Route Origin Authorization

$ rpki-client -vvf k43.rrdp-rpki.athene-center.net/repo/k43-rpki-athene-center/0/3135382e3232302e3137322e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3137322e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          ZVJoKt9Qx/Ay3ZzErUxamNWwQWSSe72+ZstzHhJp7CA=
Subject key identifier:   4E:21:2A:7E:4E:4B:C6:4B:05:B5:0F:20:DE:DE:2C:23:66:06:32:AD
Certificate issuer:       /CN=2140E3C7B9CE2B95EA4DFB3B664DE1450EFCCC6E
Certificate serial:       3383E8CCE074F67FE7863B64E0024F592FE3470B
Authority key identifier: 21:40:E3:C7:B9:CE:2B:95:EA:4D:FB:3B:66:4D:E1:45:0E:FC:CC:6E
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/2140E3C7B9CE2B95EA4DFB3B664DE1450EFCCC6E.cer
Subject info access:      rsync://k43.rrdp-rpki.athene-center.net/repo/k43-rpki-athene-center/0/3135382e3232302e3137322e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:45:48 +0000
ROA not before:           Wed 27 Mar 2024 19:40:48 +0000
ROA not after:            Wed 26 Mar 2025 19:45:48 +0000
asID:                     208162
IP address blocks:        158.220.172.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:83:e8:cc:e0:74:f6:7f:e7:86:3b:64:e0:02:4f:59:2f:e3:47:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2140E3C7B9CE2B95EA4DFB3B664DE1450EFCCC6E
        Validity
            Not Before: Mar 27 19:40:48 2024 GMT
            Not After : Mar 26 19:45:48 2025 GMT
        Subject: CN=4E212A7E4E4BC64B05B50F20DEDE2C23660632AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:19:20:72:53:f7:f7:78:d2:4e:9e:13:9a:61:
                    3e:00:5a:28:09:be:b5:53:4f:52:d8:f0:43:a1:c5:
                    45:a5:f9:0d:69:2a:6b:1f:fa:6e:b5:84:f9:56:6b:
                    07:c2:58:a0:9e:3d:9b:75:3d:6a:57:50:9e:68:a1:
                    f1:84:01:c7:71:33:00:9b:a0:5f:b5:3b:b1:6c:47:
                    e9:55:8c:35:01:b3:a6:9f:5a:1b:f1:5b:9d:b8:b8:
                    fb:c9:3c:93:02:8c:f6:d8:a4:98:11:50:3c:84:34:
                    41:2b:c0:be:11:6d:f6:dd:62:da:9a:59:a6:49:38:
                    49:f7:40:56:66:3d:0c:58:d4:9e:1d:ec:30:23:e2:
                    48:a1:29:a6:f1:68:25:be:91:58:37:3c:28:13:91:
                    cf:0e:0b:32:66:a7:e8:c7:80:64:33:f9:22:6b:43:
                    f7:06:4a:8c:b0:76:6e:54:42:98:fb:fb:3b:64:4a:
                    18:ed:2a:a3:67:c8:23:56:fc:e1:91:52:4e:dd:d3:
                    ff:d0:40:bd:69:d9:fa:18:ce:3f:8d:3e:bf:d5:52:
                    b2:6f:9f:4f:7d:2e:00:79:f0:0f:14:89:b5:d2:c8:
                    b2:10:bd:84:23:fb:3e:80:22:6a:30:8f:23:7b:a8:
                    6b:20:46:fe:f5:6b:f0:62:06:a5:de:ce:d0:7d:5c:
                    9f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:21:2A:7E:4E:4B:C6:4B:05:B5:0F:20:DE:DE:2C:23:66:06:32:AD
            X509v3 Authority Key Identifier:
                keyid:21:40:E3:C7:B9:CE:2B:95:EA:4D:FB:3B:66:4D:E1:45:0E:FC:CC:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k43.rrdp-rpki.athene-center.net/repo/k43-rpki-athene-center/0/2140E3C7B9CE2B95EA4DFB3B664DE1450EFCCC6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/2140E3C7B9CE2B95EA4DFB3B664DE1450EFCCC6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://k43.rrdp-rpki.athene-center.net/repo/k43-rpki-athene-center/0/3135382e3232302e3137322e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:ea:79:6b:ed:d2:c1:40:c7:2d:c7:fe:3b:d0:53:c1:38:99:
         4b:ed:e4:d2:09:32:60:81:92:d8:53:b8:7d:43:5c:41:2c:9c:
         3b:cb:6d:44:76:38:a0:f0:a6:83:94:14:cb:d3:c8:79:11:e5:
         08:89:34:3c:74:6d:48:4b:79:6f:db:93:c5:28:0e:6f:65:72:
         0d:4d:7f:15:14:38:89:84:56:d0:df:45:89:27:6f:99:b3:4c:
         4f:74:dc:48:51:30:92:61:ae:27:62:65:e5:c5:94:81:55:be:
         2e:de:79:0a:b3:a7:55:73:77:41:8c:d4:3a:ec:fd:4e:bf:d7:
         82:53:57:2b:7d:7d:3d:15:f9:06:00:20:d1:ba:a5:38:89:62:
         1d:5f:e1:44:d2:bc:5f:90:49:f7:f4:93:52:85:ec:a5:5d:18:
         c2:bb:31:98:44:2f:44:7b:bb:f0:55:1c:6d:94:d8:74:6b:2f:
         2c:cc:39:99:2c:23:5b:69:d1:32:30:d8:1d:d1:59:ce:f2:97:
         68:99:0c:bb:5c:97:5e:85:53:06:af:31:bf:0e:49:45:a0:55:
         95:bc:38:b0:89:bb:56:43:50:2b:1d:dd:91:52:46:83:df:7d:
         36:a0:9f:01:a3:45:30:8d:c8:9d:40:2a:ed:ce:32:c0:0d:d9:
         44:f1:02:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 00:12:54 2024 by rpki-client on console-ams.rpki-client.org