Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uIR5WDxk6HE3V1fauW_EMkq0wX4.roa
File:                     uIR5WDxk6HE3V1fauW_EMkq0wX4.roa (raw, json)
Hash identifier:          mBXKOFGjQVQpvToya8jYyaABPfXHTibinCAmRlAc0J0=
Subject key identifier:   B8:84:79:58:3C:64:E8:71:37:57:57:DA:B9:6F:C4:32:4A:B4:C1:7E
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       1C88327A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uIR5WDxk6HE3V1fauW_EMkq0wX4.roa
Signing time:             Sat 01 Jan 2022 01:02:50 +0000
ROA not before:           Sat 01 Jan 2022 01:02:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203095
IP address blocks:        91.92.110.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478687866 (0x1c88327a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 01:02:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b88479583c64e871375757dab96fc4324ab4c17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:e1:79:01:38:43:ba:d3:e2:4a:4b:16:b2:
                    a3:16:61:97:c8:91:0e:2d:9f:58:2b:d6:52:bf:0d:
                    8d:29:63:dd:9c:06:ad:be:2c:d9:1f:30:6e:b2:ca:
                    f1:36:91:33:41:a5:49:fc:e5:61:4e:ab:9b:ae:b3:
                    28:a9:96:c7:ad:eb:5f:31:6e:69:c9:6f:38:6a:aa:
                    ee:f1:c3:39:1c:58:6b:33:55:1d:b5:f9:62:5a:40:
                    77:92:8b:2e:6d:7b:8a:2d:72:07:3a:8a:8a:12:69:
                    16:e8:12:28:5b:46:75:90:97:2f:24:84:2c:dd:76:
                    52:cc:b9:de:a0:f3:3a:8f:38:4e:30:3b:a8:e6:a7:
                    b5:58:a4:83:64:d7:52:00:f6:8d:71:bf:ec:d8:c1:
                    08:df:01:96:68:f1:01:d1:e2:fe:be:8f:d4:2d:d3:
                    b2:50:b4:69:36:ed:07:07:25:4a:84:0e:6f:1a:3c:
                    91:d8:45:4f:8b:e7:b3:51:fb:93:c1:62:7b:c6:1d:
                    f1:8a:70:7d:f5:f2:4c:e6:8e:b1:f4:bb:12:e5:ed:
                    28:a3:44:eb:e9:99:66:13:9c:ef:4a:90:ac:07:1f:
                    bc:f0:b2:a6:e3:95:73:45:c0:2a:da:70:8c:ca:51:
                    6a:e5:6c:72:8c:57:d0:37:e5:0a:be:92:03:cf:96:
                    42:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:84:79:58:3C:64:E8:71:37:57:57:DA:B9:6F:C4:32:4A:B4:C1:7E
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uIR5WDxk6HE3V1fauW_EMkq0wX4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.92.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:59:3a:34:07:79:d9:e7:89:a2:32:6d:0e:b8:54:8a:80:4f:
         cf:9d:b4:fa:38:ed:51:7b:39:61:31:f2:1f:2b:0a:66:2d:ca:
         a5:2c:6b:31:de:e3:27:84:46:f0:22:b0:8a:85:98:55:dd:aa:
         a5:d8:d7:bf:3f:5b:92:12:3b:9d:07:b2:05:5f:f0:59:e4:c5:
         b7:6a:7d:a6:70:c5:25:13:8a:68:d8:37:e3:5d:95:de:b9:80:
         8a:e7:f3:05:b7:ef:42:a7:90:d3:04:1f:dd:13:f3:82:44:f7:
         67:4d:6d:95:17:91:d5:76:ad:1f:00:40:72:cc:19:98:62:b8:
         eb:31:e7:9b:b4:08:1b:d6:4d:f1:6f:9b:77:16:6e:d7:10:cb:
         83:00:2b:d9:57:13:05:01:ce:48:08:de:7b:d8:ee:b9:71:4a:
         33:40:7b:b4:a2:e1:05:fd:f5:c6:d4:eb:99:ad:8b:e7:49:c6:
         f6:5f:86:8e:d1:f7:12:5b:9e:10:4a:88:a1:6c:88:6e:b3:44:
         d7:00:f1:6c:c8:72:e7:c7:80:e8:17:d9:a3:01:6d:81:85:dd:
         4c:6b:27:f8:fb:35:89:55:c0:18:1e:c9:b8:69:8d:ad:32:b6:
         97:60:61:29:63:b5:52:34:d8:b8:c4:46:f3:47:af:f6:54:8d:
         11:e7:da:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:45 2024 by rpki-client on console-ams.rpki-client.org