Route Origin Authorization

$ rpki-client -vvf k28.pp-rpki.athene-center.net/repo/k28-rpki-athene-center/0/3135382e3232302e3135372e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135372e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          dSwHZcUN6Z32gcw4ZaggpfXCVwyleD2B0sVQIKYJ2Xs=
Subject key identifier:   4E:4A:B3:7E:BA:20:3D:AE:F8:59:2C:00:60:ED:E8:2A:CE:8D:CE:21
Certificate issuer:       /CN=FED9ED3FC1BEB2858C35F498299935428A2DED6A
Certificate serial:       6DE73F161F2049CA3A37A90AB310D1536A7E3D47
Authority key identifier: FE:D9:ED:3F:C1:BE:B2:85:8C:35:F4:98:29:99:35:42:8A:2D:ED:6A
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/FED9ED3FC1BEB2858C35F498299935428A2DED6A.cer
Subject info access:      rsync://k28.pp-rpki.athene-center.net/repo/k28-rpki-athene-center/0/3135382e3232302e3135372e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:29:24 +0000
ROA not before:           Fri 22 Mar 2024 10:24:24 +0000
ROA not after:            Fri 21 Mar 2025 10:29:24 +0000
asID:                     208162
IP address blocks:        158.220.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e7:3f:16:1f:20:49:ca:3a:37:a9:0a:b3:10:d1:53:6a:7e:3d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED9ED3FC1BEB2858C35F498299935428A2DED6A
        Validity
            Not Before: Mar 22 10:24:24 2024 GMT
            Not After : Mar 21 10:29:24 2025 GMT
        Subject: CN=4E4AB37EBA203DAEF8592C0060EDE82ACE8DCE21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9d:8b:ec:1b:76:8b:07:34:75:6f:02:f9:b9:
                    8f:6e:f7:a6:90:ca:da:37:06:2a:88:25:a1:82:9d:
                    ce:56:95:c3:c5:d1:3e:b1:50:38:6b:0b:82:85:47:
                    f8:23:ae:4d:a5:b4:07:63:55:db:ce:4a:0c:67:3f:
                    2c:c5:ec:c8:90:f1:8e:ae:42:5a:e1:1f:b7:59:81:
                    c0:20:47:37:0f:56:c9:3b:06:8a:d2:b1:d2:1b:b4:
                    45:7c:53:ed:56:38:5b:2c:af:8e:ea:cc:17:13:c0:
                    7d:38:9a:1f:4f:53:66:67:28:70:32:0e:65:48:a1:
                    bc:df:bf:46:4f:e0:f8:91:e2:00:d2:d6:19:07:52:
                    5a:f6:01:07:ee:20:ef:6c:07:22:7e:38:e6:19:68:
                    15:a2:00:99:93:df:42:11:11:86:21:1f:44:58:8c:
                    5b:f3:05:03:d3:fe:6a:a3:3b:fa:e6:ab:67:8f:a7:
                    db:75:0a:04:db:b3:06:76:94:84:60:ef:c3:f8:78:
                    62:5d:f4:2b:e9:3b:53:43:d5:e0:fb:96:01:98:55:
                    7d:58:2f:36:4e:ca:83:28:c6:c1:f0:ac:39:67:77:
                    99:95:6f:84:ba:c7:96:c9:e2:b4:f7:65:ee:01:f5:
                    6f:55:2d:36:96:b7:dc:3a:d6:22:83:ab:90:b7:15:
                    c4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4A:B3:7E:BA:20:3D:AE:F8:59:2C:00:60:ED:E8:2A:CE:8D:CE:21
            X509v3 Authority Key Identifier:
                keyid:FE:D9:ED:3F:C1:BE:B2:85:8C:35:F4:98:29:99:35:42:8A:2D:ED:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k28.pp-rpki.athene-center.net/repo/k28-rpki-athene-center/0/FED9ED3FC1BEB2858C35F498299935428A2DED6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/FED9ED3FC1BEB2858C35F498299935428A2DED6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://k28.pp-rpki.athene-center.net/repo/k28-rpki-athene-center/0/3135382e3232302e3135372e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:ce:0e:67:b6:47:a5:9c:f0:de:5d:ef:b4:9d:e9:29:7c:3c:
         fa:33:ef:dd:68:17:b1:65:f9:c8:ec:97:df:fe:e0:ff:36:0e:
         30:33:c5:5e:37:e6:f1:3a:45:a9:da:1a:a4:72:f9:09:0a:d6:
         86:70:2b:ac:c2:91:25:e0:de:3f:25:48:66:dc:47:5b:99:00:
         f6:c6:41:a7:9e:58:4c:e4:a1:5c:bc:0a:90:eb:c1:10:0e:fb:
         69:cb:a0:de:dd:a9:f7:4a:2b:74:9b:a0:3e:e2:40:4a:34:88:
         cc:22:81:e0:20:c8:8d:e9:55:ef:9f:93:f4:bb:1f:a7:01:78:
         dc:6d:f7:2e:3d:b9:b5:bd:f9:31:7f:11:3c:df:19:2d:72:4b:
         9d:0e:8a:2c:72:ef:c6:dd:18:85:fe:5b:e8:c5:74:61:80:c7:
         65:5b:24:5e:3e:66:5c:1a:26:08:36:ed:47:49:b3:78:76:61:
         e5:04:98:f0:10:d0:f5:9d:6b:41:fc:59:8d:d5:47:cd:1b:9a:
         09:71:f2:ba:df:63:f4:20:99:d7:ca:67:e9:19:fc:e4:5b:2e:
         eb:ba:bb:83:3e:e7:d1:4b:d1:5f:a6:f6:84:fc:4d:20:5b:ac:
         01:43:bb:ea:59:bb:5d:de:8f:2f:a7:9a:07:20:d6:15:c5:74:
         be:6e:51:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org