Route Origin Authorization

$ rpki-client -vvf k52.rrdp-rpki.athene-center.net/repo/k52-rpki-athene-center/0/3135382e3232302e3138312e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3138312e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          VDUumFuAjTxwqqRLo/4NbYyrkGKsz3ATMuhnKJuadvU=
Subject key identifier:   C9:49:63:76:5F:5C:D5:20:1E:FD:CF:EB:5E:70:A4:BC:1A:A5:5A:7E
Certificate issuer:       /CN=BB20C58E52A617D4D0F4F3F3A1370A62BA156240
Certificate serial:       0EE665FD0C84B8DCAF982123C58063D5CB501544
Authority key identifier: BB:20:C5:8E:52:A6:17:D4:D0:F4:F3:F3:A1:37:0A:62:BA:15:62:40
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/BB20C58E52A617D4D0F4F3F3A1370A62BA156240.cer
Subject info access:      rsync://k52.rrdp-rpki.athene-center.net/repo/k52-rpki-athene-center/0/3135382e3232302e3138312e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:47:30 +0000
ROA not before:           Wed 27 Mar 2024 19:42:30 +0000
ROA not after:            Wed 26 Mar 2025 19:47:30 +0000
asID:                     208162
IP address blocks:        158.220.181.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e6:65:fd:0c:84:b8:dc:af:98:21:23:c5:80:63:d5:cb:50:15:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB20C58E52A617D4D0F4F3F3A1370A62BA156240
        Validity
            Not Before: Mar 27 19:42:30 2024 GMT
            Not After : Mar 26 19:47:30 2025 GMT
        Subject: CN=C94963765F5CD5201EFDCFEB5E70A4BC1AA55A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:2b:cd:a3:08:77:25:ff:30:87:d8:4e:6b:ab:
                    2d:8f:5a:28:2b:af:9e:74:73:2b:b8:57:5b:be:a9:
                    40:3a:74:e1:0f:9f:37:81:62:20:e6:25:e1:6f:ec:
                    b5:b9:a6:7f:22:bb:58:dc:71:36:08:90:4f:d7:58:
                    12:4a:2d:a8:c6:b0:7b:4a:4e:e1:75:00:88:2c:01:
                    f9:c6:66:68:14:7d:0e:63:a5:2a:f8:fb:77:6c:81:
                    27:62:8b:69:c8:bc:d9:28:0c:56:ad:ad:9d:42:23:
                    74:02:c0:22:7b:90:34:35:83:a5:d6:ab:0d:d7:c9:
                    02:3b:3b:e2:be:43:c7:cd:0d:b6:02:02:88:9c:a2:
                    e4:dc:57:9c:cd:c8:26:71:6e:0e:78:2c:47:c1:91:
                    26:c6:55:33:da:3d:23:93:6b:b5:98:db:cd:e8:46:
                    96:17:59:07:f8:a4:94:9e:e9:98:cf:c3:94:60:79:
                    75:d7:24:3f:a8:b3:47:68:35:b7:6b:1b:6d:9b:70:
                    16:bf:6c:00:06:de:ef:3f:41:25:af:08:ce:d0:e3:
                    a1:49:07:bb:45:18:21:11:34:85:2b:02:fe:ec:79:
                    ab:a0:03:d7:a1:6a:86:e1:80:77:1d:6d:50:e3:96:
                    43:af:0c:8a:14:52:96:4d:65:f3:9e:8d:7b:62:e4:
                    76:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:49:63:76:5F:5C:D5:20:1E:FD:CF:EB:5E:70:A4:BC:1A:A5:5A:7E
            X509v3 Authority Key Identifier:
                keyid:BB:20:C5:8E:52:A6:17:D4:D0:F4:F3:F3:A1:37:0A:62:BA:15:62:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k52.rrdp-rpki.athene-center.net/repo/k52-rpki-athene-center/0/BB20C58E52A617D4D0F4F3F3A1370A62BA156240.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/BB20C58E52A617D4D0F4F3F3A1370A62BA156240.cer

            Subject Information Access:
                Signed Object - URI:rsync://k52.rrdp-rpki.athene-center.net/repo/k52-rpki-athene-center/0/3135382e3232302e3138312e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:54:05:da:1d:4c:c1:ab:14:48:bf:e3:ea:bb:58:ed:16:70:
         47:89:bd:08:0e:0a:4f:f4:f5:f4:bb:42:55:fe:72:e3:66:4a:
         d3:d4:c7:e7:ea:c4:67:6c:79:5a:56:c4:0b:02:eb:99:22:57:
         a8:59:0a:b6:45:af:a7:f4:a2:22:03:cb:5e:e0:0a:f3:40:e0:
         cc:2e:fd:46:d4:a5:85:3d:e2:90:c5:9a:87:17:ab:f6:31:b0:
         2c:91:a8:9c:91:2c:32:04:15:04:7b:96:72:61:76:d1:06:c6:
         c6:99:64:79:7c:27:ff:dc:e7:61:8b:50:7e:97:5e:a4:1c:25:
         dc:18:a8:cd:fc:8b:a5:9a:fb:68:46:56:3a:bc:a4:5d:d9:ec:
         57:38:e2:e4:ac:2b:96:15:79:67:90:fd:81:03:34:45:7c:40:
         de:b4:c8:d8:aa:cc:5d:94:e7:31:94:c7:06:8e:28:28:5b:d2:
         ea:cb:83:9e:2d:9c:0d:d6:fa:64:29:d5:0c:89:28:7f:48:c7:
         36:b2:19:75:1b:6c:f4:c9:63:c4:cf:a3:d1:ec:2a:51:6d:2b:
         5c:a2:7e:87:56:62:9a:8c:f5:d7:f2:6a:70:62:f4:15:a3:0c:
         94:02:b7:b9:3b:aa:2c:86:20:c3:9c:d5:cf:b8:40:0f:ce:05:
         8b:46:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 22:21:52 2024 by rpki-client on console-ams.rpki-client.org