Route Origin Authorization

$ rpki-client -vvf k30.rrdp-rpki.athene-center.net/repo/k30-rpki-athene-center/0/3135382e3232302e3135392e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135392e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          AKexOjnwo3icsWfvR+yVp+KDOt3LCfJprSxnhvGDH0g=
Subject key identifier:   E7:E9:C3:08:CA:6D:11:23:FF:D1:32:94:48:11:8B:BE:EC:BD:05:12
Certificate issuer:       /CN=DC94A3B11BBD43D9038CFF15739A489EA5EFC170
Certificate serial:       3ADA3B6D9F19E22F01D6567D919047098CE67AFF
Authority key identifier: DC:94:A3:B1:1B:BD:43:D9:03:8C:FF:15:73:9A:48:9E:A5:EF:C1:70
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/DC94A3B11BBD43D9038CFF15739A489EA5EFC170.cer
Subject info access:      rsync://k30.rrdp-rpki.athene-center.net/repo/k30-rpki-athene-center/0/3135382e3232302e3135392e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:43:22 +0000
ROA not before:           Wed 27 Mar 2024 19:38:22 +0000
ROA not after:            Wed 26 Mar 2025 19:43:22 +0000
asID:                     208162
IP address blocks:        158.220.159.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:da:3b:6d:9f:19:e2:2f:01:d6:56:7d:91:90:47:09:8c:e6:7a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC94A3B11BBD43D9038CFF15739A489EA5EFC170
        Validity
            Not Before: Mar 27 19:38:22 2024 GMT
            Not After : Mar 26 19:43:22 2025 GMT
        Subject: CN=E7E9C308CA6D1123FFD1329448118BBEECBD0512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4f:53:b1:0f:6a:94:3b:15:8d:bd:82:a6:c5:
                    e2:1a:8e:6f:05:74:43:30:20:76:e1:b2:59:87:8e:
                    61:f5:0e:b0:e0:3b:d4:5c:e0:a6:eb:d0:40:7c:f6:
                    b9:3b:5e:07:d7:37:f6:d4:04:73:a7:e4:35:d2:3d:
                    0c:85:28:d3:39:a2:e5:39:d6:34:e7:0b:4d:99:97:
                    fd:dc:cb:63:a7:ac:1f:8f:37:e1:c0:8d:f3:6d:92:
                    08:60:37:6c:be:02:37:85:15:b9:08:b2:05:0e:25:
                    bb:b5:11:aa:29:bc:73:52:8d:83:3a:51:e6:79:15:
                    62:59:0a:19:3f:1a:8e:84:e0:6f:43:89:b3:61:1d:
                    3c:2c:a2:9d:56:4e:54:ce:cd:a2:f5:f7:8e:58:3f:
                    fa:f3:e5:14:7a:ba:4f:68:5f:b6:61:d2:84:27:a9:
                    8d:dd:80:93:06:9f:4e:c0:b9:75:c8:83:d7:4e:c1:
                    63:55:34:24:8a:22:9d:b2:7f:72:c4:72:7d:c9:38:
                    9a:9d:c2:12:27:31:26:05:14:75:ad:7a:d2:ec:af:
                    59:ac:32:b8:53:d3:b9:fd:21:b3:be:b7:54:1d:63:
                    9f:42:aa:cd:ed:8d:b3:50:bc:cf:ff:4a:1f:65:a7:
                    9f:8a:b5:cd:e3:6b:ea:a4:b5:8b:00:bf:a1:c8:0e:
                    66:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E9:C3:08:CA:6D:11:23:FF:D1:32:94:48:11:8B:BE:EC:BD:05:12
            X509v3 Authority Key Identifier:
                keyid:DC:94:A3:B1:1B:BD:43:D9:03:8C:FF:15:73:9A:48:9E:A5:EF:C1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k30.rrdp-rpki.athene-center.net/repo/k30-rpki-athene-center/0/DC94A3B11BBD43D9038CFF15739A489EA5EFC170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/DC94A3B11BBD43D9038CFF15739A489EA5EFC170.cer

            Subject Information Access:
                Signed Object - URI:rsync://k30.rrdp-rpki.athene-center.net/repo/k30-rpki-athene-center/0/3135382e3232302e3135392e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:96:a1:89:41:4a:03:ac:f1:71:74:3e:57:60:21:7a:1e:ff:
         36:78:7a:1e:13:97:5a:7c:e3:b8:96:a2:be:8d:9a:7d:4b:6a:
         f3:4d:2d:c5:3c:ea:22:da:87:31:90:0d:59:a4:be:08:69:b2:
         77:c4:ca:05:c5:ae:39:21:93:1d:59:73:2c:ef:c0:d3:73:c3:
         74:cd:af:e1:42:9d:d3:b0:71:a9:5f:4f:d0:63:cb:b1:41:31:
         d8:c6:43:ee:b1:55:e0:ff:64:6d:8d:f3:89:ec:7a:fe:ad:57:
         e2:31:18:bb:05:b8:e5:e4:44:b6:90:ee:7b:5f:1d:8b:8e:cb:
         ea:30:4c:4c:65:c1:b5:e3:77:cf:ae:cc:2f:22:e3:09:2d:8c:
         f0:31:20:5a:c5:c9:5d:5c:49:1b:35:93:68:7c:f0:1a:c8:70:
         69:d0:98:1d:fb:04:ad:82:98:bc:d4:84:c6:f1:e1:51:e0:c8:
         f4:a7:10:25:23:86:3e:2e:e3:45:b3:c6:62:b3:1c:0d:10:42:
         d7:67:fd:62:17:ae:b8:3d:93:23:6e:ba:a8:de:97:53:43:cd:
         64:29:cd:c1:63:37:56:e0:83:66:2b:5f:e1:5c:f1:3a:c2:14:
         5f:0f:d5:04:77:14:ce:69:65:da:18:18:8b:57:79:bb:c1:b2:
         50:96:bd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 23:24:03 2024 by rpki-client on console-ams.rpki-client.org