Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_FUdPPW1ccMasNmaP0ygyHPSPp0.roa
File:                     _FUdPPW1ccMasNmaP0ygyHPSPp0.roa (raw, json)
Hash identifier:          EbnzkXmS3SgcGVqPYLEOlJI1KRhO0HpTzd+l1fnCvQE=
Subject key identifier:   FC:55:1D:3C:F5:B5:71:C3:1A:B0:D9:9A:3F:4C:A0:C8:73:D2:3E:9D
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       0183AC2956A2AFC95F5FB8B57FF81F9A5183
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_FUdPPW1ccMasNmaP0ygyHPSPp0.roa
Signing time:             Thu 06 Oct 2022 07:18:53 +0000
ROA not before:           Thu 06 Oct 2022 07:18:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34665
IP address blocks:        46.161.14.0/23 maxlen: 23
                          46.161.20.0/22 maxlen: 22
                          46.161.24.0/23 maxlen: 23
                          5.188.10.0/23 maxlen: 23
                          5.188.9.0/24 maxlen: 24
                          95.215.0.0/22 maxlen: 24
                          95.215.2.0/23 maxlen: 23
                          95.215.0.0/23 maxlen: 23
                          46.161.26.0/24 maxlen: 24
                          95.215.0.0/24 maxlen: 24
                          95.215.3.0/24 maxlen: 24
                          46.161.30.0/24 maxlen: 24
                          46.161.28.0/24 maxlen: 24
                          95.215.1.0/24 maxlen: 24
                          46.161.29.0/24 maxlen: 24
                          95.215.2.0/24 maxlen: 24
                          46.161.32.0/22 maxlen: 22
                          46.161.44.0/22 maxlen: 22
                          46.161.42.0/24 maxlen: 24
                          46.161.48.0/22 maxlen: 22
                          46.161.48.0/23 maxlen: 23
                          46.161.50.0/23 maxlen: 23
                          46.161.48.0/24 maxlen: 24
                          46.161.51.0/24 maxlen: 24
                          46.161.49.0/24 maxlen: 24
                          46.161.50.0/24 maxlen: 24
                          5.188.44.0/22 maxlen: 22
                          5.188.44.0/23 maxlen: 23
                          5.188.44.0/24 maxlen: 24
                          5.188.46.0/23 maxlen: 23
                          5.188.49.0/24 maxlen: 24
                          5.188.47.0/24 maxlen: 24
                          5.188.48.0/24 maxlen: 24
                          5.188.46.0/24 maxlen: 24
                          5.188.45.0/24 maxlen: 24
                          46.161.2.0/23 maxlen: 24
                          46.161.11.0/24 maxlen: 24
                          46.161.10.0/24 maxlen: 24
                          46.161.8.0/24 maxlen: 24
                          5.101.4.0/24 maxlen: 24
                          5.101.2.0/24 maxlen: 24
                          5.101.3.0/24 maxlen: 24
                          5.101.0.0/24 maxlen: 24
                          5.101.1.0/24 maxlen: 24
                          5.101.2.0/23 maxlen: 23
                          5.101.4.0/22 maxlen: 22
                          5.101.4.0/23 maxlen: 23
                          5.101.0.0/22 maxlen: 22
                          5.101.0.0/23 maxlen: 23
                          5.101.7.0/24 maxlen: 24
                          5.101.5.0/24 maxlen: 24
                          5.101.6.0/24 maxlen: 24
                          5.101.6.0/23 maxlen: 23
                          5.188.62.0/24 maxlen: 24
                          5.188.60.0/23 maxlen: 23
                          37.139.51.0/24 maxlen: 24
                          37.139.49.0/24 maxlen: 24
                          37.139.58.0/24 maxlen: 24
                          37.139.57.0/24 maxlen: 24
                          37.139.56.0/24 maxlen: 24
                          37.139.53.0/24 maxlen: 24
                          37.139.58.0/23 maxlen: 23
                          37.139.56.0/23 maxlen: 23
                          37.139.56.0/22 maxlen: 22
                          37.139.54.0/23 maxlen: 23
                          37.139.59.0/24 maxlen: 24
                          31.44.185.0/24 maxlen: 24
                          31.44.184.0/24 maxlen: 24
                          31.44.188.0/22 maxlen: 32
                          146.185.244.0/23 maxlen: 23
                          146.185.196.0/22 maxlen: 22
                          146.185.224.0/21 maxlen: 21
                          146.185.223.0/24 maxlen: 24
                          185.238.152.0/22 maxlen: 22
                          31.184.192.0/24 maxlen: 24
                          31.184.192.0/23 maxlen: 23
