Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/ijwiiQGJ2-5vLTBcrSb1tj-L_dE.roa
File:                     ijwiiQGJ2-5vLTBcrSb1tj-L_dE.roa (raw, json)
Hash identifier:          FKXsqEgkhDmRAVxjBIhiQexKASfUWnFHHJgA2LnpMTQ=
Subject key identifier:   8A:3C:22:89:01:89:DB:EE:6F:2D:30:5C:AD:26:F5:B6:3F:8B:FD:D1
Certificate issuer:       /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial:       0588EA31
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/ijwiiQGJ2-5vLTBcrSb1tj-L_dE.roa
Signing time:             Sat 01 Jan 2022 13:06:06 +0000
ROA not before:           Sat 01 Jan 2022 13:06:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60631
IP address blocks:        45.147.77.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92858929 (0x588ea31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
        Validity
            Not Before: Jan  1 13:06:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8a3c22890189dbee6f2d305cad26f5b63f8bfdd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:05:da:a7:4b:59:b6:07:00:1f:69:10:90:c7:
                    f1:f9:2f:c6:73:15:4c:a5:c3:ce:a0:cf:af:f5:20:
                    78:45:f5:63:f6:03:7c:bd:03:be:06:f3:20:ec:7d:
                    5c:ff:01:d0:a2:f1:fc:dc:47:c7:5f:98:d1:d8:b6:
                    6e:c3:e2:d6:e2:94:1a:84:1e:4d:a7:ae:99:38:8e:
                    3e:12:59:48:88:d7:b6:f3:44:c1:b0:9c:8c:68:bb:
                    a5:5a:13:7d:dc:09:82:40:f4:e9:e2:5b:62:82:d3:
                    18:a3:25:16:52:35:5a:50:0f:1b:7b:db:46:d1:43:
                    86:49:f5:76:14:43:99:ad:fa:5e:e6:a0:23:6a:a4:
                    32:6b:77:70:42:59:9d:b1:f5:1e:e5:19:e4:38:d4:
                    0f:a8:55:21:5a:79:b3:a2:72:5f:3d:1a:b7:02:da:
                    50:7d:3f:f7:2e:e3:8e:20:a0:b7:4f:46:12:69:a5:
                    07:ef:6f:d3:d9:a9:13:44:60:bf:0d:b6:2a:4a:7f:
                    c2:16:f1:34:f9:ac:bb:8e:f7:ad:02:13:60:66:39:
                    03:75:05:7e:0c:5c:26:f5:67:ea:4a:09:ee:8d:3f:
                    6a:df:b3:fc:bc:ce:6a:2c:66:ba:49:76:ba:a8:2d:
                    76:16:7f:38:6e:ba:a0:75:c6:67:48:e2:05:8b:e8:
                    a4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3C:22:89:01:89:DB:EE:6F:2D:30:5C:AD:26:F5:B6:3F:8B:FD:D1
            X509v3 Authority Key Identifier:
                keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/ijwiiQGJ2-5vLTBcrSb1tj-L_dE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.147.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:8b:fc:96:30:79:22:6b:07:2c:6f:4c:c1:fd:5b:76:0e:a6:
         03:76:b6:aa:6d:cc:7a:4b:f6:77:f2:29:79:a1:ba:c5:d2:f4:
         3a:c9:c1:3f:88:cf:64:40:9f:7e:7b:18:a7:ca:c1:12:39:5d:
         54:8c:d4:59:95:c2:6c:65:d6:d6:8c:80:28:b0:88:d8:a4:48:
         e1:ee:18:cd:8e:a8:ba:e6:42:ea:d7:b1:41:ac:36:42:7e:4c:
         bc:50:c8:47:0d:7d:42:f4:e3:bb:1d:32:a2:bb:73:de:8c:92:
         b2:87:dc:63:df:b7:f0:9a:f9:4d:78:e2:4f:7d:60:17:e4:c2:
         0f:ac:8b:8e:bf:4c:76:9c:f7:74:fa:cb:9d:d1:f7:41:87:74:
         fb:56:92:7e:92:f4:8b:c1:7a:fd:28:ba:67:a0:84:8c:99:d7:
         01:da:9f:2a:af:1f:7f:84:0b:0c:95:a6:34:7a:f0:81:b3:db:
         a3:de:42:cf:16:83:92:3c:15:c2:12:06:11:21:49:22:40:85:
         45:71:1f:4b:c9:3a:98:0b:39:33:13:52:51:03:28:e1:96:dd:
         d2:bc:c4:8a:21:00:47:c2:41:3d:ec:5d:34:f2:69:54:fd:65:
         03:5b:b4:16:a5:89:35:66:78:cf:38:ce:c6:1e:64:8b:07:25:
         2b:e3:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:25 2024 by rpki-client on console-fra.rpki-client.org