Route Origin Authorization

$ rpki-client -vvf k42.rrdp-rpki.athene-center.net/repo/k42-rpki-athene-center/0/3135382e3232302e3137312e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3137312e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          Yd9HqF+ISutmPnL3SKICbdBTzwv3aXePYxQPB6CZxRA=
Subject key identifier:   8F:1A:30:48:CC:F4:86:61:C4:34:63:CA:43:E2:2D:3E:42:EB:50:FA
Certificate issuer:       /CN=34EC8859AADFB06C622C77103B5DF2E35F3246FC
Certificate serial:       1E5779E650595EDF258CE313368E50B643448ECF
Authority key identifier: 34:EC:88:59:AA:DF:B0:6C:62:2C:77:10:3B:5D:F2:E3:5F:32:46:FC
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/34EC8859AADFB06C622C77103B5DF2E35F3246FC.cer
Subject info access:      rsync://k42.rrdp-rpki.athene-center.net/repo/k42-rpki-athene-center/0/3135382e3232302e3137312e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:45:37 +0000
ROA not before:           Wed 27 Mar 2024 19:40:37 +0000
ROA not after:            Wed 26 Mar 2025 19:45:37 +0000
asID:                     208162
IP address blocks:        158.220.171.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:57:79:e6:50:59:5e:df:25:8c:e3:13:36:8e:50:b6:43:44:8e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34EC8859AADFB06C622C77103B5DF2E35F3246FC
        Validity
            Not Before: Mar 27 19:40:37 2024 GMT
            Not After : Mar 26 19:45:37 2025 GMT
        Subject: CN=8F1A3048CCF48661C43463CA43E22D3E42EB50FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:19:d6:08:93:ed:8d:61:d8:21:2f:91:3e:82:
                    38:c5:df:be:fd:70:c8:72:80:dd:02:66:79:6a:0c:
                    78:b9:79:7c:ca:c4:04:11:21:17:2f:3e:5a:f2:30:
                    32:c3:99:88:cf:28:da:4a:de:9e:63:00:62:6f:bb:
                    36:31:55:d8:ad:0e:75:71:56:dc:21:f8:f9:0f:57:
                    85:17:23:6a:04:bb:26:3f:df:90:4e:94:17:82:24:
                    d2:77:b4:fd:4e:71:7b:e5:47:44:de:a3:18:b3:1d:
                    20:0c:cf:89:a2:07:a3:ce:54:29:18:44:38:ea:1a:
                    b5:fc:59:7c:b8:c8:93:b4:1a:a9:b3:fc:f6:2c:2c:
                    96:0d:67:16:f2:a7:ed:9f:a8:43:ff:2a:09:af:c4:
                    62:39:10:dc:80:c1:ef:b3:64:c4:6e:79:11:01:71:
                    c9:cc:d6:f2:5c:ef:f3:e9:44:f6:48:92:8e:d8:f3:
                    cc:e3:40:f3:57:f0:4c:16:fa:ca:45:c9:1c:7b:3c:
                    c5:b2:dd:20:0f:b0:1a:80:65:9b:49:ed:e0:c1:52:
                    f8:70:8b:5a:e5:38:88:e0:ed:6e:f4:ce:8b:d6:ce:
                    2c:ad:f5:71:0b:f5:5c:ee:7f:0e:61:5b:0c:19:9c:
                    9a:b2:ec:65:00:62:40:2e:39:e4:c1:d2:29:56:14:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1A:30:48:CC:F4:86:61:C4:34:63:CA:43:E2:2D:3E:42:EB:50:FA
            X509v3 Authority Key Identifier:
                keyid:34:EC:88:59:AA:DF:B0:6C:62:2C:77:10:3B:5D:F2:E3:5F:32:46:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k42.rrdp-rpki.athene-center.net/repo/k42-rpki-athene-center/0/34EC8859AADFB06C622C77103B5DF2E35F3246FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/34EC8859AADFB06C622C77103B5DF2E35F3246FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://k42.rrdp-rpki.athene-center.net/repo/k42-rpki-athene-center/0/3135382e3232302e3137312e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:e0:d2:70:fa:cc:be:89:1f:17:be:cc:91:88:eb:46:43:da:
         14:df:d7:53:55:03:d8:ba:17:5b:67:88:4e:10:ba:69:37:91:
         8c:45:4e:83:96:09:5e:8b:94:22:4c:92:6f:b0:5b:43:12:47:
         f2:f1:06:de:85:16:5b:e5:bc:b6:2b:88:6e:c6:86:60:40:d0:
         fa:83:8a:9e:81:97:72:0a:be:56:c8:5e:d1:0e:ab:3d:b4:56:
         62:ac:cc:be:4a:f7:00:ca:99:3c:c4:fc:91:7e:e3:82:3d:cd:
         7c:90:49:28:c4:b8:47:aa:24:2d:3e:05:8c:a0:95:22:24:f4:
         5f:70:a0:a2:8e:ae:3e:3b:9c:38:b8:13:6b:1c:fa:e4:a5:51:
         5d:2c:b6:34:50:8c:82:91:e7:2b:6c:39:5e:8c:10:d2:a5:e4:
         88:d2:53:d4:61:30:4f:89:67:cf:54:0b:26:a0:c0:b1:1c:80:
         b6:91:81:5a:a3:c9:48:94:02:0b:00:c5:7a:76:7a:d8:13:be:
         67:e8:8e:3b:87:3b:ad:68:6e:28:d9:cc:33:ea:04:f9:88:39:
         cb:d8:71:b6:f6:f6:72:04:a6:ff:ff:53:aa:b1:18:c4:58:86:
         9a:cd:fa:c9:56:72:5c:e4:12:30:2e:c2:9d:af:0d:53:83:3e:
         1a:20:53:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 23:24:03 2024 by rpki-client on console-ams.rpki-client.org