Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/OxDIn7aw8nh7M4cUl1qte-hTZNY.roa
File:                     OxDIn7aw8nh7M4cUl1qte-hTZNY.roa (raw, json)
Hash identifier:          StRY+SaVlGdQheiFO1MOynjFbra5aSw2a3rG16/lwmE=
Subject key identifier:   3B:10:C8:9F:B6:B0:F2:78:7B:33:87:14:97:5A:AD:7B:E8:53:64:D6
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       0185A24C9248104A90B19AF4DFCE7282BA8D
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/OxDIn7aw8nh7M4cUl1qte-hTZNY.roa
Signing time:             Wed 11 Jan 2023 19:26:45 +0000
ROA not before:           Wed 11 Jan 2023 19:26:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35479
IP address blocks:        185.219.54.0/23 maxlen: 23

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a2:4c:92:48:10:4a:90:b1:9a:f4:df:ce:72:82:ba:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Jan 11 19:26:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3b10c89fb6b0f2787b338714975aad7be85364d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0a:54:44:4e:91:66:cf:67:b0:50:f7:56:f7:
                    5a:07:9d:74:3e:f1:67:b2:93:48:c3:fc:1c:c0:48:
                    82:69:6f:e3:bb:cb:ef:3c:7a:94:d3:ca:eb:a8:89:
                    f8:bb:e4:94:ca:c8:99:15:af:ea:b4:20:74:8e:c0:
                    1c:48:98:61:2a:3a:90:59:3f:26:93:e1:9c:10:a2:
                    57:95:cb:b2:ad:c1:25:e4:60:ac:7d:6b:62:84:37:
                    7b:b7:ea:2f:0b:26:e0:2b:3f:63:4c:91:cc:66:aa:
                    56:89:f1:6f:05:52:d2:21:7d:a4:ad:65:b6:2b:1c:
                    e0:9b:15:6a:84:bb:e1:56:72:5a:ca:99:c5:3e:f9:
                    8b:20:90:46:4b:5b:7c:11:88:c3:71:46:a9:d4:3f:
                    88:9a:29:18:f0:8c:92:03:a2:cc:b9:74:29:06:57:
                    fc:d5:91:a4:dd:a2:13:52:ef:70:a0:e0:b9:7d:78:
                    d8:d5:0d:33:cb:61:44:33:e2:69:7e:d7:d8:c6:d3:
                    eb:da:84:f0:7b:2f:16:53:f8:35:06:7f:83:4f:d3:
                    e6:df:bc:38:1d:64:b4:51:40:7f:a0:b0:dd:48:66:
                    7e:71:60:74:6a:ad:24:f1:1f:7e:a1:96:3a:80:ab:
                    0c:b1:8a:75:9c:c6:2e:06:a5:de:2f:af:58:c4:cf:
                    17:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:10:C8:9F:B6:B0:F2:78:7B:33:87:14:97:5A:AD:7B:E8:53:64:D6
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/OxDIn7aw8nh7M4cUl1qte-hTZNY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:ed:ac:58:6a:52:cb:9a:72:cc:7b:28:cc:9f:d9:5d:65:9b:
         a7:49:38:0c:8a:c4:6d:10:48:c6:2b:ff:49:6c:9c:be:81:b3:
         4a:ee:75:98:1b:64:bb:76:0d:f6:95:f8:78:ef:18:a3:d4:2c:
         7c:1a:fb:d1:ca:b8:03:56:0a:c7:5c:1c:fa:ac:cf:7a:91:a2:
         a5:7c:0b:d4:8e:04:a2:bc:86:ae:1b:28:10:82:9a:d3:cf:24:
         76:04:30:4c:ba:50:2c:79:67:b7:08:19:13:62:5e:06:6c:9d:
         8d:2e:9d:4e:2d:54:73:b0:2d:52:1c:ed:fe:81:6b:c0:80:9e:
         d6:50:f4:0a:0b:ef:22:8a:74:f2:d3:e8:62:6f:34:63:29:38:
         b8:49:57:9b:06:ff:4c:11:5d:4f:18:ce:7c:ad:63:a4:8b:04:
         a2:fd:c7:9f:20:0c:f9:78:4b:a4:da:76:56:fe:dc:19:04:3e:
         c6:14:9a:5a:48:c2:01:95:c2:f5:77:39:0d:6f:64:28:d7:a7:
         5a:23:ec:03:05:88:4c:d7:5e:69:e8:ae:c8:4f:1c:e1:46:46:
         24:3d:fb:96:23:56:8e:a4:d2:93:69:90:46:12:f7:fe:26:7b:
         c8:f3:ba:da:8c:7f:51:b5:a8:7f:e7:f1:35:c9:6c:67:3a:5e:
         a5:b4:85:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org