Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/pWKML8sBSuysSy-ON3YFhw-ywfI.roa
File:                     pWKML8sBSuysSy-ON3YFhw-ywfI.roa (raw, json)
Hash identifier:          jDZAy5ByKLm6yI6p7IyeLLiU4PVhj8LdVNj36PKPrME=
Subject key identifier:   A5:62:8C:2F:CB:01:4A:EC:AC:4B:2F:8E:37:76:05:87:0F:B2:C1:F2
Certificate issuer:       /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial:       133295D2
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/pWKML8sBSuysSy-ON3YFhw-ywfI.roa
Signing time:             Wed 16 Feb 2022 12:05:47 +0000
ROA not before:           Wed 16 Feb 2022 12:05:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51964
IP address blocks:        57.251.0.0/16 maxlen: 24
                          57.246.0.0/16 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322082258 (0x133295d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
        Validity
            Not Before: Feb 16 12:05:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a5628c2fcb014aecac4b2f8e377605870fb2c1f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:1f:25:65:99:c3:94:e8:88:3b:5f:64:d6:
                    e5:d0:cd:10:0b:88:11:54:93:d5:92:87:6c:cc:51:
                    10:f7:43:06:4d:24:c0:6e:ed:bc:dc:96:8f:d2:b7:
                    cc:ac:f4:73:29:69:b1:20:23:0b:07:04:54:5b:32:
                    8e:a3:ce:95:2a:6b:b3:22:bc:da:cf:34:7e:f3:b1:
                    87:6b:93:cd:5f:10:63:a3:04:84:46:8c:d5:44:a1:
                    c1:d9:c5:0f:a3:69:0a:6a:dd:94:5b:29:0b:c4:97:
                    5d:b5:06:9a:2c:35:99:f0:a0:c5:63:c6:66:cb:74:
                    dd:13:9a:fa:4c:2e:b3:ea:c0:ac:3f:bc:cc:c8:b6:
                    7a:01:ff:4d:7d:01:1a:ee:15:9a:74:a1:84:41:0e:
                    72:94:2b:f0:4f:ac:cb:91:74:ce:98:a9:8f:96:8a:
                    2a:28:66:2a:ee:4e:b5:29:9a:0c:16:e2:76:55:46:
                    e2:6e:c8:04:c3:59:40:d0:5b:ef:68:54:00:53:04:
                    b5:9b:90:e9:ce:29:9d:b0:1b:52:7c:1a:d9:9f:56:
                    cd:3d:fc:3f:fe:bb:8a:73:6d:22:d0:d9:42:8a:4f:
                    14:72:49:b3:9c:f9:14:92:f9:3b:6f:89:ea:14:f7:
                    02:d1:54:e6:e9:dd:cd:eb:10:25:6f:05:59:3a:ad:
                    84:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:62:8C:2F:CB:01:4A:EC:AC:4B:2F:8E:37:76:05:87:0F:B2:C1:F2
            X509v3 Authority Key Identifier:
                keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/pWKML8sBSuysSy-ON3YFhw-ywfI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.246.0.0/16
                  57.251.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b7:98:56:5a:7e:6e:5a:60:be:46:e1:1c:10:3a:88:ca:d7:fc:
         62:59:78:79:57:83:09:98:94:6a:21:30:2a:10:fb:38:22:d2:
         53:b4:dd:64:1d:4b:a3:a4:a5:d9:4b:4d:bd:07:94:4b:d4:10:
         b0:78:0c:39:fe:d3:7b:4f:3e:f9:fb:b7:3a:39:63:df:9a:cb:
         84:6d:d1:21:ae:7e:67:00:f6:42:1b:3a:1c:4e:80:fd:f0:46:
         1c:47:96:f1:f3:ca:d7:b0:d2:1b:bb:d1:ec:98:75:ca:43:fc:
         d0:23:97:aa:f3:e3:f8:3f:54:c3:3b:9b:da:1a:69:52:d0:3f:
         22:a1:7c:f3:d0:dd:8b:35:85:de:55:32:c4:4f:6b:d0:87:32:
         32:77:22:de:aa:06:e4:36:e3:37:4b:45:c9:e3:b5:30:1a:1d:
         86:7e:82:21:5f:cf:98:78:ef:2d:a0:6b:eb:15:de:7d:c7:ac:
         fc:c3:11:e5:85:15:5a:f2:b6:f2:c4:a1:45:bb:d8:79:88:43:
         b4:5b:32:7d:d4:96:18:a4:d8:41:6b:b1:1b:39:07:55:78:ae:
         27:50:1d:a2:0e:ce:05:aa:8c:af:6b:b4:e6:f6:e9:d1:da:be:
         8d:7a:ec:42:fe:93:bb:f2:0c:ab:9b:c0:f8:95:70:a1:a5:6a:
         fe:3b:fb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:17 2024 by rpki-client on console-fra.rpki-client.org