier:   CB:F3:C4:89:29:87:10:15:20:92:3D:D3:E0:E5:6D:09:C3:E1:1F:9E
Certificate issuer:       /CN=64AB30393AE1F4C490366B3200DD05A2CED36AB3
Certificate serial:       1E3C20761C2AAEF624E05ED7E7F54198A20AFF4C
Authority key identifier: 64:AB:30:39:3A:E1:F4:C4:90:36:6B:32:00:DD:05:A2:CE:D3:6A:B3
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/64AB30393AE1F4C490366B3200DD05A2CED36AB3.cer
Subject info access:      rsync://k25.rrdp-rpki.athene-center.net/repo/k25-rpki-athene-center/0/3135382e3232302e3135342e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:42:25 +0000
ROA not before:           Wed 27 Mar 2024 19:37:25 +0000
ROA not after:            Wed 26 Mar 2025 19:42:25 +0000
asID:                     208162
IP address blocks:        158.220.154.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3c:20:76:1c:2a:ae:f6:24:e0:5e:d7:e7:f5:41:98:a2:0a:ff:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64AB30393AE1F4C490366B3200DD05A2CED36AB3
        Validity
            Not Before: Mar 27 19:37:25 2024 GMT
            Not After : Mar 26 19:42:25 2025 GMT
        Subject: CN=CBF3C4892987101520923DD3E0E56D09C3E11F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:69:26:1a:8b:34:3d:6e:53:1e:b2:e0:16:f2:
                    ce:81:98:6d:32:4b:02:02:0c:5e:bc:43:22:01:8a:
                    cb:23:4b:df:ee:f4:64:2e:9c:5e:f8:67:be:93:39:
                    fe:52:50:c7:80:fd:be:24:40:8b:10:c5:7a:23:bd:
                    20:95:65:6c:bc:3c:38:f1:1f:2e:8a:54:d0:4c:14:
                    8d:89:d4:c9:c6:0e:64:0d:d2:0a:92:e5:f0:a9:8b:
                    de:9b:4c:2e:84:7b:25:81:fe:68:f2:ab:c8:b1:ad:
                    6f:6f:95:14:53:c6:65:ea:c5:30:7b:73:25:b6:c9:
                    56:ca:f6:33:be:0c:77:b3:c9:75:ab:f1:b1:69:3c:
                    61:73:8c:d8:f4:24:54:6f:a5:68:b4:56:1b:c3:bf:
                    07:09:ca:c9:52:65:56:53:91:06:1a:a6:0b:67:84:
                    8f:59:d5:42:71:bb:65:32:a7:85:12:b9:08:c0:29:
                    76:ef:02:cb:52:80:50:fb:12:58:38:88:fe:71:6c:
                    b5:0f:31:56:1a:20:d8:27:1c:b2:79:de:79:85:3a:
                    94:75:f4:7f:55:b7:46:c6:cc:b5:7d:ac:cd:8f:08:
                    e6:ab:6f:72:15:44:f1:a3:be:ad:30:01:44:61:fa:
                    37:ea:7f:1c:1c:2d:2a:1d:80:af:f2:23:6a:54:ef:
                    53:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F3:C4:89:29:87:10:15:20:92:3D:D3:E0:E5:6D:09:C3:E1:1F:9E
            X509v3 Authority Key Identifier:
                keyid:64:AB:30:39:3A:E1:F4:C4:90:36:6B:32:00:DD:05:A2:CE:D3:6A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k25.rrdp-rpki.athene-center.net/repo/k25-rpki-athene-center/0/64AB30393AE1F4C490366B3200DD05A2CED36AB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/64AB30393AE1F4C490366B3200DD05A2CED36AB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://k25.rrdp-rpki.athene-center.net/repo/k25-rpki-athene-center/0/3135382e3232302e3135342e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:f8:8f:50:16:64:3a:34:e7:07:9b:fd:68:86:8e:e0:3b:76:
         f9:88:4e:48:7d:89:4d:18:17:50:54:9e:09:31:21:55:d0:c9:
         a7:51:0a:9f:bb:c4:05:2a:14:31:09:37:a8:11:bc:69:c0:82:
         df:87:b8:a7:24:49:6d:6e:4c:00:2d:61:f4:9e:23:a5:a8:ba:
         32:1a:c5:6a:2f:e0:c6:01:23:7b:20:43:83:0f:9f:86:f1:40:
         cf:4e:f3:af:f1:7d:f2:1b:db:f7:d5:f3:c2:9a:1f:96:ca:1c:
         27:7e:cb:35:e9:56:22:86:d0:3a:39:4f:12:04:f7:43:f4:f0:
         b8:f4:7e:21:82:b7:c4:bf:4a:ab:b3:6c:0f:6b:bd:27:a5:46:
         cb:2a:79:c5:0c:83:80:28:e3:c2:ba:2c:69:b4:7f:2b:a5:5f:
         d0:63:ca:bd:b1:16:c4:00:5b:2c:b5:c0:48:09:29:3b:9c:39:
         5c:24:d8:19:42:13:51:09:86:d5:0b:40:14:56:87:78:02:59:
         f4:8d:91:8a:c6:f5:44:32:71:c1:9c:a7:10:ab:32:89:0b:be:
         b6:6d:60:eb:02:da:33:ca:78:0c:26:21:7a:44:88:c6:a8:d7:
         9f:17:9e:bb:7d:c5:c4:f0:6f:0d:3c:e0:57:0c:c6:09:4b:b0:
         fd:c8:af:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 22:21:52 2024 by rpki-client on console-ams.rpki-client.org