Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/3iwqKFlmRX8RusqrlUxvtri2dME.roa
File:                     3iwqKFlmRX8RusqrlUxvtri2dME.roa (raw, json)
Hash identifier:          U6FHyUzk16ARShIbkWna06qEs9Bz3fXNMkXHXlw6B/I=
Subject key identifier:   DE:2C:2A:28:59:66:45:7F:11:BA:CA:AB:95:4C:6F:B6:B8:B6:74:C1
Certificate issuer:       /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial:       12B3F81E
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/3iwqKFlmRX8RusqrlUxvtri2dME.roa
Signing time:             Sat 01 Jan 2022 12:59:23 +0000
ROA not before:           Sat 01 Jan 2022 12:59:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        57.12.65.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313784350 (0x12b3f81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
        Validity
            Not Before: Jan  1 12:59:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=de2c2a285966457f11bacaab954c6fb6b8b674c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d7:df:f4:56:1d:b9:27:8b:67:e2:ae:3e:20:
                    a5:14:74:05:5c:55:8d:0f:9d:38:9a:42:2f:10:c7:
                    60:84:43:ae:24:09:b5:72:a7:33:b3:59:fd:51:6d:
                    0f:33:19:38:88:3d:cc:49:ca:aa:9b:46:59:d4:ff:
                    d8:ee:fd:fb:7b:a7:c6:b1:f0:2e:85:60:13:d2:91:
                    bb:7e:51:f4:c1:af:7a:1f:6d:26:53:99:51:08:7f:
                    60:1c:21:a6:f9:43:85:32:7d:c0:ea:35:b6:eb:07:
                    90:15:a0:6a:34:2b:6a:74:e8:c7:20:c4:94:9d:3f:
                    89:d0:21:ae:27:d0:66:de:4a:fb:9d:cb:5b:aa:81:
                    be:39:22:ba:ca:74:5f:c9:12:7e:10:25:99:4b:db:
                    bf:03:f6:ed:59:06:ad:4d:a9:c7:d3:f3:05:94:0b:
                    a5:49:fa:3f:f4:43:85:14:3c:4b:43:43:63:f1:fb:
                    c1:f1:30:a1:f0:26:9a:5f:21:ca:14:1b:60:74:33:
                    60:13:1e:6c:e0:84:0e:c6:06:ac:aa:3a:73:54:07:
                    25:93:dc:cb:51:75:a7:26:5b:f3:1c:8a:c5:52:2c:
                    f0:b5:8c:6c:ba:d6:df:07:c4:41:54:ba:45:40:fb:
                    65:cf:27:de:ef:95:6a:75:c1:9a:0a:5e:60:71:49:
                    c5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2C:2A:28:59:66:45:7F:11:BA:CA:AB:95:4C:6F:B6:B8:B6:74:C1
            X509v3 Authority Key Identifier:
                keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/3iwqKFlmRX8RusqrlUxvtri2dME.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.12.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:f4:08:ea:04:4f:e8:a6:ba:be:ea:55:f2:1f:b3:73:d5:7a:
         17:b7:e5:74:6f:ff:64:ce:fc:2a:9d:b1:3e:6e:0c:b2:43:16:
         fe:d6:f0:0e:82:d9:c6:7a:1b:b8:63:af:f6:31:0d:00:c6:42:
         fc:9c:a4:45:cf:81:ea:5a:a5:83:68:9f:28:0f:be:da:56:4a:
         5a:b9:a1:a0:96:6b:2b:30:31:8c:7d:77:b4:fc:4e:8d:e3:54:
         10:c9:81:98:28:84:67:da:25:61:18:09:37:eb:9f:a2:17:07:
         32:f6:48:ba:3f:60:41:cb:97:c1:19:2d:1a:f2:2e:89:03:00:
         8d:5c:23:87:da:22:9b:98:a3:d1:c9:ce:b5:80:cc:a3:7f:11:
         55:63:d7:34:0d:9e:f6:6c:90:3d:c9:eb:c8:ed:8c:bd:a7:f4:
         05:db:bb:27:72:0d:7a:51:33:44:99:f4:7d:43:0b:f1:c9:2c:
         43:20:7c:c4:90:f9:63:f5:a5:dd:17:a5:02:1a:17:8a:a1:09:
         be:41:8b:8d:d3:d1:f9:74:de:2e:74:9c:fa:fa:6d:b0:72:b1:
         56:11:cd:fd:26:5e:5d:a9:f8:67:9c:4b:a9:b9:b0:2c:85:35:
         09:26:01:bf:15:23:8c:fd:44:5d:4e:c8:3e:70:70:cb:1f:92:
         20:a9:53:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:17 2024 by rpki-client on console-fra.rpki-client.org