Route Origin Authorization

$ rpki-client -vvf k38.rrdp-rpki.athene-center.net/repo/k38-rpki-athene-center/0/3135382e3232302e3136372e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3136372e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          G6z2HiuxbWkVrXUyoHlPUgyanXJbUtQx2qdBy2fXqkU=
Subject key identifier:   D1:39:B6:82:6E:0B:32:69:FF:C2:91:11:4C:AA:39:4A:06:22:28:E3
Certificate issuer:       /CN=536FF997C23D05ADEDCF0400B5308676CE48B656
Certificate serial:       3E5EED5048B174A601968EA300568C05291FC810
Authority key identifier: 53:6F:F9:97:C2:3D:05:AD:ED:CF:04:00:B5:30:86:76:CE:48:B6:56
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/536FF997C23D05ADEDCF0400B5308676CE48B656.cer
Subject info access:      rsync://k38.rrdp-rpki.athene-center.net/repo/k38-rpki-athene-center/0/3135382e3232302e3136372e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:44:52 +0000
ROA not before:           Wed 27 Mar 2024 19:39:52 +0000
ROA not after:            Wed 26 Mar 2025 19:44:52 +0000
asID:                     208162
IP address blocks:        158.220.167.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5e:ed:50:48:b1:74:a6:01:96:8e:a3:00:56:8c:05:29:1f:c8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=536FF997C23D05ADEDCF0400B5308676CE48B656
        Validity
            Not Before: Mar 27 19:39:52 2024 GMT
            Not After : Mar 26 19:44:52 2025 GMT
        Subject: CN=D139B6826E0B3269FFC291114CAA394A062228E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:0f:0e:50:9b:8f:bd:09:cc:e6:0f:2e:5e:
                    2b:24:be:a6:70:bb:3d:f6:f7:90:36:43:7e:0a:c5:
                    8e:10:48:e1:1d:50:70:4a:3e:5b:af:b5:c0:67:1f:
                    66:e9:e2:73:f6:4c:a8:ea:72:da:91:47:64:1f:37:
                    d8:42:5b:51:1e:a6:4c:f1:48:5a:6c:2c:cf:8a:bd:
                    78:68:80:3c:9a:e6:39:db:29:07:94:da:71:63:d5:
                    50:3a:4d:e7:c9:11:f1:1f:2d:85:1a:96:b2:55:7f:
                    f9:ad:9f:a1:06:4c:bf:2a:2b:4d:2d:fb:28:68:38:
                    fd:e1:4b:e1:29:39:00:4c:79:10:d8:bd:86:3b:1b:
                    04:13:d3:15:e5:40:e4:b4:37:32:77:59:26:bb:ba:
                    68:62:1a:bf:c0:63:a2:a4:34:37:a9:04:d0:7f:62:
                    fe:73:a5:a0:06:7b:5a:1d:a7:05:79:3b:8a:84:ed:
                    9a:0f:3e:32:6a:8c:90:2b:22:a8:87:69:0e:a7:1d:
                    df:6d:29:cb:7c:9f:ec:36:64:bd:d0:93:10:84:de:
                    e2:8b:6c:74:ea:13:1c:4c:33:02:42:04:f7:e6:50:
                    4d:7f:5c:3f:a1:0a:f9:48:c3:f0:5b:0b:74:5c:47:
                    08:cc:49:ae:bd:36:83:83:ff:dc:5b:29:5b:4e:6b:
                    fa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:39:B6:82:6E:0B:32:69:FF:C2:91:11:4C:AA:39:4A:06:22:28:E3
            X509v3 Authority Key Identifier:
                keyid:53:6F:F9:97:C2:3D:05:AD:ED:CF:04:00:B5:30:86:76:CE:48:B6:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k38.rrdp-rpki.athene-center.net/repo/k38-rpki-athene-center/0/536FF997C23D05ADEDCF0400B5308676CE48B656.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/536FF997C23D05ADEDCF0400B5308676CE48B656.cer

            Subject Information Access:
                Signed Object - URI:rsync://k38.rrdp-rpki.athene-center.net/repo/k38-rpki-athene-center/0/3135382e3232302e3136372e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:0d:6b:30:1a:b3:eb:e3:c3:f0:46:a3:2d:51:ab:8b:76:12:
         da:33:48:d0:f9:c4:32:57:db:3d:03:66:0a:fa:92:c3:6a:fe:
         8f:61:25:f1:eb:a1:de:78:ff:ad:45:05:ed:5c:23:de:13:3e:
         57:7a:76:45:4e:45:c5:d3:8e:d9:6e:1c:8e:a6:dd:fa:22:68:
         0b:9e:46:4c:0d:6b:e7:36:54:7f:2c:3b:94:f2:96:45:ed:05:
         b8:ca:e4:16:2c:ab:03:8a:74:c8:42:ef:0a:18:ea:e3:99:14:
         78:67:ef:10:01:aa:8e:83:4c:c3:2d:fa:7d:98:04:76:89:47:
         01:ab:c8:a3:87:98:38:d8:90:cd:c8:87:1e:d2:61:a1:e4:78:
         90:e5:10:70:4e:9a:0d:d3:b4:96:e6:f6:52:59:52:74:d8:b6:
         80:13:bf:c0:80:e8:86:85:ff:f1:f9:14:4e:24:5c:b0:4b:51:
         19:fb:a6:a4:8a:84:40:44:53:dc:65:5e:2c:f6:e3:62:7d:63:
         ac:12:9a:c4:83:2d:6f:28:e6:2d:ba:f9:a2:76:da:75:54:16:
         67:72:96:36:d2:a9:c1:28:3a:49:94:ff:65:9f:41:a3:ea:8d:
         a3:11:f6:3c:a0:6a:96:12:cb:c9:c6:3d:e8:0e:c8:9c:ca:6c:
         d8:15:3c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 00:12:54 2024 by rpki-client on console-ams.rpki-client.org