Route Origin Authorization

$ rpki-client -vvf k29.pp-rpki.athene-center.net/repo/k29-rpki-athene-center/0/3135382e3232302e3135382e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135382e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          dNMtWVPzI7Jj3MkqyTRFtq0T6zaavDje7dkFYtyqtMI=
Subject key identifier:   50:68:87:FE:43:2E:28:72:EA:9C:C7:25:64:5D:BD:1C:D1:82:29:DE
Certificate issuer:       /CN=7A6B1782B68883C14FDCFE71DC5044C35E556BA6
Certificate serial:       0B45116FA6CE82B6F9FEF572D6F71260689A75FA
Authority key identifier: 7A:6B:17:82:B6:88:83:C1:4F:DC:FE:71:DC:50:44:C3:5E:55:6B:A6
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/7A6B1782B68883C14FDCFE71DC5044C35E556BA6.cer
Subject info access:      rsync://k29.pp-rpki.athene-center.net/repo/k29-rpki-athene-center/0/3135382e3232302e3135382e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:29:35 +0000
ROA not before:           Fri 22 Mar 2024 10:24:35 +0000
ROA not after:            Fri 21 Mar 2025 10:29:35 +0000
asID:                     208162
IP address blocks:        158.220.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:45:11:6f:a6:ce:82:b6:f9:fe:f5:72:d6:f7:12:60:68:9a:75:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A6B1782B68883C14FDCFE71DC5044C35E556BA6
        Validity
            Not Before: Mar 22 10:24:35 2024 GMT
            Not After : Mar 21 10:29:35 2025 GMT
        Subject: CN=506887FE432E2872EA9CC725645DBD1CD18229DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:58:b8:40:4e:db:79:cf:2a:f9:7d:b0:a8:
                    db:a8:6d:06:5a:61:bb:b6:a4:91:6e:eb:b0:51:9b:
                    20:0f:3f:39:9a:4a:f8:cd:f1:e1:6d:a3:f4:2c:74:
                    b4:5a:6c:07:d6:86:5e:56:15:f4:c7:fe:56:30:5c:
                    4f:f6:fa:a4:c1:5b:bb:53:48:60:65:78:2e:5d:5a:
                    38:22:65:81:e9:82:30:e9:02:78:b7:bb:49:2e:52:
                    f2:f7:fc:4e:b7:f7:50:e8:fa:be:96:59:3e:79:a0:
                    d7:4e:80:09:93:2b:c4:f9:0a:58:a5:45:60:7e:cc:
                    9d:3e:5c:15:36:f9:51:2d:10:18:4c:1a:0c:06:31:
                    e3:3c:ee:56:eb:99:72:0e:76:6a:64:c7:f4:ac:f7:
                    20:7b:74:cc:43:28:32:df:70:96:a3:ad:fd:c2:38:
                    f9:76:a9:9e:d5:07:3f:53:19:cc:36:fd:35:11:ef:
                    ff:90:2e:20:76:13:f1:d7:5e:43:24:be:4e:5d:27:
                    d2:01:70:b2:ba:dd:d3:8a:ba:3e:1f:31:22:cd:3e:
                    08:68:93:c6:3c:82:07:60:a8:c1:ba:45:6c:b8:67:
                    4a:d5:47:49:e0:1d:3c:79:3e:3e:df:06:cf:df:fe:
                    04:de:d9:1f:b7:7c:3c:5f:b5:df:88:64:53:3c:ac:
                    41:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:68:87:FE:43:2E:28:72:EA:9C:C7:25:64:5D:BD:1C:D1:82:29:DE
            X509v3 Authority Key Identifier:
                keyid:7A:6B:17:82:B6:88:83:C1:4F:DC:FE:71:DC:50:44:C3:5E:55:6B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k29.pp-rpki.athene-center.net/repo/k29-rpki-athene-center/0/7A6B1782B68883C14FDCFE71DC5044C35E556BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/7A6B1782B68883C14FDCFE71DC5044C35E556BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://k29.pp-rpki.athene-center.net/repo/k29-rpki-athene-center/0/3135382e3232302e3135382e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:5d:83:dd:94:81:8e:f4:e4:9e:5e:88:8e:24:84:95:d7:bb:
         75:14:a2:9b:88:19:a5:03:d3:19:18:42:15:9f:aa:99:90:00:
         09:77:9b:ce:6c:33:06:ea:c0:2d:76:14:58:fd:53:e4:e0:74:
         72:05:f2:0a:1a:df:5d:61:80:ce:25:3c:a5:9a:73:65:6e:b4:
         ae:86:ac:f5:f9:36:36:15:4b:8d:44:ee:76:aa:bf:56:eb:2c:
         5b:2e:06:56:a1:73:38:44:78:e2:7d:0f:ac:80:71:a4:93:b1:
         2a:e2:bc:74:1c:ba:f6:22:c9:e4:0f:a5:d0:b7:43:6a:5b:b4:
         85:bd:fb:37:46:ef:71:8c:24:b8:e4:15:8c:c3:aa:25:a4:ae:
         55:f2:00:be:41:ca:6b:aa:bc:e2:fe:c3:bf:fb:b5:fd:b6:a1:
         ba:ee:81:0b:ef:aa:44:40:0f:d5:be:2d:51:0a:fe:85:ac:e8:
         76:f0:ab:2d:53:63:1d:d0:a1:5b:85:43:f3:12:bf:c8:ad:76:
         e7:a4:cd:ae:4d:79:2e:0d:01:68:49:01:a8:99:01:9a:24:07:
         75:c5:2e:01:5b:ab:c2:9d:c5:67:95:1b:65:e5:80:f0:74:87:
         6e:e6:20:42:bc:11:7c:d5:ac:2d:ef:bc:98:b1:52:91:d6:a8:
         22:74:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org