Route Origin Authorization

$ rpki-client -vvf k31.rrdp-rpki.athene-center.net/repo/k31-rpki-athene-center/0/3135382e3232302e3136302e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3136302e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          HJJWm+t+A4WBnVPQRkQ4S8te7gWMis889Fp0cZhNOeQ=
Subject key identifier:   49:4A:95:3B:15:2B:3E:EB:69:3A:1E:72:8F:10:8B:A5:2C:A6:FB:30
Certificate issuer:       /CN=25EF6884E9E1AD29255465D6D3E530278AC050DA
Certificate serial:       0E4ED367146C63AFFB78662ABDF9A19B60F61107
Authority key identifier: 25:EF:68:84:E9:E1:AD:29:25:54:65:D6:D3:E5:30:27:8A:C0:50:DA
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/25EF6884E9E1AD29255465D6D3E530278AC050DA.cer
Subject info access:      rsync://k31.rrdp-rpki.athene-center.net/repo/k31-rpki-athene-center/0/3135382e3232302e3136302e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:43:33 +0000
ROA not before:           Wed 27 Mar 2024 19:38:33 +0000
ROA not after:            Wed 26 Mar 2025 19:43:33 +0000
asID:                     208162
IP address blocks:        158.220.160.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4e:d3:67:14:6c:63:af:fb:78:66:2a:bd:f9:a1:9b:60:f6:11:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25EF6884E9E1AD29255465D6D3E530278AC050DA
        Validity
            Not Before: Mar 27 19:38:33 2024 GMT
            Not After : Mar 26 19:43:33 2025 GMT
        Subject: CN=494A953B152B3EEB693A1E728F108BA52CA6FB30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f5:95:49:6a:bb:b1:ac:28:e1:30:87:ec:03:
                    80:5b:2e:a1:99:42:3c:58:90:9f:22:76:37:f4:52:
                    cb:f1:ab:0e:8a:71:ee:ea:7e:60:c5:b5:6c:81:60:
                    01:ad:60:27:e4:24:dd:17:60:0b:16:0a:ce:bf:ae:
                    8a:bd:ae:af:c6:f8:5a:2a:70:39:17:06:40:72:de:
                    4d:1f:a7:d7:e9:65:f6:ca:59:2b:33:2d:37:58:ad:
                    35:c5:2a:d1:3c:03:cc:34:92:2c:aa:47:88:39:ca:
                    22:c5:44:f7:cd:b0:9a:ac:ea:9f:7e:5e:a9:c8:0b:
                    c3:ab:a9:c7:8a:ab:39:68:6d:a9:7d:85:f4:6f:12:
                    ac:1f:53:3a:93:96:4f:1b:be:d9:e7:3c:6d:bf:ea:
                    cb:2b:ac:39:66:f3:48:b2:2b:30:53:af:5c:70:e3:
                    1c:de:6a:fe:ad:c7:2e:14:01:93:4b:b4:e9:0b:0a:
                    7f:9c:ca:4e:80:ce:0e:b0:36:cb:3d:54:7d:ff:fd:
                    0a:c0:3a:f0:bb:86:01:91:3e:56:a8:c6:dc:cc:bf:
                    30:d8:50:e4:18:c8:67:d2:53:1b:4e:e5:85:45:30:
                    d4:e4:4f:04:3d:9b:84:d9:d5:14:53:0c:89:91:1f:
                    97:5d:90:ea:af:19:d8:b4:f6:bd:8f:7c:58:c8:f2:
                    2e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4A:95:3B:15:2B:3E:EB:69:3A:1E:72:8F:10:8B:A5:2C:A6:FB:30
            X509v3 Authority Key Identifier:
                keyid:25:EF:68:84:E9:E1:AD:29:25:54:65:D6:D3:E5:30:27:8A:C0:50:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k31.rrdp-rpki.athene-center.net/repo/k31-rpki-athene-center/0/25EF6884E9E1AD29255465D6D3E530278AC050DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/25EF6884E9E1AD29255465D6D3E530278AC050DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://k31.rrdp-rpki.athene-center.net/repo/k31-rpki-athene-center/0/3135382e3232302e3136302e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:b4:4e:5f:42:8a:b3:40:4d:09:6c:ce:35:2a:b6:02:c4:e3:
         4c:da:19:86:5a:58:8b:24:5b:da:28:5d:d2:96:65:d4:ca:55:
         c3:d6:d7:82:d0:31:16:79:1c:c8:68:b0:a5:b7:8f:e7:84:d7:
         c8:0c:de:47:79:1e:34:30:fa:c4:7d:43:33:f9:c6:6d:87:a3:
         57:f0:5f:ae:9d:75:50:86:9f:f0:4e:ce:79:38:a1:c7:98:7b:
         ea:4c:ea:3a:b8:70:e7:d5:c2:dc:71:60:ae:bc:cf:45:38:47:
         01:68:13:ca:d8:e7:a7:64:72:ac:58:80:ca:29:51:0e:e2:bb:
         c6:14:2a:61:f5:73:3f:8b:5d:4f:f5:9a:44:f7:82:a2:dd:d1:
         70:e9:de:fd:71:65:ac:1e:35:c8:f2:b4:30:53:4b:2d:6e:9d:
         77:69:0a:df:1e:92:87:a1:40:ba:bb:1e:f7:f4:2a:a1:6f:09:
         b9:ab:95:23:71:9d:2c:d5:03:6d:ec:52:16:6f:c4:b0:b0:57:
         2b:9a:da:e1:34:5a:76:bb:85:0d:64:f2:5e:d7:4b:a0:ff:18:
         aa:f3:f0:55:5f:35:c8:10:28:9d:ae:77:b9:20:c6:ae:03:41:
         b6:f1:a9:b0:9c:4d:5a:d9:f6:36:f5:10:96:43:6b:f4:f4:3a:
         12:72:98:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 19:36:03 2024 by rpki-client on console-ams.rpki-client.org