Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/8NWcLiGMlUsYyYJjyUgMB5-pcSc.roa
File:                     8NWcLiGMlUsYyYJjyUgMB5-pcSc.roa (raw, json)
Hash identifier:          vyvpdzbB+ODuo8gu8hHpN8QRAhsMY6fEAElshtV9SVs=
Subject key identifier:   F0:D5:9C:2E:21:8C:95:4B:18:C9:82:63:C9:48:0C:07:9F:A9:71:27
Certificate issuer:       /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial:       08BE42A3
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/8NWcLiGMlUsYyYJjyUgMB5-pcSc.roa
Signing time:             Sat 01 Jan 2022 01:02:10 +0000
ROA not before:           Sat 01 Jan 2022 01:02:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59808
IP address blocks:        45.151.212.0/23 maxlen: 23
                          2a0e:b580::/29 maxlen: 29

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146686627 (0x8be42a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
        Validity
            Not Before: Jan  1 01:02:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f0d59c2e218c954b18c98263c9480c079fa97127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:7d:e4:73:eb:d1:6e:a5:89:d5:35:bb:f8:
                    2c:c1:33:7f:4f:9d:9f:99:85:4c:2d:ea:61:9d:8b:
                    63:55:e0:3c:96:1a:d5:ce:77:b3:6a:30:d3:3b:02:
                    3f:4f:01:99:42:60:94:9a:6b:11:46:4e:fa:7d:93:
                    ea:cc:f3:3b:c3:d4:f5:9b:95:82:14:39:3d:76:63:
                    0a:56:d4:40:e7:11:76:67:f8:a2:1c:14:28:2f:1d:
                    69:c6:84:c7:42:0a:cc:3e:80:a9:4f:38:c5:45:3e:
                    ae:9b:3d:2d:91:d5:d4:05:3f:b1:2f:7b:9b:e4:ce:
                    5f:0b:75:a9:f8:22:e7:d0:88:fe:c2:10:d8:80:0e:
                    ba:16:76:88:51:7f:32:09:df:1c:3f:5a:9b:b9:b4:
                    a8:4a:03:10:11:3d:68:57:0a:02:10:63:6f:59:f9:
                    f8:b9:a5:3d:75:19:11:ca:60:17:12:f3:39:ea:05:
                    e6:31:29:b9:1a:80:03:5d:88:3d:7b:86:28:cd:a2:
                    27:a5:3a:d4:a2:46:c1:54:55:67:e4:35:c8:1b:3f:
                    6a:95:9c:ab:e3:e1:3c:7e:33:22:57:53:2a:0d:64:
                    0e:9c:f1:6e:2c:4b:02:00:5d:95:67:27:88:1e:e1:
                    aa:bb:4c:ad:b3:5d:dd:88:15:62:26:86:5f:d5:e4:
                    a0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D5:9C:2E:21:8C:95:4B:18:C9:82:63:C9:48:0C:07:9F:A9:71:27
            X509v3 Authority Key Identifier:
                keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/8NWcLiGMlUsYyYJjyUgMB5-pcSc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.212.0/23
                IPv6:
                  2a0e:b580::/29

    Signature Algorithm: sha256WithRSAEncryption
         37:89:59:91:85:41:18:68:b0:b8:33:d0:ac:bc:e8:46:06:5b:
         61:d5:33:d7:5b:2f:25:5b:59:e4:47:b4:ac:96:9b:e6:62:cc:
         ac:5f:30:70:57:da:c7:63:2c:f2:87:c9:ff:fd:f8:6a:3b:9b:
         fd:fd:f6:38:72:8b:14:73:32:ab:fa:a0:76:b6:6b:3b:67:45:
         20:53:d0:c2:e4:fd:16:37:5f:3a:de:d4:07:0e:15:64:37:00:
         40:0c:9d:34:8d:a8:ef:3f:1c:5d:ca:03:38:bd:7d:47:59:22:
         2f:f4:2a:6d:4b:67:ae:17:52:af:d0:10:8b:4f:1f:a5:70:c9:
         ec:7d:4f:6f:2e:c6:a8:b4:70:f9:02:34:e7:30:0a:8d:32:17:
         5e:d5:cb:52:6f:cc:b8:fc:11:5a:6e:2f:84:0e:48:2a:b3:15:
         22:fd:37:33:d7:90:b3:53:5a:7d:bc:d6:c5:cb:27:de:ce:42:
         fc:58:c9:a2:62:85:41:84:06:dd:58:30:87:78:94:14:a2:cf:
         70:ac:39:a8:a9:52:d5:93:92:e4:0f:29:32:2c:cf:6b:22:48:
         de:23:82:35:22:bb:57:2e:37:b0:58:57:43:ac:85:61:f8:c9:
         eb:eb:0e:c8:e2:8a:9e:e3:06:da:9f:de:61:44:21:f7:4c:21:
         d4:c7:1a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:43 2024 by rpki-client on console-fra.rpki-client.org