Route Origin Authorization

$ rpki-client -vvf k55.rrdp-rpki.athene-center.net/repo/k55-rpki-athene-center/0/3135382e3232302e3138342e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3138342e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          43GgK2A6oQYAFcNR5yNWTv7LwjroBI1yLGuaDwofLDc=
Subject key identifier:   90:BE:E5:AD:7A:99:71:B3:15:7E:30:27:B7:66:1A:C8:08:AD:DC:CB
Certificate issuer:       /CN=86102552CEB7B942CDA68882633DD8CEE81BEB83
Certificate serial:       70D21A1914666474C5907525D9D5BCFD95898B08
Authority key identifier: 86:10:25:52:CE:B7:B9:42:CD:A6:88:82:63:3D:D8:CE:E8:1B:EB:83
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/86102552CEB7B942CDA68882633DD8CEE81BEB83.cer
Subject info access:      rsync://k55.rrdp-rpki.athene-center.net/repo/k55-rpki-athene-center/0/3135382e3232302e3138342e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:48:04 +0000
ROA not before:           Wed 27 Mar 2024 19:43:04 +0000
ROA not after:            Wed 26 Mar 2025 19:48:04 +0000
asID:                     208162
IP address blocks:        158.220.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d2:1a:19:14:66:64:74:c5:90:75:25:d9:d5:bc:fd:95:89:8b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86102552CEB7B942CDA68882633DD8CEE81BEB83
        Validity
            Not Before: Mar 27 19:43:04 2024 GMT
            Not After : Mar 26 19:48:04 2025 GMT
        Subject: CN=90BEE5AD7A9971B3157E3027B7661AC808ADDCCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:c9:b0:fd:b8:d0:95:e0:cd:d7:c8:63:9d:
                    0f:0f:85:1c:a2:9c:ab:a4:29:4a:ef:bf:f8:f6:b2:
                    08:50:a8:e3:58:f1:d2:9c:aa:e1:8a:e3:d5:a6:92:
                    40:3e:d2:fe:af:f8:1b:0b:3f:42:75:14:21:58:9d:
                    14:4b:9b:88:e1:ac:26:01:06:20:2f:d1:7f:99:d5:
                    57:aa:3c:e3:d1:93:a2:8b:76:ad:6f:9c:41:19:45:
                    44:b6:4d:1c:b9:3e:63:19:cd:f6:6f:c0:e9:6a:a1:
                    80:c0:a3:15:8a:66:30:a2:05:ba:90:0d:d4:5a:dd:
                    fa:71:c2:05:a8:e4:87:15:09:bf:8f:2f:7a:16:c8:
                    5a:29:b9:62:1f:6b:f6:dc:a8:8d:fa:c8:05:aa:b1:
                    f6:c4:a1:1a:e9:2e:9d:cd:93:eb:1f:14:54:73:80:
                    4f:95:a3:59:a4:90:1d:a2:d5:06:4f:d3:b8:56:35:
                    f5:41:84:ba:9d:87:2e:1a:be:e3:c9:be:c1:78:6c:
                    d7:29:e6:fd:c7:5b:43:cd:ea:f0:61:2a:d2:a5:6d:
                    56:8a:78:21:3c:28:d8:ab:64:a9:64:0e:99:0c:e5:
                    26:9c:b2:0a:db:da:b9:7e:c6:e0:e2:d2:f7:95:28:
                    a1:7b:19:c3:07:8b:e9:f9:f4:57:06:fe:cd:3b:f4:
                    3b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BE:E5:AD:7A:99:71:B3:15:7E:30:27:B7:66:1A:C8:08:AD:DC:CB
            X509v3 Authority Key Identifier:
                keyid:86:10:25:52:CE:B7:B9:42:CD:A6:88:82:63:3D:D8:CE:E8:1B:EB:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k55.rrdp-rpki.athene-center.net/repo/k55-rpki-athene-center/0/86102552CEB7B942CDA68882633DD8CEE81BEB83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/86102552CEB7B942CDA68882633DD8CEE81BEB83.cer

            Subject Information Access:
                Signed Object - URI:rsync://k55.rrdp-rpki.athene-center.net/repo/k55-rpki-athene-center/0/3135382e3232302e3138342e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:6f:02:89:15:5d:a6:4e:ea:df:66:27:f5:16:48:7e:da:9d:
         a9:ce:76:fd:8e:ea:e8:41:e3:b6:83:13:88:8d:d3:09:6b:41:
         99:a9:92:d7:66:6d:e2:74:51:33:12:2e:53:50:3d:3a:3e:8e:
         89:e1:60:e2:14:fb:d7:ea:91:eb:15:14:66:ab:63:e7:79:59:
         d7:0f:68:2f:d4:50:dd:43:61:8f:06:ea:0a:ae:8a:63:d6:4b:
         5f:ec:d7:03:c3:9c:7d:fc:b2:8b:e4:79:e1:9a:78:91:00:3a:
         cb:01:6a:ce:f1:a2:7d:8d:02:e8:65:04:19:8c:8c:1e:96:be:
         43:fd:3b:e2:14:fe:b8:d1:9f:d7:93:98:fd:31:26:22:18:c2:
         4f:1a:5f:d3:68:12:79:2d:bd:06:78:d9:b6:0e:d5:f4:4f:88:
         b4:e4:b5:ae:de:e3:9d:53:c6:06:3e:93:66:62:fd:54:09:48:
         8f:08:99:0b:d3:18:5d:75:be:ea:2a:3b:86:1e:f2:76:11:9b:
         fe:16:c6:73:71:4f:9b:8c:99:74:5f:09:6a:8f:ba:91:a6:d0:
         f5:6a:a9:de:0b:c6:f8:81:ac:9b:48:20:a2:ca:08:12:7c:e1:
         6f:f4:1a:fc:4e:85:18:83:1f:2e:b3:01:3b:fc:06:d4:1b:5a:
         85:5f:1b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org