Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/UhzGClAVaJudoP4tFFll_sAAzWQ.roa
File:                     UhzGClAVaJudoP4tFFll_sAAzWQ.roa (raw, json)
Hash identifier:          VCCwYvXXxaIz70ow41Kioq39/48fd6YSQwMaEgaAOXo=
Subject key identifier:   52:1C:C6:0A:50:15:68:9B:9D:A0:FE:2D:14:59:65:FE:C0:00:CD:64
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       018DB799BADD235190DE7EFC064DBC182B0D
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/UhzGClAVaJudoP4tFFll_sAAzWQ.roa
Signing time:             Sat 17 Feb 2024 15:05:21 +0000
ROA not before:           Sat 17 Feb 2024 15:05:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44559
IP address blocks:        31.56.0.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:b7:99:ba:dd:23:51:90:de:7e:fc:06:4d:bc:18:2b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: Feb 17 15:05:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=521cc60a5015689b9da0fe2d145965fec000cd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d2:d4:ae:9b:77:f2:fe:3a:26:af:04:af:b5:
                    77:cd:c3:91:f2:45:c0:57:83:14:34:1b:0f:6c:50:
                    4d:8f:0f:9e:4e:e3:02:0b:16:44:82:43:4a:86:a1:
                    6d:21:1a:1b:dd:2d:6f:90:0d:a3:71:47:00:71:f3:
                    38:b3:bc:22:d0:65:35:f5:72:ba:aa:4d:0d:a4:ab:
                    9e:b9:20:2a:9f:a2:a5:d5:46:2f:3b:ae:15:c9:a1:
                    dc:e6:33:01:13:80:2a:a6:29:b6:3f:b3:43:63:d3:
                    be:25:6e:c3:f6:c3:ff:01:b8:9e:49:43:ff:3a:61:
                    9a:2a:46:51:c2:c6:37:96:ae:dd:69:4a:ce:46:cf:
                    bc:c5:90:79:17:82:11:90:a0:c7:dd:f9:f4:79:1c:
                    a7:29:ca:bc:83:54:2a:ff:56:bb:e3:a1:c0:06:cd:
                    17:8d:3a:6b:54:05:f2:14:25:6d:55:95:8a:f4:b4:
                    f1:e3:67:6c:8e:32:5b:01:0b:03:08:8d:6f:3c:1f:
                    39:fc:6c:2f:0c:38:59:b9:a1:e4:db:cd:4c:c3:e6:
                    74:09:68:d9:b6:42:63:3c:c1:8b:1b:19:ff:45:94:
                    8b:2b:a4:9b:eb:84:c5:f9:2f:bb:19:45:f9:e5:07:
                    b4:19:30:4b:c9:08:24:72:15:c7:8f:35:c3:92:f8:
                    ae:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1C:C6:0A:50:15:68:9B:9D:A0:FE:2D:14:59:65:FE:C0:00:CD:64
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/UhzGClAVaJudoP4tFFll_sAAzWQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:94:98:02:a6:73:df:91:8c:4b:c5:9c:dd:5a:3c:66:1d:3d:
         12:05:20:23:c7:74:36:fd:1b:0b:c0:90:20:b3:d5:17:01:9b:
         56:e6:4b:75:3b:81:c2:35:8a:a9:e0:29:9b:16:91:51:26:03:
         4e:62:35:25:52:70:d3:49:a1:ab:ae:47:44:a1:0d:bc:ab:3a:
         71:c8:46:8e:36:42:28:1c:fc:7d:f2:65:e5:cc:5d:30:7b:a0:
         79:bc:a8:03:c7:64:01:03:81:51:97:73:d7:b8:8e:bb:65:70:
         e5:33:53:b5:8d:57:90:1a:f4:bb:81:fb:e9:1e:00:78:94:e8:
         7d:d3:c1:03:96:8a:57:6a:1a:5f:02:2e:3b:d4:f1:05:2e:d7:
         d3:d9:46:96:25:fa:59:aa:bb:86:39:bc:d8:93:37:7b:f5:df:
         ea:0a:70:7c:71:90:b2:c2:1a:09:17:40:ee:fd:6b:32:1f:88:
         66:04:c5:4e:8f:92:71:a9:e2:d0:9d:10:9e:6a:8a:b8:c5:a2:
         42:69:44:ab:48:ef:26:66:36:c2:59:7a:ab:6c:24:9e:49:b6:
         1e:ba:15:14:fb:c4:b8:cb:12:47:f5:cd:24:f7:b7:cd:13:ea:
         b4:75:1f:5f:6c:ee:9e:84:05:e1:98:a6:d7:50:4c:d7:cb:d1:
         f8:7e:60:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:45 2024 by rpki-client on console-ams.rpki-client.org