Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/P3xttFQ774phSQghmiwCBa-0psE.roa
File:                     P3xttFQ774phSQghmiwCBa-0psE.roa (raw, json)
Hash identifier:          rBnfYC730ihV58rrxfKlAuBZhrlsDUcau/bPEhGEJ+o=
Subject key identifier:   3F:7C:6D:B4:54:3B:EF:8A:61:49:08:21:9A:2C:02:05:AF:B4:A6:C1
Certificate issuer:       /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial:       07B2EFAC
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/P3xttFQ774phSQghmiwCBa-0psE.roa
Signing time:             Sat 01 Jan 2022 02:54:42 +0000
ROA not before:           Sat 01 Jan 2022 02:54:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16322
IP address blocks:        31.214.248.0/21 maxlen: 21
                          37.228.131.0/24 maxlen: 24
                          37.228.135.0/24 maxlen: 24
                          37.228.133.0/24 maxlen: 24
                          37.228.136.0/22 maxlen: 22
                          31.214.200.0/23 maxlen: 23
                          31.214.228.0/22 maxlen: 22
                          134.255.200.0/21 maxlen: 21
                          134.255.245.0/24 maxlen: 24
                          134.255.246.0/24 maxlen: 24
                          134.255.249.0/24 maxlen: 24
                          134.255.196.0/23 maxlen: 23
                          91.99.160.0/19 maxlen: 19
                          91.99.160.0/20 maxlen: 20
                          91.99.176.0/20 maxlen: 20
                          91.99.184.0/22 maxlen: 22
                          91.99.182.0/23 maxlen: 23
                          91.99.192.0/20 maxlen: 20
                          82.99.192.0/24 maxlen: 24
                          82.99.192.0/19 maxlen: 22
                          82.99.193.0/24 maxlen: 24
                          82.99.195.0/24 maxlen: 24
                          82.99.196.0/24 maxlen: 24
                          82.99.192.0/18 maxlen: 18
                          91.99.104.0/21 maxlen: 21
                          91.99.112.0/20 maxlen: 20
                          91.99.130.0/23 maxlen: 23
                          91.99.128.0/19 maxlen: 19
                          91.99.128.0/18 maxlen: 18
                          91.99.128.0/20 maxlen: 20
                          91.99.132.0/22 maxlen: 22
                          91.99.136.0/21 maxlen: 21
                          91.99.144.0/22 maxlen: 22
                          91.99.144.0/20 maxlen: 20
                          31.214.146.0/23 maxlen: 23
                          31.214.154.0/24 maxlen: 24
                          31.214.172.0/22 maxlen: 22
                          31.214.170.0/23 maxlen: 23
                          31.214.168.0/23 maxlen: 23
                          31.214.168.0/21 maxlen: 21
                          82.99.204.0/24 maxlen: 24
                          82.99.206.0/24 maxlen: 24
                          82.99.201.0/24 maxlen: 24
                          82.99.212.0/24 maxlen: 24
                          82.99.209.0/24 maxlen: 24
                          82.99.210.0/24 maxlen: 24
                          91.99.208.0/20 maxlen: 20
                          91.99.210.0/23 maxlen: 23
                          82.99.216.0/22 maxlen: 22
                          91.99.214.0/23 maxlen: 23
                          82.99.224.0/19 maxlen: 19
                          91.99.224.0/23 maxlen: 23
                          91.99.220.0/22 maxlen: 22
                          82.99.233.0/24 maxlen: 24
                          82.99.228.0/24 maxlen: 24
                          82.99.231.0/24 maxlen: 24
                          82.99.240.0/24 maxlen: 24
                          82.99.235.0/24 maxlen: 24
                          91.99.238.0/23 maxlen: 23
                          91.99.236.0/23 maxlen: 23
                          91.99.240.0/20 maxlen: 20
                          91.99.252.0/22 maxlen: 22
                          91.99.248.0/22 maxlen: 22
                          31.214.132.0/23 maxlen: 23
                          82.99.249.0/24 maxlen: 24
