Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/DslPmoyPRqxvH05ZMtE93ILdIwM.roa
File:                     DslPmoyPRqxvH05ZMtE93ILdIwM.roa (raw, json)
Hash identifier:          0UZKwDDzSmLQrsdQ1OfxWRz3CNLMbb2Ga68hXSqYHyU=
Subject key identifier:   0E:C9:4F:9A:8C:8F:46:AC:6F:1F:4E:59:32:D1:3D:DC:82:DD:23:03
Certificate issuer:       /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial:       018A5F85FABB24C7CB414D2BCF402D62D07B
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/DslPmoyPRqxvH05ZMtE93ILdIwM.roa
Signing time:             Mon 04 Sep 2023 09:28:50 +0000
ROA not before:           Mon 04 Sep 2023 09:28:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48314
IP address blocks:        185.245.97.0/24 maxlen: 24
                          185.245.98.0/24 maxlen: 24
                          185.245.99.0/24 maxlen: 24
                          185.194.238.0/24 maxlen: 24
                          185.194.239.0/24 maxlen: 24
                          185.194.236.0/24 maxlen: 24
                          185.194.237.0/24 maxlen: 24
                          193.32.221.0/24 maxlen: 24
                          193.32.222.0/24 maxlen: 24
                          193.32.220.0/24 maxlen: 24
                          193.32.223.0/24 maxlen: 24
                          185.248.141.0/24 maxlen: 24
                          185.248.142.0/24 maxlen: 24
                          185.248.143.0/24 maxlen: 24
                          46.251.251.0/24 maxlen: 24
                          185.242.112.0/24 maxlen: 24
                          185.242.113.0/24 maxlen: 24
                          88.218.224.0/24 maxlen: 24
                          88.218.225.0/24 maxlen: 24
                          185.242.114.0/24 maxlen: 24
                          185.242.115.0/24 maxlen: 24
                          88.218.226.0/24 maxlen: 24
                          134.255.244.0/24 maxlen: 24
                          45.10.24.0/24 maxlen: 24
                          134.255.247.0/24 maxlen: 24
                          194.26.182.0/24 maxlen: 24
                          194.26.183.0/24 maxlen: 24
                          194.26.180.0/24 maxlen: 24
                          194.26.181.0/24 maxlen: 24
                          194.45.196.0/23 maxlen: 24
                          91.210.225.0/24 maxlen: 24
                          91.210.226.0/24 maxlen: 24
                          91.210.227.0/24 maxlen: 24
                          185.250.248.0/24 maxlen: 24
                          185.250.249.0/24 maxlen: 24
                          5.180.64.0/24 maxlen: 24
                          185.250.250.0/24 maxlen: 24
                          185.250.251.0/24 maxlen: 24
                          5.180.67.0/24 maxlen: 24
                          5.180.65.0/24 maxlen: 24
                          5.180.66.0/24 maxlen: 24
                          109.230.219.0/24 maxlen: 24
                          152.89.236.0/24 maxlen: 24
                          152.89.237.0/24 maxlen: 24
                          152.89.238.0/24 maxlen: 24
                          31.214.144.0/24 maxlen: 24
                          152.89.239.0/24 maxlen: 24
                          94.199.213.0/24 maxlen: 24
                          94.199.212.0/24 maxlen: 24
                          94.199.214.0/24 maxlen: 24
                          94.199.215.0/24 maxlen: 24
                          213.190.28.0/24 maxlen: 24
                          213.190.31.0/24 maxlen: 24
                          213.190.29.0/24 maxlen: 24
                          213.190.30.0/24 maxlen: 24
                          194.48.171.0/24 maxlen: 24
                          194.48.169.0/24 maxlen: 24
                          194.48.170.0/24 maxlen: 24
                          194.48.168.0/24 maxlen: 24
                          45.133.9.0/24 maxlen: 24
                          45.133.8.0/24 maxlen: 24
                          45.133.10.0/23 maxlen: 24
                          194.45.37.0/24 maxlen: 24
                          194.45.36.0/24 maxlen: 24
                          91.216.245.0/24 maxlen: 24
                          193.135.8.0/24 maxlen: 24
                          193.135.9.0/24 maxlen: 24
                          193.135.11.0/24 maxlen: 24
                          45.10.26.0/24 maxlen: 24
                          45.10.25.0/24 maxlen: 24
                          45.10.27.0/24 maxlen: 24
                          193.142.41.0/24 maxlen: 24
