Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6QggDHY3SevIzzYVWlbJkzvbBLo.roa
File:                     6QggDHY3SevIzzYVWlbJkzvbBLo.roa (raw, json)
Hash identifier:          1KUj+ILHG0zvKodmuHRB6LbfWVTmn2XJM5A44TXs2kg=
Subject key identifier:   E9:08:20:0C:76:37:49:EB:C8:CF:36:15:5A:56:C9:93:3B:DB:04:BA
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       01865F909ADD147E9F0E4FDD899CEC7CCA23
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6QggDHY3SevIzzYVWlbJkzvbBLo.roa
Signing time:             Fri 17 Feb 2023 13:29:17 +0000
ROA not before:           Fri 17 Feb 2023 13:29:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50225
IP address blocks:        81.161.230.0/24 maxlen: 24
                          94.156.234.0/24 maxlen: 24
                          178.215.226.0/24 maxlen: 24
                          185.222.160.0/24 maxlen: 24
                          185.222.162.0/24 maxlen: 24
                          45.9.156.0/24 maxlen: 24
                          45.66.228.0/24 maxlen: 24
                          45.12.255.0/24 maxlen: 24
                          94.156.160.0/24 maxlen: 24
                          193.42.34.0/24 maxlen: 24
                          193.47.63.0/24 maxlen: 24
                          193.47.60.0/24 maxlen: 24
                          45.84.91.0/24 maxlen: 24
                          45.88.64.0/24 maxlen: 24
                          194.180.39.0/24 maxlen: 24
                          45.139.104.0/24 maxlen: 24
                          45.129.84.0/24 maxlen: 24
                          45.129.86.0/24 maxlen: 24
                          176.125.252.0/24 maxlen: 24
                          94.154.162.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:5f:90:9a:dd:14:7e:9f:0e:4f:dd:89:9c:ec:7c:ca:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Feb 17 13:29:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e908200c763749ebc8cf36155a56c9933bdb04ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ff:8a:58:1d:7b:29:2c:d8:f5:f2:98:0a:55:
                    e7:aa:35:3f:b8:df:72:21:ec:6f:a3:f9:be:e5:e4:
                    a7:b7:66:c9:28:5d:66:f4:5b:ad:07:de:22:44:2f:
                    fd:07:5b:2e:33:91:79:a3:8e:ec:a0:b6:df:a5:29:
                    a4:1e:3a:5b:12:73:43:58:6c:4e:e7:78:31:a2:bb:
                    5d:4e:e9:6c:5d:db:3a:c3:5b:e2:ca:04:c0:b6:98:
                    96:35:7a:cc:cd:8a:c4:42:93:2d:8f:33:cf:0f:cd:
                    76:fe:aa:dd:3e:a6:7e:67:75:06:15:50:1d:2b:40:
                    1a:2b:d0:49:95:51:61:1b:d4:94:f0:36:2e:62:79:
                    4c:0e:50:a2:b2:02:1a:c7:96:cf:ea:63:74:75:48:
                    1e:aa:a3:e4:ea:05:ed:bc:91:a1:14:31:5a:9c:61:
                    6c:32:4a:c9:5e:62:49:d3:4b:da:41:59:91:f0:c4:
                    0c:d2:08:ca:a7:0a:b9:70:43:67:d8:1d:33:b0:1b:
                    0f:e8:8b:a7:ce:3e:d1:6a:19:1c:1f:e0:bb:c6:c3:
                    93:96:f5:c0:7e:db:d2:4e:11:34:e1:0d:56:b7:c2:
                    3b:6d:83:91:38:7d:df:4c:68:e5:ba:31:d4:f3:19:
                    2e:b2:1b:06:7a:e4:4a:69:68:be:e8:84:9b:3c:cf:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:08:20:0C:76:37:49:EB:C8:CF:36:15:5A:56:C9:93:3B:DB:04:BA
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6QggDHY3SevIzzYVWlbJkzvbBLo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.156.0/24
                  45.12.255.0/24
                  45.66.228.0/24
                  45.84.91.0/24
                  45.88.64.0/24
                  45.129.84.0/24
                  45.129.86.0/24
                  45.139.104.0/24
                  81.161.230.0/24
                  94.154.162.0/24
                  94.156.160.0/24
                  94.156.234.0/24
                  176.125.252.0/24
                  178.215.226.0/24
                  185.222.160.0/24
                  185.222.162.0/24
                  193.42.34.0/24
                  193.47.60.0/24
                  193.47.63.0/24
                  194.180.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:2b:02:11:f0:f5:46:d2:41:35:e3:13:5b:85:41:ab:17:53:
         ae:60:0e:15:67:27:33:14:3c:e1:53:cc:fc:21:d7:fc:e9:8a:
         5e:5e:68:0c:2c:f6:4c:af:48:59:bd:40:1a:45:82:d5:f4:17:
         cc:7e:95:6a:e7:bc:23:9e:1e:f0:26:86:4d:fa:c6:1a:a1:eb:
         f9:e6:c5:c5:a9:a6:3b:97:fd:2f:b0:9c:0d:e2:0b:70:3e:13:
         ff:52:51:53:e2:2d:b2:b2:0f:89:6f:3e:a0:aa:37:7e:58:e2:
         0f:6a:91:f8:fc:db:f1:3f:0e:b0:c8:7b:04:0f:ab:29:57:84:
         57:5e:18:ff:94:4a:72:d3:df:52:9d:5f:9b:2a:7e:de:b1:db:
         6e:39:87:60:d1:33:47:4d:47:26:e2:54:f1:70:59:e1:da:91:
         45:0d:37:02:fb:3a:4b:ca:79:9e:25:cb:70:63:97:95:f9:0e:
         83:e4:4a:a6:f8:9b:ae:91:b5:2a:03:f9:ff:26:16:d1:a3:0a:
         10:3b:95:9e:b1:12:d9:27:eb:d9:15:74:ff:03:42:31:b9:b7:
         f3:7d:3b:fb:36:54:58:ce:a4:cc:ae:dd:2e:be:a6:9c:7f:5a:
         0c:b5:b0:9b:a5:7d:93:6c:af:95:fe:a0:82:82:12:6e:78:6e:
         f2:c6:d3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:59 2024 by rpki-client on console-fra.rpki-client.org