Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/OUKxJbtUF0JYEK6xuJI1p6Fkto0.roa
File:                     OUKxJbtUF0JYEK6xuJI1p6Fkto0.roa (raw, json)
Hash identifier:          k8mr3pYHiwD6JOsNTSzjNRBZNRSEHFD/DcpoUjSmBMo=
Subject key identifier:   39:42:B1:25:BB:54:17:42:58:10:AE:B1:B8:92:35:A7:A1:64:B6:8D
Certificate issuer:       /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial:       018424009EADFF1885F18C15AD4028D6BF51
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/OUKxJbtUF0JYEK6xuJI1p6Fkto0.roa
Signing time:             Sat 29 Oct 2022 13:48:51 +0000
ROA not before:           Sat 29 Oct 2022 13:48:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16322
IP address blocks:        31.214.248.0/21 maxlen: 21
                          37.228.131.0/24 maxlen: 24
                          37.228.135.0/24 maxlen: 24
                          37.228.133.0/24 maxlen: 24
                          37.228.136.0/22 maxlen: 22
                          31.214.200.0/23 maxlen: 23
                          31.214.228.0/22 maxlen: 22
                          134.255.200.0/21 maxlen: 21
                          134.255.245.0/24 maxlen: 24
                          134.255.246.0/24 maxlen: 24
                          134.255.249.0/24 maxlen: 24
                          134.255.196.0/23 maxlen: 23
                          91.99.160.0/19 maxlen: 19
                          91.99.160.0/20 maxlen: 20
                          91.99.176.0/20 maxlen: 20
                          91.99.184.0/22 maxlen: 22
                          91.99.182.0/23 maxlen: 23
                          91.99.192.0/20 maxlen: 20
                          82.99.192.0/24 maxlen: 24
                          82.99.192.0/19 maxlen: 22
                          82.99.193.0/24 maxlen: 24
                          82.99.195.0/24 maxlen: 24
                          82.99.196.0/24 maxlen: 24
                          82.99.192.0/18 maxlen: 18
                          91.99.104.0/21 maxlen: 21
                          91.99.112.0/20 maxlen: 20
                          91.99.130.0/23 maxlen: 23
                          91.99.128.0/19 maxlen: 19
                          91.99.128.0/18 maxlen: 18
                          91.99.128.0/20 maxlen: 20
                          91.99.132.0/22 maxlen: 22
                          91.99.136.0/21 maxlen: 21
                          91.99.144.0/22 maxlen: 22
                          91.99.144.0/20 maxlen: 20
                          31.214.146.0/24 maxlen: 24
                          31.214.147.0/24 maxlen: 24
                          31.214.146.0/23 maxlen: 23
                          31.214.154.0/24 maxlen: 24
                          31.214.172.0/22 maxlen: 22
                          31.214.170.0/23 maxlen: 23
                          31.214.168.0/23 maxlen: 23
                          31.214.168.0/21 maxlen: 21
                          82.99.204.0/24 maxlen: 24
                          82.99.206.0/24 maxlen: 24
                          82.99.201.0/24 maxlen: 24
                          82.99.212.0/24 maxlen: 24
                          82.99.209.0/24 maxlen: 24
                          82.99.210.0/24 maxlen: 24
                          91.99.208.0/20 maxlen: 20
                          91.99.210.0/23 maxlen: 23
                          82.99.216.0/22 maxlen: 22
                          91.99.214.0/23 maxlen: 23
                          82.99.224.0/19 maxlen: 19
                          91.99.224.0/23 maxlen: 23
                          91.99.220.0/22 maxlen: 22
                          82.99.233.0/24 maxlen: 24
                          82.99.228.0/24 maxlen: 24
                          82.99.231.0/24 maxlen: 24
                          82.99.240.0/24 maxlen: 24
                          82.99.235.0/24 maxlen: 24
                          91.99.238.0/23 maxlen: 23
                          91.99.236.0/23 maxlen: 23
                          91.99.240.0/20 maxlen: 20
                          91.99.252.0/22 maxlen: 22
                          91.99.248.0/22 maxlen: 22
                          31.214.132.0/23 maxlen: 23
                          82.99.249.0/24 maxlen: 24
                          82.99.250.0/24 maxlen: 24
                          82.99.251.0/24 maxlen: 24
                          91.98.192.0/20 maxlen: 20
                          91.98.192.0/19 maxlen: 19
                          91.98.208.0/20 maxlen: 20
                          91.98.226.0/23 maxlen: 23
                          91.98.224.0/19 maxlen: 19
                          91.98.224.0/24 maxlen: 24
                          91.98.144.0/23 maxlen: 23
                          91.98.152.0/22 maxlen: 22
                          91.98.160.0/20 maxlen: 20
                          91.98.160.0/19 maxlen: 19
