Route Origin Authorization

$ rpki-client -vvf k39.rrdp-rpki.athene-center.net/repo/k39-rpki-athene-center/0/3135382e3232302e3136382e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3136382e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          xLH6hspr5P2Ra3e87AnFPB9ZeKwXqBqlKc7CH6zxHXg=
Subject key identifier:   05:B8:DF:C7:14:A5:2D:0A:26:08:75:4D:24:A9:76:4A:B8:D9:99:CE
Certificate issuer:       /CN=AD24010B161A3175886666D6C91C5AC55C096FA9
Certificate serial:       74D7704552877FC530F64C00C4B3FC9912869E5E
Authority key identifier: AD:24:01:0B:16:1A:31:75:88:66:66:D6:C9:1C:5A:C5:5C:09:6F:A9
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/AD24010B161A3175886666D6C91C5AC55C096FA9.cer
Subject info access:      rsync://k39.rrdp-rpki.athene-center.net/repo/k39-rpki-athene-center/0/3135382e3232302e3136382e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:45:03 +0000
ROA not before:           Wed 27 Mar 2024 19:40:03 +0000
ROA not after:            Wed 26 Mar 2025 19:45:03 +0000
asID:                     208162
IP address blocks:        158.220.168.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d7:70:45:52:87:7f:c5:30:f6:4c:00:c4:b3:fc:99:12:86:9e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD24010B161A3175886666D6C91C5AC55C096FA9
        Validity
            Not Before: Mar 27 19:40:03 2024 GMT
            Not After : Mar 26 19:45:03 2025 GMT
        Subject: CN=05B8DFC714A52D0A2608754D24A9764AB8D999CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:67:1e:0d:7d:bf:25:c9:8c:8d:e5:4c:48:
                    81:c3:ff:0b:2f:c5:67:38:00:96:e3:a2:f7:c1:a0:
                    99:20:7e:e2:fa:e0:91:f0:c2:95:2c:18:53:4c:15:
                    ae:c4:b8:12:f7:b2:26:39:a2:0e:83:b7:50:80:17:
                    12:92:5f:8e:4d:13:4f:aa:08:76:ce:e9:98:dc:7e:
                    67:40:ed:47:69:30:7d:30:9e:3a:7e:21:fa:49:cc:
                    4d:b1:93:f7:cd:22:ce:8b:bc:f3:de:f5:fa:8e:2f:
                    74:a8:a1:ee:3e:2e:15:35:30:01:e0:75:25:fd:61:
                    bc:ed:eb:fa:1f:f8:8f:46:cf:a9:ce:68:10:b5:8a:
                    f0:57:88:bb:ea:0d:3d:d0:97:42:c0:99:23:86:64:
                    34:23:cd:ba:79:1a:24:ed:38:6e:20:3b:fe:c4:5e:
                    3e:a7:05:ec:92:aa:26:92:77:a7:9a:ed:67:50:c4:
                    1f:8d:e8:62:ce:7c:36:e8:18:06:3e:c2:19:17:a8:
                    e7:fe:d9:dd:bb:f1:b5:3f:4a:a6:fd:62:b6:5e:40:
                    e7:3a:85:f2:0b:7f:fa:e4:95:61:ef:3e:9b:40:90:
                    ea:1a:eb:1d:0d:39:61:8f:4f:3e:db:26:7c:b8:63:
                    6f:54:08:82:1a:43:ee:b0:4b:06:8f:f2:0f:34:0e:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B8:DF:C7:14:A5:2D:0A:26:08:75:4D:24:A9:76:4A:B8:D9:99:CE
            X509v3 Authority Key Identifier:
                keyid:AD:24:01:0B:16:1A:31:75:88:66:66:D6:C9:1C:5A:C5:5C:09:6F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k39.rrdp-rpki.athene-center.net/repo/k39-rpki-athene-center/0/AD24010B161A3175886666D6C91C5AC55C096FA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/AD24010B161A3175886666D6C91C5AC55C096FA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://k39.rrdp-rpki.athene-center.net/repo/k39-rpki-athene-center/0/3135382e3232302e3136382e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:3f:d1:53:0f:18:7d:8d:94:f4:f8:d1:92:bb:6d:80:a6:ba:
         ba:bb:8a:b7:6c:82:39:8a:ce:74:73:74:e9:44:3c:0f:65:18:
         db:3a:f7:b3:d3:af:21:12:45:39:74:9a:45:58:20:96:37:3d:
         24:58:d8:c2:f6:8f:e1:fd:b9:46:f3:a3:81:06:fe:60:e5:4c:
         f4:96:00:e8:40:c1:96:2a:4d:8a:93:c1:0d:ad:52:3c:81:53:
         f0:37:b8:29:cd:20:ec:19:a7:a6:8e:74:c8:a5:b3:43:99:cc:
         4d:bd:75:98:e3:9f:8f:44:e7:0b:8f:3c:38:37:a8:27:c7:e6:
         06:3f:8f:7c:1a:32:9f:58:c2:f9:c7:3a:48:06:c0:1b:33:e9:
         c0:b3:99:3c:cd:be:98:6f:4f:cc:38:98:68:75:93:8a:b4:f3:
         24:f0:56:a8:ba:26:67:a6:b3:18:45:f5:20:a5:f9:37:0c:a7:
         07:72:97:34:38:2d:0b:4b:7b:06:c9:c3:e8:38:5f:c8:2e:d0:
         aa:26:20:16:21:3b:4c:ea:aa:9f:01:11:55:e3:a0:1a:7f:ad:
         0b:a0:03:2f:91:23:bf:06:09:84:95:29:9a:ea:31:d3:75:05:
         e5:dc:85:ae:29:4e:92:a3:12:00:28:87:ab:63:f9:56:fe:99:
         e0:72:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 22:21:52 2024 by rpki-client on console-ams.rpki-client.org