Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/kr63mYGkRRrOkPV1x0MWI0d4AIc.roa
File:                     kr63mYGkRRrOkPV1x0MWI0d4AIc.roa (raw, json)
Hash identifier:          U1wKG1sufkVnqLPT7ueTW+BL5OELYE0nrRg3L2rzUzg=
Subject key identifier:   92:BE:B7:99:81:A4:45:1A:CE:90:F5:75:C7:43:16:23:47:78:00:87
Certificate issuer:       /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial:       02673071
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/kr63mYGkRRrOkPV1x0MWI0d4AIc.roa
Signing time:             Sat 01 Jan 2022 10:59:37 +0000
ROA not before:           Sat 01 Jan 2022 10:59:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56694
IP address blocks:        94.198.50.0/23 maxlen: 32
                          188.127.224.0/20 maxlen: 32
                          185.9.144.0/22 maxlen: 32
                          94.198.52.0/22 maxlen: 32
                          188.127.240.0/21 maxlen: 32
                          188.127.253.0/24 maxlen: 32
                          188.127.248.0/22 maxlen: 32
                          188.127.254.0/23 maxlen: 32
                          185.130.248.0/22 maxlen: 32
                          152.89.216.0/22 maxlen: 32
                          2a06:dd00::/29 maxlen: 128

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40317041 (0x2673071)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
        Validity
            Not Before: Jan  1 10:59:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=92beb79981a4451ace90f575c743162347780087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ab:71:7a:41:87:c7:db:09:3c:71:f2:2f:2e:
                    89:a9:12:30:69:90:32:17:05:17:e5:8f:0f:09:2b:
                    b5:92:bd:a5:d1:4d:94:89:f7:1b:01:e5:a6:a7:57:
                    21:28:4b:24:8f:44:e1:68:93:52:57:92:2d:0f:a7:
                    e2:0f:02:64:0d:03:d8:f6:8d:dd:f5:65:af:25:46:
                    52:62:c4:99:ec:1d:3a:ed:a3:7b:45:64:f5:d1:81:
                    3c:46:fc:d1:8c:c2:21:b8:13:7e:5a:70:80:48:c0:
                    76:22:da:5d:68:b2:ba:55:a6:66:aa:50:3e:89:4c:
                    51:77:6b:87:e1:b3:5b:2f:40:ca:f0:71:18:bf:42:
                    b8:d5:83:75:43:40:22:1f:36:33:0e:2c:15:c7:e0:
                    eb:e8:0f:b6:7c:b3:fb:4c:07:34:0a:85:5c:2d:04:
                    08:ef:f0:85:1c:cf:0d:ee:8c:03:f0:7b:f7:54:f8:
                    3d:dc:19:0d:fb:52:ce:01:d6:31:4f:34:bf:2b:71:
                    bd:be:d9:bd:d2:11:11:93:8d:76:73:c0:ba:20:90:
                    6c:dd:8f:c6:8b:f6:9e:e5:3e:c5:5f:ee:79:96:c4:
                    21:f5:0d:12:97:49:68:27:a6:94:a1:06:3b:18:cd:
                    3e:5e:07:6b:81:ad:01:5a:80:70:b8:4c:a0:d2:4a:
                    ab:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BE:B7:99:81:A4:45:1A:CE:90:F5:75:C7:43:16:23:47:78:00:87
            X509v3 Authority Key Identifier:
                keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/kr63mYGkRRrOkPV1x0MWI0d4AIc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.198.50.0-94.198.55.255
                  152.89.216.0/22
                  185.9.144.0/22
                  185.130.248.0/22
                  188.127.224.0-188.127.251.255
                  188.127.253.0-188.127.255.255
                IPv6:
                  2a06:dd00::/29

    Signature Algorithm: sha256WithRSAEncryption
         59:97:44:31:b2:7d:54:72:46:34:d0:eb:c9:73:4e:65:49:4f:
         2c:bb:9c:ba:b4:f8:05:db:82:78:9a:08:65:8a:ce:ba:12:5c:
         fa:63:85:05:5c:dc:73:a9:c7:12:ba:35:e6:e7:5c:dd:82:9f:
         bb:17:03:49:fb:46:02:a3:f2:29:48:c6:0c:53:50:91:dc:25:
         ef:b7:ec:32:4d:b3:fa:0e:d1:13:77:a7:e9:3a:28:24:e9:ae:
         96:ac:26:ac:2f:42:6a:5b:bc:7a:d8:73:67:ca:13:eb:88:62:
         0c:29:0e:3c:2f:57:5c:e5:19:35:5b:65:80:44:1e:27:b0:3f:
         c3:37:64:ef:7a:fe:af:20:f0:58:25:29:e7:1b:66:2a:e5:17:
         63:35:c1:cc:42:07:01:f0:d7:0b:f0:2c:b6:88:01:5e:49:95:
         33:5e:98:d4:7e:c9:7b:be:07:fe:a4:bb:d1:83:a3:e5:c8:c9:
         7a:10:6e:64:5c:d6:4f:ea:6d:42:37:72:88:53:cd:b1:1c:80:
         7b:50:cf:fd:11:22:08:37:17:e6:bf:30:07:38:d6:cd:a7:bd:
         72:be:99:eb:f9:bd:9a:0a:b5:e3:ff:23:dc:f4:82:87:d0:32:
         d3:d3:bc:10:62:09:32:ce:f8:27:06:df:52:7d:2b:1a:47:8a:
         cb:95:b1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:53 2024 by rpki-client on console-fra.rpki-client.org