Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/8FevXgSiDrwl3kkhNTtdbMfEGYw.roa
File:                     8FevXgSiDrwl3kkhNTtdbMfEGYw.roa (raw, json)
Hash identifier:          e5l4XveOxV7l+XhNWq+FWlqmbQJj0us9cRWdNWYCvkw=
Subject key identifier:   F0:57:AF:5E:04:A2:0E:BC:25:DE:49:21:35:3B:5D:6C:C7:C4:19:8C
Certificate issuer:       /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial:       09A77E9F
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/8FevXgSiDrwl3kkhNTtdbMfEGYw.roa
Signing time:             Sat 01 Jan 2022 04:55:55 +0000
ROA not before:           Sat 01 Jan 2022 04:55:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3164
IP address blocks:        37.156.225.0/24 maxlen: 24
                          94.176.2.0/24 maxlen: 24
                          188.240.231.0/24 maxlen: 24
                          188.241.194.0/24 maxlen: 24
                          89.44.109.0/24 maxlen: 24
                          85.204.107.0/24 maxlen: 24
                          84.247.54.0/24 maxlen: 24
                          37.156.67.0/24 maxlen: 24
                          86.105.195.0/24 maxlen: 24
                          185.88.28.0/24 maxlen: 24
                          185.88.29.0/24 maxlen: 24
                          185.88.31.0/24 maxlen: 24
                          185.88.30.0/24 maxlen: 24
                          2a05:c5c0::/48 maxlen: 48
                          2a05:c5c0:1::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161971871 (0x9a77e9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
        Validity
            Not Before: Jan  1 04:55:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f057af5e04a20ebc25de4921353b5d6cc7c4198c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:1e:3b:c6:74:f0:67:1f:a8:11:9f:b6:b9:
                    1e:92:0e:aa:13:fc:ff:d3:8f:00:cb:07:6b:a9:bd:
                    da:24:e5:f6:65:20:2e:0b:c0:6e:66:fe:93:97:1d:
                    0e:4c:74:6f:93:54:49:4c:9e:a2:43:17:ca:4f:26:
                    ad:32:a0:a0:6a:8b:f3:2f:60:c7:20:4a:8f:a7:30:
                    78:d2:ed:46:d9:8a:2a:29:0a:35:d9:dd:60:87:19:
                    c2:77:52:7e:24:53:a1:16:63:ab:e8:35:b5:f7:a7:
                    bf:cc:52:9c:41:7e:d5:41:ed:e8:14:32:c4:ea:d1:
                    ff:81:e9:6b:ff:d5:07:f0:46:80:df:4a:4c:3f:80:
                    c0:0a:1c:08:01:b5:01:de:9b:df:01:90:92:64:43:
                    4e:ed:8f:ad:4c:e0:3f:00:32:2c:ee:11:c1:9a:c7:
                    8a:c4:d5:2a:c7:71:41:65:0e:c0:39:17:c7:e5:c5:
                    cb:bd:2f:49:53:41:cc:a6:b4:2b:2b:80:34:01:ca:
                    47:bb:5a:ce:ef:8f:43:5a:d1:58:dd:41:92:9d:c4:
                    7d:78:b6:61:71:56:ea:ef:96:3b:7e:bf:9a:60:19:
                    ba:8c:03:4a:6b:a9:84:13:31:88:47:85:e0:cf:8e:
                    22:21:ca:95:be:d8:42:f6:4d:ee:04:4c:40:de:2f:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:57:AF:5E:04:A2:0E:BC:25:DE:49:21:35:3B:5D:6C:C7:C4:19:8C
            X509v3 Authority Key Identifier:
                keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/8FevXgSiDrwl3kkhNTtdbMfEGYw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.156.67.0/24
                  37.156.225.0/24
                  84.247.54.0/24
                  85.204.107.0/24
                  86.105.195.0/24
                  89.44.109.0/24
                  94.176.2.0/24
                  185.88.28.0/22
                  188.240.231.0/24
                  188.241.194.0/24
                IPv6:
                  2a05:c5c0::/47

    Signature Algorithm: sha256WithRSAEncryption
         04:5d:4a:c0:1d:19:ee:e6:26:a1:5a:a7:8e:fd:65:b6:8a:5e:
         a5:c0:4e:87:2b:49:88:fc:d1:9e:59:06:2c:d1:94:2f:11:59:
         eb:fb:f0:31:1e:2f:ad:5a:d6:ea:de:f5:bb:60:b2:ca:4b:40:
         02:75:cc:f7:21:c1:31:fd:d4:61:0b:47:99:a1:d6:47:a3:77:
         05:d2:7d:58:fa:27:be:a1:05:70:96:bf:2e:ce:a7:ad:78:c3:
         ef:71:be:1d:82:2f:a5:3a:f5:24:cf:da:7e:9b:86:de:ec:0f:
         fe:22:51:e1:93:99:26:2f:5c:ae:7f:8e:ee:17:29:97:f4:c0:
         1e:8d:85:a4:a5:34:8a:8c:ec:f4:d5:c5:69:cc:dd:2c:f1:0d:
         de:6b:03:91:7b:11:83:97:35:27:fd:fb:e4:01:a2:80:04:23:
         42:9f:5b:93:6a:e2:e5:b5:6f:64:47:d7:53:f8:62:6e:7e:07:
         7b:cc:30:ab:1f:bf:1d:9f:86:3d:14:3e:ed:5a:ed:d7:ab:22:
         83:68:b5:86:0d:63:60:7b:e0:b3:ab:fc:6d:27:ad:94:68:cb:
         1f:dd:87:94:c2:d5:7d:02:51:3d:ec:e7:04:8e:e7:62:40:8e:
         3c:be:c4:a3:9f:09:10:cb:bc:2c:7d:f9:f4:43:8a:50:24:49:
         dd:5d:22:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:45 2024 by rpki-client on console-fra.rpki-client.org