Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/gGsWQaRurMz75AI8YOUCMVbxU50.roa
File:                     gGsWQaRurMz75AI8YOUCMVbxU50.roa (raw, json)
Hash identifier:          ReRUI2u73d2GTBHJzKJDc6j7MvorHPno8bPCguXBTD0=
Subject key identifier:   80:6B:16:41:A4:6E:AC:CC:FB:E4:02:3C:60:E5:02:31:56:F1:53:9D
Certificate issuer:       /CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Certificate serial:       01850C7C079E33B3B63776E7EFB3A1F5458D
Authority key identifier: 3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/gGsWQaRurMz75AI8YOUCMVbxU50.roa
Signing time:             Tue 13 Dec 2022 17:15:33 +0000
ROA not before:           Tue 13 Dec 2022 17:15:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39305
IP address blocks:        193.57.227.0/24 maxlen: 24
                          185.151.214.0/23 maxlen: 24
                          91.211.64.0/22 maxlen: 22
                          45.84.52.0/22 maxlen: 22
                          185.88.9.0/24 maxlen: 24
                          62.106.73.0/24 maxlen: 24
                          193.57.226.0/24 maxlen: 24
                          2a0e:9780::/29 maxlen: 29
                          2a0c:7140::/29 maxlen: 29

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:0c:7c:07:9e:33:b3:b6:37:76:e7:ef:b3:a1:f5:45:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
        Validity
            Not Before: Dec 13 17:15:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=806b1641a46eacccfbe4023c60e5023156f1539d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:db:18:b7:eb:c3:77:62:df:13:45:17:ed:b7:
                    51:3e:83:2b:df:f5:de:06:61:2c:55:6d:47:fe:14:
                    09:be:06:80:7f:49:59:27:1f:c9:47:a6:69:8f:b7:
                    07:ee:3c:b1:a1:2a:17:61:c0:69:99:f8:e6:38:ed:
                    1f:99:d1:37:e9:f7:73:6f:6d:6f:d0:33:50:00:a0:
                    c2:06:df:e1:5f:78:25:cb:31:48:d6:01:3b:0b:3a:
                    45:86:c6:22:42:d9:06:a9:de:97:a5:8e:d8:82:82:
                    63:f7:34:37:df:ad:c2:af:a8:02:87:46:2b:62:c6:
                    e4:dc:f7:59:2d:71:9c:5d:ca:ac:3a:37:34:14:47:
                    a3:12:2b:a1:c7:50:e1:e9:e3:39:c7:f0:ab:41:ed:
                    15:cf:8a:0b:1e:d7:8d:c5:81:4b:f6:40:68:ab:91:
                    66:e7:cd:a1:28:7e:54:75:fa:ce:b8:6e:50:18:dd:
                    58:de:40:11:f1:99:e1:89:59:9e:1c:d1:13:a5:5a:
                    b4:6e:70:1e:af:17:87:72:7d:21:e4:28:1f:cf:56:
                    40:23:ae:68:c2:93:52:06:7b:db:96:af:aa:6e:bd:
                    ce:32:3a:ea:9d:fd:c1:45:07:60:5d:91:7d:db:5f:
                    23:d1:e9:78:f3:32:ea:fa:90:a3:49:cc:a2:cf:a8:
                    5b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6B:16:41:A4:6E:AC:CC:FB:E4:02:3C:60:E5:02:31:56:F1:53:9D
            X509v3 Authority Key Identifier:
                keyid:3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/gGsWQaRurMz75AI8YOUCMVbxU50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.52.0/22
                  62.106.73.0/24
                  91.211.64.0/22
                  185.88.9.0/24
                  185.151.214.0/23
                  193.57.226.0/23
                IPv6:
                  2a0c:7140::/29
                  2a0e:9780::/29

    Signature Algorithm: sha256WithRSAEncryption
         73:d9:24:70:a6:89:a8:9d:4c:f1:87:16:6c:8f:ea:e2:4d:22:
         07:74:28:5f:bc:c8:ef:3b:39:98:76:19:10:67:94:ae:7b:d2:
         5e:22:3b:59:c9:25:4b:1b:ef:30:5e:0f:11:a8:8c:56:23:a7:
         67:5b:ac:96:f3:ee:3e:dd:20:35:9d:32:d4:b1:8b:5a:b3:40:
         94:85:8d:fe:3c:50:29:bb:cc:10:56:f7:10:05:7e:91:20:8d:
         0b:7b:de:5c:1b:d2:68:a8:2a:23:59:17:aa:cf:9e:55:d0:e4:
         8e:73:92:6a:a7:10:53:d8:4f:3f:98:20:3c:9a:fe:06:f2:03:
         f7:c6:63:ba:73:d6:74:75:4a:82:69:6e:34:07:85:c2:9e:ab:
         8c:be:eb:d0:e4:d2:5f:79:da:2d:98:5a:4b:79:e8:49:02:c0:
         49:94:06:71:62:42:22:8e:89:80:a7:c4:06:4f:a4:c3:79:8d:
         5d:4d:48:a2:12:b7:3c:c3:c3:cd:e8:ec:b2:7d:cd:0f:98:50:
         d5:bd:48:da:67:52:b3:30:8d:80:67:9b:6e:d8:1e:dc:f5:b6:
         c4:81:fb:d4:e8:7b:8a:88:a1:f1:24:5f:47:df:b9:b8:5e:80:
         8d:1c:40:71:89:c6:17:78:f0:5d:04:65:1a:42:2b:4e:f1:fa:
         89:97:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:02 2024 by rpki-client on console-ams.rpki-client.org