                          82.99.250.0/24 maxlen: 24
                          82.99.251.0/24 maxlen: 24
                          91.98.192.0/20 maxlen: 20
                          91.98.192.0/19 maxlen: 19
                          91.98.208.0/20 maxlen: 20
                          91.98.226.0/23 maxlen: 23
                          91.98.224.0/19 maxlen: 19
                          91.98.224.0/24 maxlen: 24
                          91.98.144.0/23 maxlen: 23
                          91.98.152.0/22 maxlen: 22
                          91.98.160.0/20 maxlen: 20
                          91.98.160.0/19 maxlen: 19
                          91.99.64.0/19 maxlen: 19
                          91.99.65.0/24 maxlen: 24
                          91.99.66.0/24 maxlen: 24
                          91.99.78.0/24 maxlen: 24
                          91.99.80.0/22 maxlen: 22
                          91.99.84.0/22 maxlen: 22
                          91.99.88.0/22 maxlen: 22
                          91.98.240.0/21 maxlen: 21
                          91.98.252.0/23 maxlen: 23
                          91.99.0.0/19 maxlen: 19
                          91.99.0.0/16 maxlen: 16
                          91.99.32.0/19 maxlen: 19
                          91.98.0.0/22 maxlen: 22
                          37.10.109.0/24 maxlen: 24
                          91.98.0.0/20 maxlen: 20
                          37.10.117.0/24 maxlen: 24
                          91.98.0.0/16 maxlen: 24
                          91.98.16.0/24 maxlen: 24
                          91.98.0.0/15 maxlen: 19
                          91.98.19.0/24 maxlen: 24
                          37.10.64.0/22 maxlen: 22
                          185.10.71.0/24 maxlen: 24
                          91.98.84.0/22 maxlen: 22
                          91.98.82.0/24 maxlen: 24
                          91.98.88.0/24 maxlen: 24
                          91.98.111.0/24 maxlen: 24
                          91.98.57.0/24 maxlen: 24
                          91.98.64.0/19 maxlen: 19
                          91.98.68.0/24 maxlen: 24
                          46.251.226.0/24 maxlen: 24
                          46.251.224.0/24 maxlen: 24
                          46.251.237.0/24 maxlen: 24
                          109.230.246.0/23 maxlen: 23
                          46.62.136.0/24 maxlen: 24
                          46.62.137.0/24 maxlen: 24
                          46.62.133.0/24 maxlen: 24
                          46.62.134.0/24 maxlen: 24
                          46.62.138.0/23 maxlen: 23
                          109.230.246.0/24 maxlen: 24
                          109.230.242.0/24 maxlen: 24
                          46.62.144.0/24 maxlen: 24
                          46.62.140.0/24 maxlen: 24
                          95.156.222.0/23 maxlen: 23
                          46.62.142.0/23 maxlen: 23
                          109.230.251.0/24 maxlen: 24
                          46.62.144.0/20 maxlen: 20
                          109.230.247.0/24 maxlen: 24
                          46.62.147.0/24 maxlen: 24
                          46.62.148.0/22 maxlen: 22
                          95.156.233.0/24 maxlen: 24
                          46.62.152.0/24 maxlen: 24
                          95.156.236.0/23 maxlen: 23
                          95.156.234.0/23 maxlen: 23
                          46.62.156.0/24 maxlen: 24
                          46.62.158.0/24 maxlen: 24
                          46.62.153.0/24 maxlen: 24
                          46.62.160.0/19 maxlen: 19
                          46.62.165.0/24 maxlen: 24
                          46.62.168.0/21 maxlen: 21
                          46.62.168.0/22 maxlen: 22
                          46.62.172.0/22 maxlen: 22
                          46.62.166.0/23 maxlen: 23
                          95.156.248.0/23 maxlen: 23
                          46.62.178.0/23 maxlen: 23
                          46.62.176.0/20 maxlen: 20
                          46.62.180.0/22 maxlen: 22
