Route Origin Authorization

$ rpki-client -vvf k44.rrdp-rpki.athene-center.net/repo/k44-rpki-athene-center/0/3135382e3232302e3137332e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3137332e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          8T9siqfdrDVehLzVUpskVy7oPPx2uA3omYeNZZGKTNw=
Subject key identifier:   B8:3D:A9:08:16:D9:21:BA:B1:C8:E4:E9:11:63:F1:A7:2D:4E:FF:C0
Certificate issuer:       /CN=6C5089C9B3FC5238B5753D96EFCD672F12009852
Certificate serial:       78FCFF20345E3A6328EE951137DACAA37D8D30CC
Authority key identifier: 6C:50:89:C9:B3:FC:52:38:B5:75:3D:96:EF:CD:67:2F:12:00:98:52
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/6C5089C9B3FC5238B5753D96EFCD672F12009852.cer
Subject info access:      rsync://k44.rrdp-rpki.athene-center.net/repo/k44-rpki-athene-center/0/3135382e3232302e3137332e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:45:59 +0000
ROA not before:           Wed 27 Mar 2024 19:40:59 +0000
ROA not after:            Wed 26 Mar 2025 19:45:59 +0000
asID:                     208162
IP address blocks:        158.220.173.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fc:ff:20:34:5e:3a:63:28:ee:95:11:37:da:ca:a3:7d:8d:30:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C5089C9B3FC5238B5753D96EFCD672F12009852
        Validity
            Not Before: Mar 27 19:40:59 2024 GMT
            Not After : Mar 26 19:45:59 2025 GMT
        Subject: CN=B83DA90816D921BAB1C8E4E91163F1A72D4EFFC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:12:c0:a5:39:6c:d7:9c:db:d3:89:08:7c:
                    6f:29:54:84:43:55:2d:60:6f:7b:0e:43:80:94:b4:
                    fd:33:79:a2:70:97:2b:98:70:2f:a9:d5:a2:fe:c0:
                    47:ed:f5:2e:d3:2a:fd:9a:ea:f1:42:bf:0a:e5:1c:
                    eb:3e:65:64:48:0a:3b:eb:35:63:84:6c:e0:61:9c:
                    d8:12:e7:ab:38:af:6f:30:49:fd:2e:6e:50:23:82:
                    cf:37:18:9a:77:fb:77:42:50:c2:be:9b:47:44:fb:
                    5f:c3:4b:58:57:c7:f1:93:45:70:39:14:03:94:e6:
                    34:35:ac:6c:a8:b0:87:56:86:a9:bd:a0:7d:16:63:
                    3a:cd:94:76:fa:62:55:cf:3d:66:f9:a1:e4:17:68:
                    fc:45:ac:2f:a9:1d:c6:2f:10:f6:db:32:37:1b:b5:
                    28:3b:2b:32:fb:8b:00:a7:f5:e1:e5:6c:16:78:22:
                    8e:cc:a6:55:a9:0b:27:14:20:8c:fe:de:34:a8:28:
                    95:99:54:d7:3a:5d:43:57:83:34:33:dc:1b:44:f5:
                    e8:5b:c3:e2:e1:c7:70:5f:db:e5:55:2b:df:34:4a:
                    0d:c0:95:42:94:b9:14:3d:30:cf:24:da:b9:75:59:
                    20:cc:ce:a9:c8:49:c6:a0:cb:d0:3f:dd:61:b4:04:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3D:A9:08:16:D9:21:BA:B1:C8:E4:E9:11:63:F1:A7:2D:4E:FF:C0
            X509v3 Authority Key Identifier:
                keyid:6C:50:89:C9:B3:FC:52:38:B5:75:3D:96:EF:CD:67:2F:12:00:98:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k44.rrdp-rpki.athene-center.net/repo/k44-rpki-athene-center/0/6C5089C9B3FC5238B5753D96EFCD672F12009852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/6C5089C9B3FC5238B5753D96EFCD672F12009852.cer

            Subject Information Access:
                Signed Object - URI:rsync://k44.rrdp-rpki.athene-center.net/repo/k44-rpki-athene-center/0/3135382e3232302e3137332e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:29:c6:f5:51:a1:59:f1:82:c8:53:96:0e:39:47:dc:99:1b:
         63:bb:4d:f5:23:30:cc:c7:e9:7c:64:47:75:eb:21:12:ce:c7:
         6a:13:a6:84:d9:77:83:31:88:32:9f:71:f9:0f:a5:f2:06:26:
         a6:42:fc:9d:78:45:1f:8b:78:4b:43:6c:93:f4:31:2c:50:69:
         bf:38:08:7e:78:26:20:e0:aa:29:29:f9:3b:a2:77:0b:c0:90:
         c6:33:59:f6:60:64:29:6d:64:4a:08:dc:fb:db:c3:30:11:22:
         d1:5f:54:ca:26:a8:b6:af:cd:29:92:d8:3f:a3:54:ea:62:2c:
         44:66:31:b7:f5:a0:4d:bf:9f:fc:bd:00:3d:76:fc:45:c3:4a:
         85:87:d2:97:a3:bb:de:92:8b:97:f2:6e:80:d7:f0:8d:88:b0:
         44:2d:ad:c5:1e:12:dd:16:25:5c:18:d2:5c:b7:96:b2:97:ad:
         73:50:60:40:54:54:46:ef:c0:0c:ea:f3:2b:1c:40:27:dd:56:
         f9:d1:2e:d5:6c:37:86:f1:71:a3:c6:11:ec:49:a1:34:e9:e8:
         34:b2:24:45:70:01:80:65:47:91:ff:8a:07:18:21:31:cb:9b:
         d0:f5:50:6b:16:e4:75:d8:54:de:07:7d:56:78:d6:8e:59:df:
         4f:84:df:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 00:12:54 2024 by rpki-client on console-ams.rpki-client.org