Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/zE7hiPsmOmSe4fV0R1p3YkQXNjE.roa
File:                     zE7hiPsmOmSe4fV0R1p3YkQXNjE.roa (raw, json)
Hash identifier:          hyWd/IoJOKtvDE0KxJvro5FZBsCRmcZ9W7DQ9s1ktlc=
Subject key identifier:   CC:4E:E1:88:FB:26:3A:64:9E:E1:F5:74:47:5A:77:62:44:17:36:31
Certificate issuer:       /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial:       01837C046E3109C2ED98CDCCCFEA9E103E77
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/zE7hiPsmOmSe4fV0R1p3YkQXNjE.roa
Signing time:             Mon 26 Sep 2022 22:56:48 +0000
ROA not before:           Mon 26 Sep 2022 22:56:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        155.193.32.0/19 maxlen: 19
                          155.193.160.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7c:04:6e:31:09:c2:ed:98:cd:cc:cf:ea:9e:10:3e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
        Validity
            Not Before: Sep 26 22:56:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cc4ee188fb263a649ee1f574475a776244173631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:a0:13:10:b7:5b:d8:9c:dd:d9:c6:2f:fc:
                    98:38:9b:9e:bd:04:a1:12:40:36:8f:bc:87:3a:9b:
                    88:37:2a:fc:fd:c8:e5:5e:59:26:8d:66:08:05:1b:
                    56:3c:14:5a:82:2f:66:d5:22:d5:5d:a5:8f:d4:f0:
                    69:96:6c:5e:81:eb:2b:41:73:bf:f6:66:62:96:b3:
                    20:2c:d8:11:c3:50:47:d3:1b:f3:88:bf:b9:68:54:
                    fe:c3:96:e2:0b:78:83:35:af:07:bf:45:dc:5d:3e:
                    d1:85:4e:6f:3a:2f:33:6c:51:1a:5e:84:98:6d:1d:
                    c0:51:33:ea:a4:a9:cc:4e:52:1b:4b:58:75:c7:51:
                    34:da:e9:13:72:b2:85:7b:f4:f4:27:43:0a:a7:8f:
                    8b:b2:2f:d0:4d:7a:c2:98:fe:87:c6:b1:32:05:2d:
                    8f:ff:36:66:a7:9b:de:04:35:4d:78:22:cd:26:74:
                    f9:f2:9b:f2:25:54:e1:35:e1:52:80:56:8b:30:b3:
                    61:81:bd:51:ca:d2:5b:fe:2b:54:a4:8e:40:97:ff:
                    8c:f4:d3:06:fc:53:c4:1c:27:a1:ca:c2:ce:08:91:
                    e0:45:5a:2c:27:73:1f:26:d2:af:f5:25:82:1b:2a:
                    e7:74:ef:fe:34:9e:5a:5e:3d:de:7c:35:14:39:b1:
                    95:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4E:E1:88:FB:26:3A:64:9E:E1:F5:74:47:5A:77:62:44:17:36:31
            X509v3 Authority Key Identifier:
                keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/zE7hiPsmOmSe4fV0R1p3YkQXNjE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.193.32.0/19
                  155.193.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:cd:c1:5d:71:78:0b:22:96:6d:d3:b6:79:72:5b:f8:a7:9f:
         87:5b:41:72:97:47:73:88:53:d5:a0:12:ad:c2:69:97:de:54:
         33:82:4b:17:64:88:27:49:6b:55:71:95:4f:e7:20:ba:3e:9a:
         f8:ad:04:f1:53:5c:2c:9f:ca:ff:d8:09:39:4d:00:67:5b:fd:
         88:cf:62:4e:af:dc:f3:35:d4:dd:68:5d:16:26:65:2a:1f:9b:
         a8:28:95:76:36:60:a1:ba:d7:2a:f8:57:fa:e4:e0:11:66:d5:
         41:c4:d9:f5:67:b2:53:2d:b3:e6:a0:4f:aa:26:ed:bd:32:91:
         ce:6f:e0:0d:95:49:c6:73:ab:ab:0a:1c:c5:75:84:13:31:f0:
         a3:f8:79:23:5b:17:34:43:f5:08:fc:16:c2:9e:69:50:6e:da:
         24:ea:04:3c:2c:45:7a:23:f9:11:08:36:d2:c1:11:15:de:23:
         de:40:0b:72:3d:8c:5a:6e:bd:29:1c:a8:22:02:1b:fc:14:78:
         3f:22:5e:98:09:dc:7a:a9:10:2f:6c:15:d6:86:3b:aa:88:2d:
         a1:7d:68:6a:12:67:00:2d:82:4e:48:1d:14:0f:3e:7d:8b:c1:
         14:1c:13:96:4d:a0:b1:50:fe:c8:ea:e9:32:92:a0:f2:9d:67:
         69:c8:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:15 2024 by rpki-client on console-fra.rpki-client.org