                          46.62.184.0/22 maxlen: 22
                          109.230.192.0/23 maxlen: 23
                          109.230.200.0/24 maxlen: 24
                          109.230.204.0/22 maxlen: 22
                          109.230.223.0/24 maxlen: 24
                          109.230.221.0/24 maxlen: 24
                          46.62.131.0/24 maxlen: 24
                          46.62.132.0/24 maxlen: 24
                          46.62.128.0/23 maxlen: 23
                          46.62.128.0/20 maxlen: 20
                          46.62.128.0/19 maxlen: 19
                          46.62.128.0/17 maxlen: 24
                          46.62.240.0/20 maxlen: 20
                          46.62.188.0/22 maxlen: 22
                          46.62.192.0/19 maxlen: 19
                          46.62.192.0/18 maxlen: 18
                          46.62.208.0/20 maxlen: 20
                          46.62.224.0/20 maxlen: 20
                          46.62.224.0/19 maxlen: 19
                          213.217.32.0/20 maxlen: 24
                          213.217.32.0/19 maxlen: 19
                          213.217.36.0/22 maxlen: 22
                          213.217.41.0/24 maxlen: 24
                          213.217.46.0/24 maxlen: 24
                          213.217.47.0/24 maxlen: 24
                          213.217.48.0/20 maxlen: 20
                          213.217.55.0/24 maxlen: 24
                          213.217.56.0/24 maxlen: 24
                          213.217.57.0/24 maxlen: 24
                          213.217.62.0/24 maxlen: 24
                          46.41.192.0/19 maxlen: 19
                          46.41.192.0/20 maxlen: 20
                          46.41.192.0/18 maxlen: 18
                          46.41.224.0/20 maxlen: 20
                          46.41.224.0/19 maxlen: 19
                          185.13.228.0/22 maxlen: 22
                          178.169.0.0/19 maxlen: 19
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129167276 (0x7b2efac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
        Validity
            Not Before: Jan  1 02:54:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3f7c6db4543bef8a614908219a2c0205afb4a6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:b9:9f:29:f3:15:97:69:aa:94:82:0a:ab:
                    9d:cc:a7:53:a5:3d:4d:32:66:10:5d:eb:6b:54:89:
                    62:2f:23:ea:d6:68:7b:1b:78:21:5e:31:54:ed:57:
                    7c:33:f0:6a:7b:3c:ca:9a:20:a5:1a:4d:40:39:00:
                    0b:ca:3a:39:2c:35:c7:bc:22:01:87:b8:4d:c0:c6:
                    99:a8:45:52:82:7f:61:1c:fd:59:58:fc:b1:32:91:
                    44:c5:5d:5e:39:15:19:12:4e:e0:7b:ac:7c:a8:e9:
                    de:ca:68:5f:bd:32:ab:52:d4:85:c9:88:81:91:23:
                    2c:87:c5:79:6b:89:ed:5a:7b:2c:63:cd:66:0f:0a:
                    4a:5b:cf:ac:64:ec:21:29:6f:59:3c:f4:9c:ec:1c:
                    9e:aa:16:d1:f4:8f:6f:bb:92:bb:b5:5c:b6:3c:27:
                    13:68:04:62:95:17:1f:49:b8:1b:e3:25:c5:04:a6:
                    e7:a8:fa:c0:f0:02:9a:d3:d2:ac:95:a1:00:c0:e6:
                    40:fb:c6:d2:66:b3:7e:41:a7:1b:ed:68:28:e4:00:
                    22:86:d7:e2:27:75:33:ab:10:9c:af:fa:33:a0:58:
                    b5:26:29:4e:39:a8:54:8d:a9:32:d5:c8:a8:e4:72:
                    14:24:a5:d3:53:2c:b0:81:b0:17:d9:e8:8b:06:b4:
                    ff:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7C:6D:B4:54:3B:EF:8A:61:49:08:21:9A:2C:02:05:AF:B4:A6:C1
            X509v3 Authority Key Identifier:
                keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/P3xttFQ774phSQghmiwCBa-0psE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.214.132.0/23
                  31.214.146.0/23
                  31.214.154.0/24
                  31.214.168.0/21
                  31.214.200.0/23
                  31.214.228.0/22
                  31.214.248.0/21
                  37.10.64.0/22
                  37.10.109.0/24
                  37.10.117.0/24