                          91.99.64.0/19 maxlen: 19
                          91.99.65.0/24 maxlen: 24
                          91.99.66.0/24 maxlen: 24
                          91.99.78.0/24 maxlen: 24
                          91.99.80.0/22 maxlen: 22
                          91.99.84.0/22 maxlen: 22
                          91.99.88.0/22 maxlen: 22
                          91.98.240.0/21 maxlen: 21
                          91.98.252.0/23 maxlen: 23
                          91.99.0.0/19 maxlen: 19
                          91.99.0.0/16 maxlen: 16
                          91.99.32.0/19 maxlen: 19
                          91.98.0.0/22 maxlen: 22
                          37.10.109.0/24 maxlen: 24
                          91.98.0.0/20 maxlen: 20
                          37.10.117.0/24 maxlen: 24
                          91.98.0.0/16 maxlen: 24
                          91.98.16.0/24 maxlen: 24
                          91.98.0.0/15 maxlen: 19
                          91.98.19.0/24 maxlen: 24
                          37.10.64.0/22 maxlen: 22
                          185.10.71.0/24 maxlen: 24
                          91.98.84.0/22 maxlen: 22
                          91.98.82.0/24 maxlen: 24
                          91.98.88.0/24 maxlen: 24
                          91.98.111.0/24 maxlen: 24
                          91.98.57.0/24 maxlen: 24
                          91.98.64.0/19 maxlen: 19
                          91.98.68.0/24 maxlen: 24
                          46.251.226.0/24 maxlen: 24
                          46.251.224.0/24 maxlen: 24
                          46.251.237.0/24 maxlen: 24
                          109.230.246.0/23 maxlen: 23
                          46.62.136.0/24 maxlen: 24
                          46.62.137.0/24 maxlen: 24
                          46.62.133.0/24 maxlen: 24
                          46.62.134.0/24 maxlen: 24
                          46.62.138.0/23 maxlen: 23
                          109.230.246.0/24 maxlen: 24
                          109.230.242.0/24 maxlen: 24
                          46.62.144.0/24 maxlen: 24
                          46.62.140.0/24 maxlen: 24
                          95.156.222.0/23 maxlen: 23
                          46.62.142.0/23 maxlen: 23
                          109.230.251.0/24 maxlen: 24
                          46.62.144.0/20 maxlen: 20
                          109.230.247.0/24 maxlen: 24
                          46.62.147.0/24 maxlen: 24
                          46.62.148.0/22 maxlen: 22
                          95.156.233.0/24 maxlen: 24
                          46.62.152.0/24 maxlen: 24
                          95.156.236.0/23 maxlen: 23
                          95.156.234.0/23 maxlen: 23
                          46.62.156.0/24 maxlen: 24
                          46.62.158.0/24 maxlen: 24
                          46.62.153.0/24 maxlen: 24
                          46.62.160.0/19 maxlen: 19
                          46.62.165.0/24 maxlen: 24
                          46.62.168.0/21 maxlen: 21
                          46.62.168.0/22 maxlen: 22
                          46.62.172.0/22 maxlen: 22
                          46.62.166.0/23 maxlen: 23
                          95.156.248.0/23 maxlen: 23
                          46.62.178.0/23 maxlen: 23
                          46.62.176.0/20 maxlen: 20
                          46.62.180.0/22 maxlen: 22
                          46.62.184.0/22 maxlen: 22
                          109.230.192.0/23 maxlen: 23
                          109.230.200.0/24 maxlen: 24
                          109.230.204.0/22 maxlen: 22
                          109.230.223.0/24 maxlen: 24
                          109.230.221.0/24 maxlen: 24
                          46.62.131.0/24 maxlen: 24
                          46.62.132.0/24 maxlen: 24
                          46.62.128.0/23 maxlen: 23
                          46.62.128.0/20 maxlen: 20
                          46.62.128.0/19 maxlen: 19
                          46.62.128.0/17 maxlen: 24
                          46.62.240.0/20 maxlen: 20
                          46.62.188.0/22 maxlen: 22
                          46.62.192.0/19 maxlen: 19
                          46.62.192.0/18 maxlen: 18
                          46.62.208.0/20 maxlen: 20
                          46.62.224.0/20 maxlen: 20
                          46.62.224.0/19 maxlen: 19
                          213.217.32.0/20 maxlen: 24
                          213.217.32.0/19 maxlen: 19
                          213.217.36.0/22 maxlen: 22
                          213.217.41.0/24 maxlen: 24
                          213.217.46.0/24 maxlen: 24
                          213.217.47.0/24 maxlen: 24
                          213.217.48.0/20 maxlen: 20
                          213.217.55.0/24 maxlen: 24
