Route Origin Authorization

$ rpki-client -vvf k40.rrdp-rpki.athene-center.net/repo/k40-rpki-athene-center/0/3135382e3232302e3136392e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3136392e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          KBHZw008VEmgvapHDNLrshTdcvRdyEx0KystbXurOSU=
Subject key identifier:   7E:18:AE:94:A1:13:9D:21:01:2E:CA:1F:39:5C:F0:BE:59:2A:58:B7
Certificate issuer:       /CN=E924753630437D6892B5B072556F15A9A619ACFF
Certificate serial:       0806A7A535D357100AAC45AEA58D5F4C8B499C6E
Authority key identifier: E9:24:75:36:30:43:7D:68:92:B5:B0:72:55:6F:15:A9:A6:19:AC:FF
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/E924753630437D6892B5B072556F15A9A619ACFF.cer
Subject info access:      rsync://k40.rrdp-rpki.athene-center.net/repo/k40-rpki-athene-center/0/3135382e3232302e3136392e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:45:14 +0000
ROA not before:           Wed 27 Mar 2024 19:40:14 +0000
ROA not after:            Wed 26 Mar 2025 19:45:14 +0000
asID:                     208162
IP address blocks:        158.220.169.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:06:a7:a5:35:d3:57:10:0a:ac:45:ae:a5:8d:5f:4c:8b:49:9c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E924753630437D6892B5B072556F15A9A619ACFF
        Validity
            Not Before: Mar 27 19:40:14 2024 GMT
            Not After : Mar 26 19:45:14 2025 GMT
        Subject: CN=7E18AE94A1139D21012ECA1F395CF0BE592A58B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:e4:a1:0d:2f:5c:11:72:d8:02:3f:7f:d2:
                    b9:7b:c2:b1:5e:a5:ef:5d:7d:d2:cb:5b:8e:b3:f0:
                    34:b1:40:ce:66:be:9b:36:9d:a0:29:10:7a:54:61:
                    5a:34:ff:63:d8:2b:d5:9f:e9:65:4c:84:bd:48:6d:
                    ec:a9:fc:6b:48:ba:f2:dd:ff:99:8c:68:74:c5:61:
                    b6:2b:4c:ec:64:e5:30:f1:f5:7e:05:76:93:d9:dc:
                    0f:69:48:df:5a:b0:06:3e:4e:b2:14:b7:71:17:76:
                    8a:1e:e2:c2:f6:a9:43:97:de:1e:76:73:0e:bd:dc:
                    99:60:0a:4c:b5:97:d4:74:86:51:b1:2a:c1:fb:d3:
                    0f:0b:be:4e:36:11:35:f5:4f:a8:98:f0:f1:9a:1f:
                    2d:29:3b:cb:be:ef:b3:e5:24:7e:c0:62:63:11:b0:
                    76:30:2d:a3:56:79:78:62:e3:5f:28:d6:a4:f2:46:
                    fc:79:f9:c8:c1:69:d0:17:7f:d0:23:5a:98:e0:c5:
                    8d:ad:b1:84:f6:80:93:c3:75:eb:5a:30:0d:59:91:
                    36:48:84:9a:11:fa:2b:25:c8:a5:68:45:ad:c9:4f:
                    af:c0:48:53:6b:d7:33:9b:5d:6a:25:c4:d0:1d:52:
                    ac:91:ad:ad:fa:d6:cb:f5:e1:55:d0:30:8d:90:ed:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:18:AE:94:A1:13:9D:21:01:2E:CA:1F:39:5C:F0:BE:59:2A:58:B7
            X509v3 Authority Key Identifier:
                keyid:E9:24:75:36:30:43:7D:68:92:B5:B0:72:55:6F:15:A9:A6:19:AC:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k40.rrdp-rpki.athene-center.net/repo/k40-rpki-athene-center/0/E924753630437D6892B5B072556F15A9A619ACFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/E924753630437D6892B5B072556F15A9A619ACFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://k40.rrdp-rpki.athene-center.net/repo/k40-rpki-athene-center/0/3135382e3232302e3136392e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:08:bf:a9:2e:34:b5:75:ec:a1:84:20:d2:98:dd:05:8b:af:
         97:6a:44:e5:40:58:e3:2c:a2:2e:36:72:3b:20:5c:7f:4d:4d:
         be:e9:25:db:dd:74:ad:7e:e9:a6:8a:5f:54:a8:b7:0a:59:a3:
         de:e2:e2:7a:2a:c6:c8:72:1e:20:59:45:e0:e3:4f:47:c0:95:
         b6:3e:3d:f1:9f:49:66:fb:bd:07:10:d1:24:b6:7f:46:7d:44:
         43:5d:7e:b6:6c:01:a5:47:8c:2d:3b:90:f5:5b:0a:51:f1:ac:
         e9:64:5e:9e:13:11:11:66:c1:ff:be:92:62:73:d4:d4:d1:dd:
         6d:51:e6:54:8c:d1:10:2a:48:5e:86:d4:48:e3:bc:86:42:00:
         35:1a:a9:71:cd:2f:42:af:40:56:a3:8c:c4:cb:79:d1:a0:89:
         f8:af:34:0e:73:c9:05:be:26:9f:a7:d1:1d:b9:19:a4:82:3f:
         dc:90:13:b0:55:3b:28:43:05:f1:e2:f1:c5:ee:1e:30:28:c6:
         8f:45:2f:cd:2c:91:73:4e:f5:41:0f:6c:ff:c8:26:9f:43:dc:
         66:49:6e:7c:82:11:0f:40:30:a9:b4:34:a4:ea:a5:f8:1e:15:
         ea:ec:17:f1:30:f8:e6:64:63:68:a3:61:fa:2a:42:01:8a:5c:
         c8:df:e6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 01:06:46 2024 by rpki-client on console-ams.rpki-client.org