Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/exnXsGTSfzpejFg0Al7eAauoTcE.roa
File:                     exnXsGTSfzpejFg0Al7eAauoTcE.roa (raw, json)
Hash identifier:          IjEDPbfufYmYhs4CF4nYffy6rJjCEJMsaD033AgmFAk=
Subject key identifier:   7B:19:D7:B0:64:D2:7F:3A:5E:8C:58:34:02:5E:DE:01:AB:A8:4D:C1
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0183A2C7CAC5373969653832E066F56E2C3C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/exnXsGTSfzpejFg0Al7eAauoTcE.roa
Signing time:             Tue 04 Oct 2022 11:35:46 +0000
ROA not before:           Tue 04 Oct 2022 11:35:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397423
IP address blocks:        212.87.206.0/24 maxlen: 24
                          178.215.224.0/24 maxlen: 24
                          85.217.144.0/24 maxlen: 24
                          185.252.179.0/24 maxlen: 24
                          193.47.60.0/24 maxlen: 24
                          193.37.44.0/24 maxlen: 24
                          194.55.184.0/24 maxlen: 24
                          79.110.61.0/24 maxlen: 24
                          94.103.127.0/24 maxlen: 24
                          92.249.51.0/24 maxlen: 24
                          92.249.48.0/24 maxlen: 24
                          83.219.97.0/24 maxlen: 24
                          193.25.216.0/24 maxlen: 24
                          109.206.238.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a2:c7:ca:c5:37:39:69:65:38:32:e0:66:f5:6e:2c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Oct  4 11:35:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b19d7b064d27f3a5e8c5834025ede01aba84dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:36:f6:19:98:dc:a8:bb:21:98:58:e9:9d:a0:
                    d0:c4:3b:8b:43:5f:9e:74:01:cc:ea:bd:88:b2:3f:
                    b3:97:a1:79:71:8c:8b:c0:d4:4b:f9:14:3b:7b:1e:
                    87:c8:65:9b:45:0e:86:e1:2c:d4:72:9d:ed:f6:cc:
                    42:13:97:16:d1:cd:86:e4:e3:e5:33:80:84:76:c1:
                    7a:c4:cd:e9:cd:ff:57:18:ef:31:82:b7:01:69:19:
                    80:a7:98:6b:56:84:1b:23:f4:b8:e8:02:4c:9d:a5:
                    9f:7b:96:25:28:bc:71:7b:69:e5:f5:0a:0b:64:69:
                    0e:8f:c5:a7:06:24:9b:ab:ba:28:0d:c9:74:2a:b5:
                    45:7f:c3:8c:b6:3f:68:b4:96:9c:5d:8a:2f:ae:a4:
                    75:ba:f8:7d:6d:34:04:d7:d2:70:b7:b9:fa:93:08:
                    e0:c3:4b:d7:5e:ca:ab:b8:9a:c7:5d:1a:32:31:d3:
                    70:21:c7:84:01:37:38:2a:63:5c:d3:a8:d3:f8:05:
                    32:3a:63:2b:53:b9:1e:bb:75:8d:e4:22:db:40:20:
                    d8:ab:a7:55:c3:5a:9a:5c:6b:d8:20:55:d7:0a:2b:
                    6f:46:34:50:a8:eb:d3:5b:92:51:c6:d3:de:0c:5b:
                    c7:05:e2:33:a6:80:70:d4:90:c9:37:ef:06:9a:07:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:19:D7:B0:64:D2:7F:3A:5E:8C:58:34:02:5E:DE:01:AB:A8:4D:C1
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/exnXsGTSfzpejFg0Al7eAauoTcE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.61.0/24
                  83.219.97.0/24
                  85.217.144.0/24
                  92.249.48.0/24
                  92.249.51.0/24
                  94.103.127.0/24
                  109.206.238.0/24
                  178.215.224.0/24
                  185.252.179.0/24
                  193.25.216.0/24
                  193.37.44.0/24
                  193.47.60.0/24
                  194.55.184.0/24
                  212.87.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:9b:5f:11:ea:e5:d2:da:7a:d5:ea:83:24:57:5f:c0:38:8a:
         06:ff:08:b1:32:a6:86:d7:93:08:f1:ae:65:05:92:78:48:ee:
         83:09:14:60:75:0c:c0:a2:e8:71:81:1b:bd:d9:46:9e:57:55:
         57:05:16:e5:67:a1:c9:3e:98:47:99:45:40:92:49:25:76:48:
         04:e4:3d:f9:73:f2:c1:6d:ed:08:0a:59:63:df:9d:03:b3:23:
         00:78:a5:15:62:46:54:9a:b4:b3:c9:c2:d9:fb:08:08:2d:08:
         a7:a3:76:80:55:4e:b5:8b:aa:7f:d4:20:e5:a5:cc:6e:c1:db:
         1a:22:80:37:20:e5:d2:f2:b3:72:ef:7e:63:b5:00:e3:94:70:
         ba:46:7a:0b:1a:db:ad:3e:1d:63:37:28:02:07:33:60:e2:80:
         4c:f1:e1:d8:87:b5:ba:d6:c8:79:8b:39:50:83:5e:8f:0a:b2:
         18:97:19:5c:9f:0f:38:73:16:76:45:12:6c:5e:d7:8c:75:bc:
         43:92:d4:77:21:49:14:44:aa:df:b8:84:bc:4a:ac:c9:1a:80:
         f2:73:b4:8a:be:6f:e3:52:40:4e:3f:73:6c:64:9b:37:ac:c7:
         4d:d8:62:de:ee:ec:25:98:07:c3:b9:25:1d:e7:02:f3:53:01:
         31:83:7c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:46 2023 by rpki-client on console-fra.rpki-client.org