                  37.228.131.0/24
                  37.228.133.0/24
                  37.228.135.0-37.228.139.255
                  46.41.192.0/18
                  46.62.128.0/17
                  46.251.224.0/24
                  46.251.226.0/24
                  46.251.237.0/24
                  82.99.192.0/18
                  91.98.0.0/15
                  95.156.222.0/23
                  95.156.233.0-95.156.237.255
                  95.156.248.0/23
                  109.230.192.0/23
                  109.230.200.0/24
                  109.230.204.0/22
                  109.230.221.0/24
                  109.230.223.0/24
                  109.230.242.0/24
                  109.230.246.0/23
                  109.230.251.0/24
                  134.255.196.0/23
                  134.255.200.0/21
                  134.255.245.0-134.255.246.255
                  134.255.249.0/24
                  178.169.0.0/19
                  185.10.71.0/24
                  185.13.228.0/22
                  213.217.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:e1:c5:a9:15:7a:8e:d5:4d:4e:a0:d4:26:fb:cd:9c:75:e8:
         76:04:b6:3d:ca:bc:95:2b:49:35:e6:96:7e:d2:65:a5:4b:64:
         04:23:60:3d:ff:a5:63:11:23:08:b1:b1:97:c1:35:24:31:ba:
         c2:e5:e4:cb:55:19:7b:34:17:74:5f:b4:66:de:3c:cb:f0:46:
         87:08:00:ea:ab:f8:30:db:1f:af:12:a5:4a:e5:fa:4a:5e:53:
         c9:23:f7:ea:e4:73:b9:7d:3f:18:e6:6e:7e:8a:91:20:07:81:
         34:e7:c2:08:30:8c:82:61:88:0c:53:a5:7f:7f:d4:37:9d:3d:
         be:f1:76:65:55:42:1c:e7:3c:87:06:b9:38:81:76:12:36:c6:
         51:36:83:a2:73:97:96:12:63:4b:fa:e7:28:6b:51:57:fc:60:
         e6:bb:ba:00:ed:d8:cf:00:76:32:84:fa:b9:5a:cb:7f:2e:1d:
         88:dd:ec:b9:82:1e:81:36:0a:bd:ce:2b:ca:e0:ef:2b:a9:31:
         e0:76:99:43:e3:65:f4:ee:6a:e2:57:69:ca:9a:76:59:0d:c7:
         e5:a4:fb:59:0e:65:41:9d:1d:fe:b5:19:36:4d:bb:ab:64:b2:
         5a:b9:61:55:d1:90:69:a5:55:54:4c:2f:cb:aa:21:0a:4a:f6:
         8a:66:c2:da
-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgIEB7LvrDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZjgxNGFkYzFkNTIwOWUwOThmMDc4YWRiYzg1NmJhZDgzYjc0OWMyMB4XDTIyMDEw
MTAyNTQ0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2Y3YzZkYjQ1NDNi
ZWY4YTYxNDkwODIxOWEyYzAyMDVhZmI0YTZjMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMshuZ8p8xWXaaqUggqrncynU6U9TTJmEF3ra1SJYi8j6tZo
ext4IV4xVO1XfDPwans8ypogpRpNQDkAC8o6OSw1x7wiAYe4TcDGmahFUoJ/YRz9
WVj8sTKRRMVdXjkVGRJO4HusfKjp3spoX70yq1LUhcmIgZEjLIfFeWuJ7Vp7LGPN
Zg8KSlvPrGTsISlvWTz0nOwcnqoW0fSPb7uSu7VctjwnE2gEYpUXH0m4G+MlxQSm
56j6wPACmtPSrJWhAMDmQPvG0mazfkGnG+1oKOQAIobX4id1M6sQnK/6M6BYtSYp
TjmoVI2pMtXIqORyFCSl01MssIGwF9noiwa0/1MCAwEAAaOCAw4wggMKMB0GA1Ud
DgQWBBQ/fG20VDvvimFJCCGaLAIFr7SmwTAfBgNVHSMEGDAWgBQvgUrcHVIJ4Jjw
eK28hWutg7dJwjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0w0RkszQjFTQ2VDWThIaXR2SVZycllPM1NjSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDIvMTNlMTJhLTJiYWMtNDc1Mi05OTdkLWRmODZiNmRkOTk3Yy8x
L1AzeHR0RlE3NzRwaFNRZ2htaXdDQmEtMHBzRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIv
MTNlMTJhLTJiYWMtNDc1Mi05OTdkLWRmODZiNmRkOTk3Yy8xL0w0RkszQjFTQ2VD
WThIaXR2SVZycllPM1NjSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
ASIGCCsGAQUFBwEHAQH/BIIBETCCAQ0wggEJBAIAATCCAQEDBAEf1oQDBAEf1pID
BAAf1poDBAMf1qgDBAEf1sgDBAIf1uQDBAMf1vgDBAIlCkADBAAlCm0DBAAlCnUD
BAAl5IMDBAAl5IUwDAMEACXkhwMEAiXkiAMEBi4pwAMEBy4+gAMEAC774AMEAC77
4gMEAC777QMEBlJjwAMDAVtiAwQBX5zeMAwDBABfnOkDBAFfnOwDBAFfnPgDBAFt
5sADBABt5sgDBAJt5swDBABt5t0DBABt5t8DBABt5vIDBAFt5vYDBABt5vsDBAGG
/8QDBAOG/8gwDAMEAIb/9QMEAIb/9gMEAIb/+QMEBbKpAAMEALkKRwMEArkN5AME
BdXZIDANBgkqhkiG9w0BAQsFAAOCAQEAduHFqRV6jtVNTqDUJvvNnHXodgS2Pcq8
lStJNeaWftJlpUtkBCNgPf+lYxEjCLGxl8E1JDG6wuXky1UZezQXdF+0Zt48y/BG
hwgA6qv4MNsfrxKlSuX6Sl5TySP36uRzuX0/GOZufoqRIAeBNOfCCDCMgmGIDFOl
f3/UN509vvF2ZVVCHOc8hwa5OIF2EjbGUTaDonOXlhJjS/rnKGtRV/xg5ru6AO3Y
zwB2MoT6uVrLfy4diN3suYIegTYKvc4ryuDvK6kx4HaZQ+Nl9O5q4ldpypp2WQ3H
5aT7WQ5lQZ0d/rUZNk27q2SyWrlhVdGQaaVVVEwvy6ohCkr2imbC2g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:45 2025 by rpki-client