Route Origin Authorization

$ rpki-client -vvf k49.rrdp-rpki.athene-center.net/repo/k49-rpki-athene-center/0/3135382e3232302e3137382e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3137382e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          vTmlC+VCEvM7S0z8KfzJ8O25eipOIh4ntAzzpnRB7oA=
Subject key identifier:   8D:EF:86:41:36:EB:68:65:CF:8A:41:F4:AB:5A:D7:FB:1E:D4:71:A6
Certificate issuer:       /CN=007D0057347E6C5710E57B0BA845A9B010C18B87
Certificate serial:       05809A27F462DC58A1294DCF289F8348BE5B173E
Authority key identifier: 00:7D:00:57:34:7E:6C:57:10:E5:7B:0B:A8:45:A9:B0:10:C1:8B:87
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/007D0057347E6C5710E57B0BA845A9B010C18B87.cer
Subject info access:      rsync://k49.rrdp-rpki.athene-center.net/repo/k49-rpki-athene-center/0/3135382e3232302e3137382e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:46:56 +0000
ROA not before:           Wed 27 Mar 2024 19:41:56 +0000
ROA not after:            Wed 26 Mar 2025 19:46:56 +0000
asID:                     208162
IP address blocks:        158.220.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:80:9a:27:f4:62:dc:58:a1:29:4d:cf:28:9f:83:48:be:5b:17:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007D0057347E6C5710E57B0BA845A9B010C18B87
        Validity
            Not Before: Mar 27 19:41:56 2024 GMT
            Not After : Mar 26 19:46:56 2025 GMT
        Subject: CN=8DEF864136EB6865CF8A41F4AB5AD7FB1ED471A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f2:55:ab:15:40:3e:85:0e:06:fb:0c:ee:e8:
                    f6:60:93:49:b7:b7:bd:11:ec:6d:9d:33:12:f6:ef:
                    73:07:9d:7f:f3:56:d5:98:70:b7:05:1d:30:0e:e7:
                    be:60:5e:15:7a:87:7c:38:9d:6b:a3:e6:95:87:12:
                    78:12:a3:a7:df:a4:2a:d2:0d:b0:e0:43:86:cd:2e:
                    27:e6:57:01:14:ef:c0:42:53:ad:b2:91:37:a3:e9:
                    3f:81:9d:16:97:d7:9a:eb:0b:0e:25:1b:2b:0e:04:
                    76:23:b0:8e:d9:8b:54:4b:f8:49:62:24:fd:4a:ee:
                    1f:07:38:94:7e:87:e4:10:73:b4:1e:e2:e8:a6:e8:
                    2c:81:7b:e7:9b:ca:b6:26:bb:28:55:e7:f2:c6:62:
                    99:c2:99:d2:a3:aa:f6:92:c3:ae:ad:74:9f:d9:67:
                    f3:05:53:6d:08:38:b3:09:f3:08:ca:51:81:a4:73:
                    a3:e0:e9:27:56:b0:79:6c:fe:ed:c8:55:a1:44:b5:
                    7f:e2:bb:64:66:18:99:4c:40:5d:ab:0c:e5:b9:5e:
                    29:d9:cb:36:08:ad:fd:3c:59:7b:67:8d:e0:ee:ad:
                    73:5d:87:f8:e1:6c:bb:ee:b3:52:6b:03:d5:e9:7b:
                    3f:d2:e2:08:7a:0f:41:02:ff:2a:4e:a3:fa:1e:f2:
                    51:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EF:86:41:36:EB:68:65:CF:8A:41:F4:AB:5A:D7:FB:1E:D4:71:A6
            X509v3 Authority Key Identifier:
                keyid:00:7D:00:57:34:7E:6C:57:10:E5:7B:0B:A8:45:A9:B0:10:C1:8B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k49.rrdp-rpki.athene-center.net/repo/k49-rpki-athene-center/0/007D0057347E6C5710E57B0BA845A9B010C18B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/007D0057347E6C5710E57B0BA845A9B010C18B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://k49.rrdp-rpki.athene-center.net/repo/k49-rpki-athene-center/0/3135382e3232302e3137382e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:83:b1:0a:56:5b:db:5b:5a:48:b9:2f:63:f7:3b:d4:57:27:
         79:4a:af:b6:51:b5:21:09:ec:ae:53:76:a3:13:cf:58:92:86:
         6e:1c:e2:4e:be:75:2a:4b:99:74:85:d5:50:05:4e:e5:0a:45:
         56:a3:47:fb:bd:f5:0c:d5:b5:bd:d2:b7:8a:30:54:0d:92:f2:
         b6:db:34:4a:fb:a0:4e:90:69:a0:5b:e5:ea:4e:8f:76:69:18:
         7c:7f:fe:f9:ef:d5:64:38:f1:5a:c7:6e:ff:74:b8:57:9d:0c:
         97:ee:ea:3d:e1:cf:c0:8e:3c:f6:0f:3a:f6:2d:1a:47:44:33:
         cb:ea:e4:71:1c:2e:95:f8:f7:f0:7e:ac:fd:3f:ba:29:da:67:
         b6:9d:0f:2d:88:f5:c0:af:75:e3:fa:b8:01:de:d4:0d:93:ad:
         ba:97:07:9b:06:49:7f:b0:33:2d:0e:17:ab:bf:11:3b:bf:b0:
         cb:a2:a6:41:23:d3:69:5f:c8:fc:8a:71:e9:81:73:b7:8c:a1:
         3b:fe:18:4d:e0:a4:fe:c0:1e:76:8c:6a:07:d3:35:b9:97:ae:
         a5:9f:f8:42:e0:b9:27:33:da:10:2b:b9:fd:f6:b5:22:c0:47:
         90:d6:7c:e2:16:59:84:2e:f7:b8:a2:52:63:79:69:23:f8:8f:
         e2:28:a4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org