Route Origin Authorization

$ rpki-client -vvf k57.rrdp-rpki.athene-center.net/repo/k57-rpki-athene-center/0/3135382e3232302e3138362e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3138362e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          owpp+7uDAsTTYIIPNLCqCc23+w6F+hei18oMY0u1oQA=
Subject key identifier:   39:B4:EE:C5:BF:8D:85:EF:7B:E8:1D:E4:23:88:83:AB:2D:47:CF:CE
Certificate issuer:       /CN=BD40553A08ED42AA541C56885640926F296C0A11
Certificate serial:       46DB8C8871D6E03921E839C0DC16574C0571B0E2
Authority key identifier: BD:40:55:3A:08:ED:42:AA:54:1C:56:88:56:40:92:6F:29:6C:0A:11
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/BD40553A08ED42AA541C56885640926F296C0A11.cer
Subject info access:      rsync://k57.rrdp-rpki.athene-center.net/repo/k57-rpki-athene-center/0/3135382e3232302e3138362e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:48:26 +0000
ROA not before:           Wed 27 Mar 2024 19:43:26 +0000
ROA not after:            Wed 26 Mar 2025 19:48:26 +0000
asID:                     208162
IP address blocks:        158.220.186.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:db:8c:88:71:d6:e0:39:21:e8:39:c0:dc:16:57:4c:05:71:b0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD40553A08ED42AA541C56885640926F296C0A11
        Validity
            Not Before: Mar 27 19:43:26 2024 GMT
            Not After : Mar 26 19:48:26 2025 GMT
        Subject: CN=39B4EEC5BF8D85EF7BE81DE4238883AB2D47CFCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:71:54:dd:18:c3:41:b1:1f:9a:e9:a7:11:
                    a8:20:5e:a9:45:43:32:1f:16:c8:c4:c6:99:2c:cf:
                    ba:d6:00:96:f0:07:4c:10:8a:58:e8:60:e7:e8:13:
                    06:7a:28:91:90:de:14:76:de:f7:d4:d8:3d:1e:62:
                    c3:9b:34:ea:9e:43:6b:6f:d5:a2:0f:1a:8e:f5:3b:
                    34:cc:38:7d:80:c6:be:a2:77:f5:10:ac:27:91:ca:
                    69:fa:b2:72:18:65:8e:48:70:88:99:be:0f:90:4d:
                    e6:b3:d9:7c:1e:75:05:0a:32:74:29:0c:57:92:b5:
                    18:b2:68:9f:14:fc:f1:98:0b:ce:75:f1:0d:91:f1:
                    d8:e8:a8:c4:7c:a1:36:6e:55:ce:e9:22:f8:11:f0:
                    14:4d:e2:21:2e:ed:fa:af:59:41:bb:1d:9d:a0:4e:
                    78:c2:37:75:90:f7:d5:9c:01:37:e2:63:d4:f9:d6:
                    9f:25:2d:f9:3c:ee:15:76:bc:a3:c4:09:81:69:ae:
                    cf:71:e0:25:5b:e1:a2:6c:72:04:13:29:09:e4:6c:
                    ee:28:07:19:02:61:bc:0c:84:8a:df:08:2a:f9:df:
                    87:9f:d3:22:48:5b:a0:ed:2f:12:54:d1:67:a0:bd:
                    57:e5:9b:e6:0a:51:6f:35:90:0a:eb:d8:42:c6:ac:
                    68:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B4:EE:C5:BF:8D:85:EF:7B:E8:1D:E4:23:88:83:AB:2D:47:CF:CE
            X509v3 Authority Key Identifier:
                keyid:BD:40:55:3A:08:ED:42:AA:54:1C:56:88:56:40:92:6F:29:6C:0A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k57.rrdp-rpki.athene-center.net/repo/k57-rpki-athene-center/0/BD40553A08ED42AA541C56885640926F296C0A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/BD40553A08ED42AA541C56885640926F296C0A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://k57.rrdp-rpki.athene-center.net/repo/k57-rpki-athene-center/0/3135382e3232302e3138362e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:73:be:24:16:f7:91:80:37:5c:20:9d:25:5c:e8:d8:c3:47:
         8e:2f:99:c4:aa:e3:36:4c:22:c8:8a:84:f6:81:11:89:a3:bc:
         d5:d5:33:7f:f5:45:b6:f4:28:20:6f:93:84:3f:5a:09:f4:ce:
         54:97:96:7a:c9:05:e6:8e:bf:2e:d5:70:f1:29:ed:f9:56:b9:
         b9:8b:f2:f1:0e:b6:f4:69:d2:48:fc:6b:71:81:16:b8:14:1d:
         ed:fa:6e:92:2b:0a:7c:10:c9:7d:ea:87:f1:71:24:6e:8e:9b:
         26:00:3b:a1:92:48:bf:9c:69:49:42:b7:9f:3e:11:be:f7:9f:
         81:07:9e:0f:f4:4d:c5:b0:2b:59:3b:d0:f7:ee:69:c2:fa:aa:
         8b:25:a1:3a:59:54:ac:d6:33:5b:2c:e9:8e:ff:2d:f2:39:48:
         1c:a8:54:60:5c:9e:7d:57:37:6a:bb:8a:6e:b5:c7:a5:9a:1a:
         12:fd:26:b8:d4:e0:8f:a1:3e:c5:f8:54:02:52:8d:65:2d:85:
         3d:8f:37:f2:23:b9:b1:8b:12:2f:97:04:9b:ad:e6:c3:b1:6a:
         ef:d9:66:85:d3:64:a5:67:71:17:94:05:c6:f9:00:9e:a5:aa:
         b9:45:36:73:ad:54:5d:a8:61:7c:b8:a0:2a:a9:52:85:5b:42:
         bf:ae:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 01:06:46 2024 by rpki-client on console-ams.rpki-client.org