                          193.142.42.0/24 maxlen: 24
                          193.142.40.0/24 maxlen: 24
                          193.142.43.0/24 maxlen: 24
                          45.91.100.0/24 maxlen: 24
                          45.91.101.0/24 maxlen: 24
                          45.91.103.0/24 maxlen: 24
                          45.91.102.0/24 maxlen: 24
                          2a0a:51c3::/32 maxlen: 32
                          2a0a:51c1::/32 maxlen: 48
                          2a0a:51c4::/32 maxlen: 48
                          2a0a:51c0::/32 maxlen: 32
                          2a0a:51c2::/32 maxlen: 32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:5f:85:fa:bb:24:c7:cb:41:4d:2b:cf:40:2d:62:d0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
        Validity
            Not Before: Sep  4 09:28:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0ec94f9a8c8f46ac6f1f4e5932d13ddc82dd2303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:03:4e:5a:8c:ba:51:ed:da:20:db:67:6d:ad:
                    d0:53:36:7f:6a:1a:51:af:bf:a1:f9:3f:6f:bb:ae:
                    6a:3f:f5:f1:a6:eb:1b:2b:7a:40:5b:80:5f:a4:40:
                    6f:70:2f:59:b7:78:e5:69:80:87:54:48:b1:07:52:
                    58:16:a6:45:a2:5e:3d:bd:61:94:e3:e6:e8:21:d7:
                    0b:c1:c2:1e:31:ef:fc:77:d0:66:53:5e:92:f6:46:
                    8e:b5:81:05:88:16:38:ff:d5:ab:4e:d2:6f:07:12:
                    da:47:48:30:20:36:d5:d6:38:ab:eb:8b:a4:94:1a:
                    67:5d:ce:c9:23:ae:89:ea:e0:c7:d9:65:48:a3:7c:
                    85:c8:85:f7:a2:f5:09:2f:d1:6a:18:b8:8c:0c:bb:
                    48:a1:4b:f6:fb:0e:74:60:0f:a8:2a:f3:98:2e:55:
                    7f:8d:a9:c7:c2:94:d7:1f:5a:16:34:8e:be:f5:15:
                    fa:1d:cc:72:62:57:43:ac:9d:b5:2d:c1:69:2b:ae:
                    58:07:b7:37:af:f2:6a:b7:43:61:98:f1:a7:8a:dc:
                    9b:33:05:aa:bf:38:59:23:ed:21:83:18:26:60:19:
                    2d:b8:b6:dd:0c:34:1a:cc:bd:57:2f:e8:17:6b:14:
                    77:9d:82:11:69:38:25:01:91:4d:54:a7:47:c0:24:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C9:4F:9A:8C:8F:46:AC:6F:1F:4E:59:32:D1:3D:DC:82:DD:23:03
            X509v3 Authority Key Identifier:
                keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/DslPmoyPRqxvH05ZMtE93ILdIwM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.64.0/22
                  31.214.144.0/24
                  45.10.24.0/22
                  45.91.100.0/22
                  45.133.8.0/22
                  46.251.251.0/24
                  88.218.224.0-88.218.226.255
                  91.210.225.0-91.210.227.255
                  91.216.245.0/24
                  94.199.212.0/22
                  109.230.219.0/24
                  134.255.244.0/24
                  134.255.247.0/24
                  152.89.236.0/22
                  185.194.236.0/22
                  185.242.112.0/22
                  185.245.97.0-185.245.99.255
                  185.248.141.0-185.248.143.255
                  185.250.248.0/22
                  193.32.220.0/22
                  193.135.8.0/23
                  193.135.11.0/24
                  193.142.40.0/22
                  194.26.180.0/22
                  194.45.36.0/23
                  194.45.196.0/23
                  194.48.168.0/22
                  213.190.28.0/22
                IPv6:
                  2a0a:51c0::-2a0a:51c4:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         0f:b3:f9:f7:d1:5d:fb:9d:5d:3b:1d:95:f9:1e:ec:17:ec:76:
         9a:9b:63:40:a6:c1:b2:da:c7:a9:61:26:81:58:66:26:f2:2a:
         23:58:73:57:71:20:d7:27:be:bf:84:26:4f:4e:ed:62:94:bb:
         35:3c:4d:1c:24:ee:71:31:ae:41:26:43:40:ed:11:3e:de:2d:
         a9:ad:63:1d:90:ad:09:2c:de:74:23:1f:57:be:87:d1:ae:8d:
         d1:6b:a4:fa:50:da:51:44:0b:2d:60:06:bf:b6:44:3b:9e:0f:
         f2:5d:34:7e:ec:e2:f7:e3:b9:7e:40:45:42:af:60:b1:73:b9:
         ed:57:7a:b4:cd:d1:25:84:4e:2f:11:a8:bb:e9:2f:3b:9e:07:
         18:b3:06:a8:c2:f9:1e:1f:02:bf:f4:67:03:ae:2e:78:c1:65:
         96:80:26:1a:ec:8d:95:49:f2:69:94:19:16:5d:62:2a:ee:02:
         f6:7e:18:52:ef:14:97:e9:2d:79:3f:17:cd:51:a0:26:30:9e:
         87:a5:1c:56:c9:83:6d:e5:1f:c4:d1:5a:cd:a6:81:4f:16:01:
         83:4a:e5:a7:d1:16:47:5a:76:82:70:0f:c4:3c:32:01:a6:49:
         d8:88:e2:73:ac:7a:ab:5a:04:47:89:75:17:05:4a:62:79:26:
         01:e8:13:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:51 2024 by rpki-client on console-fra.rpki-client.org