                          213.217.56.0/24 maxlen: 24
                          213.217.57.0/24 maxlen: 24
                          213.217.54.0/24 maxlen: 24
                          213.217.52.0/22 maxlen: 22
                          213.217.62.0/24 maxlen: 24
                          46.41.192.0/19 maxlen: 19
                          46.41.192.0/20 maxlen: 20
                          46.41.192.0/18 maxlen: 18
                          46.41.224.0/20 maxlen: 20
                          46.41.224.0/19 maxlen: 19
                          185.13.228.0/22 maxlen: 22
                          178.169.0.0/19 maxlen: 19

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:24:00:9e:ad:ff:18:85:f1:8c:15:ad:40:28:d6:bf:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
        Validity
            Not Before: Oct 29 13:48:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3942b125bb5417425810aeb1b89235a7a164b68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:70:48:9e:7d:e4:cd:13:24:23:cc:7d:bc:
                    e0:62:d0:82:05:13:bb:55:7f:e8:5a:74:d6:57:77:
                    17:01:53:85:dd:9e:97:71:d0:ec:c9:d4:59:b9:a7:
                    0d:0f:2a:47:59:1b:e5:10:60:f7:35:54:56:88:06:
                    98:ce:ca:56:c8:5f:75:97:ff:2c:5f:e4:90:80:5a:
                    40:5b:d4:0d:e5:c4:ee:3a:bd:ca:41:6f:65:c2:c7:
                    7a:f4:4a:e0:fe:e6:9f:2d:e9:ea:d1:00:ad:2c:51:
                    e5:9c:43:68:d1:07:41:06:e6:e5:b9:01:8c:e1:e5:
                    74:95:2c:21:9a:c1:1a:c8:30:80:82:a0:f8:52:f5:
                    fb:62:17:77:55:76:5d:1f:d4:ec:36:56:66:1f:27:
                    91:b9:51:1f:91:c6:ab:b7:b6:f2:b9:72:0c:c9:d5:
                    d7:2c:9f:11:6c:47:24:85:1e:d2:b6:eb:3a:f4:70:
                    f3:cc:63:cd:1c:ac:ea:51:e4:d0:84:e6:45:55:43:
                    da:ad:d8:93:2f:77:35:b1:11:d7:fc:bf:d1:92:1a:
                    f3:3f:95:6e:bb:d6:47:dc:57:eb:0e:9d:95:f1:01:
                    4a:48:19:55:e0:a7:ae:24:98:7d:62:8b:a1:a3:00:
                    ad:1b:cc:3d:02:81:f4:0a:42:54:68:ff:0d:b7:72:
                    0c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:42:B1:25:BB:54:17:42:58:10:AE:B1:B8:92:35:A7:A1:64:B6:8D
            X509v3 Authority Key Identifier:
                keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/OUKxJbtUF0JYEK6xuJI1p6Fkto0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.214.132.0/23
                  31.214.146.0/23
                  31.214.154.0/24
                  31.214.168.0/21
                  31.214.200.0/23
                  31.214.228.0/22
                  31.214.248.0/21
                  37.10.64.0/22
                  37.10.109.0/24
                  37.10.117.0/24
                  37.228.131.0/24
                  37.228.133.0/24
                  37.228.135.0-37.228.139.255
                  46.41.192.0/18
                  46.62.128.0/17
                  46.251.224.0/24
                  46.251.226.0/24
                  46.251.237.0/24
                  82.99.192.0/18
                  91.98.0.0/15
                  95.156.222.0/23
                  95.156.233.0-95.156.237.255
                  95.156.248.0/23
                  109.230.192.0/23
                  109.230.200.0/24
                  109.230.204.0/22
                  109.230.221.0/24
                  109.230.223.0/24
                  109.230.242.0/24
                  109.230.246.0/23
                  109.230.251.0/24
                  134.255.196.0/23
                  134.255.200.0/21
                  134.255.245.0-134.255.246.255
                  134.255.249.0/24
                  178.169.0.0/19
                  185.10.71.0/24
                  185.13.228.0/22
                  213.217.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:e4:aa:45:eb:ee:9f:1f:19:94:28:6d:e6:a7:4a:10:d4:73:
         75:ab:8c:1f:ad:95:e3:3b:ae:d0:73:fc:26:76:20:9c:cc:4a:
         9d:d6:c8:49:1b:a0:f4:de:2b:a2:44:24:8c:4a:77:8b:5d:ef:
         49:c4:7c:52:c8:b1:2b:69:48:23:1c:22:5a:89:81:77:18:cc:
         ee:a4:b5:6e:9d:fb:02:28:d3:55:87:36:bf:da:f6:cc:de:98:
         8d:20:af:14:5d:b7:c8:77:3c:f4:ef:c6:25:ca:6b:f9:82:16:
         d6:29:e6:50:02:a8:65:0d:15:7c:74:45:ea:b9:70:15:65:fd:
         e6:16:63:3c:39:63:80:15:b2:1a:71:84:83:06:9b:cb:22:40:
         7c:86:64:de:2d:45:ce:5a:55:25:17:7a:d7:13:f2:c4:07:34:
         76:5f:58:7d:0d:a5:68:69:bf:66:21:09:6e:87:82:3c:77:85:
         b2:4e:26:38:2b:f6:10:05:a1:08:b3:0c:53:ba:e1:63:c7:8e:
         8a:a8:51:21:5d:49:6e:09:90:a5:d7:03:6c:53:d1:bb:21:33:
         47:ad:db:72:b9:a7:e7:51:9c:8b:49:bd:8d:87:28:3c:83:29:
         a1:7b:2b:88:c0:51:9f:38:19:88:d5:66:d7:8b:da:5f:ae:ba:
         53:f1:e1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:42 2024 by rpki-client on console-fra.rpki-client.org