                          31.184.192.0/22 maxlen: 22
                          31.184.193.0/24 maxlen: 24
                          31.184.196.0/24 maxlen: 24
                          31.184.195.0/24 maxlen: 24
                          31.184.196.0/22 maxlen: 22
                          31.184.196.0/23 maxlen: 23
                          31.184.194.0/23 maxlen: 23
                          31.184.194.0/24 maxlen: 24
                          31.184.199.0/24 maxlen: 24
                          31.184.198.0/23 maxlen: 23
                          31.184.197.0/24 maxlen: 24
                          31.184.198.0/24 maxlen: 24
                          31.184.200.0/22 maxlen: 22
                          195.2.240.0/23 maxlen: 24
                          31.184.231.0/24 maxlen: 24
                          31.184.232.0/22 maxlen: 24
                          31.184.228.0/23 maxlen: 23
                          31.184.238.0/23 maxlen: 23
                          31.184.243.0/24 maxlen: 24
                          37.9.36.0/22 maxlen: 22
                          188.143.232.0/24 maxlen: 24
                          188.143.233.0/24 maxlen: 24
                          188.143.232.0/23 maxlen: 23
                          188.143.232.0/22 maxlen: 22
                          37.9.50.0/24 maxlen: 24
                          37.9.48.0/24 maxlen: 24
                          188.143.235.0/24 maxlen: 24
                          37.9.52.0/22 maxlen: 22
                          91.243.93.0/24 maxlen: 24
                          5.8.52.0/23 maxlen: 23
                          5.8.54.0/23 maxlen: 23
                          5.8.52.0/22 maxlen: 22
                          5.8.56.0/24 maxlen: 24
                          5.8.57.0/24 maxlen: 24
                          5.8.54.0/24 maxlen: 24
                          5.8.55.0/24 maxlen: 24
                          5.8.53.0/24 maxlen: 24
                          5.8.52.0/24 maxlen: 24
                          5.8.60.0/23 maxlen: 23
                          5.8.62.0/24 maxlen: 24
                          5.8.59.0/24 maxlen: 24
                          5.8.65.0/24 maxlen: 24
                          5.8.8.0/24 maxlen: 24
                          5.8.10.0/23 maxlen: 23
                          5.8.8.0/23 maxlen: 23
                          5.8.8.0/22 maxlen: 22
                          5.8.11.0/24 maxlen: 24
                          5.8.9.0/24 maxlen: 24
                          5.8.10.0/24 maxlen: 24
                          5.8.12.0/22 maxlen: 22
                          5.8.20.0/22 maxlen: 22
                          5.189.248.0/22 maxlen: 22
                          5.8.48.0/23 maxlen: 23
                          5.8.48.0/22 maxlen: 22
                          5.8.50.0/23 maxlen: 23
                          5.8.49.0/24 maxlen: 24
                          5.8.50.0/24 maxlen: 24
                          5.8.48.0/24 maxlen: 24
                          5.8.51.0/24 maxlen: 24
                          5.101.66.0/23 maxlen: 23
                          5.101.66.0/24 maxlen: 24
                          5.101.67.0/24 maxlen: 24
                          5.101.65.0/24 maxlen: 24
                          5.101.68.0/22 maxlen: 22
                          5.188.220.0/23 maxlen: 24
                          5.188.223.0/24 maxlen: 24
                          5.188.222.0/24 maxlen: 24
                          5.101.80.0/22 maxlen: 22
                          5.188.233.0/24 maxlen: 24
                          5.101.84.0/22 maxlen: 22
                          5.188.234.0/23 maxlen: 23
                          5.101.90.0/23 maxlen: 23
                          5.188.166.0/24 maxlen: 24
                          5.188.165.0/24 maxlen: 24
                          5.188.176.0/22 maxlen: 24
                          5.101.36.0/22 maxlen: 22
                          5.101.32.0/22 maxlen: 24
                          5.188.204.0/23 maxlen: 23
                          5.101.64.0/22 maxlen: 22
                          5.101.64.0/23 maxlen: 23
                          5.188.211.0/24 maxlen: 24
                          5.188.210.0/24 maxlen: 24
                          5.188.207.0/24 maxlen: 24
                          5.101.64.0/24 maxlen: 24
                          5.188.208.0/23 maxlen: 23
                          91.243.44.0/22 maxlen: 22
                          91.243.48.0/22 maxlen: 22
                          91.243.48.0/23 maxlen: 23
                          91.243.50.0/23 maxlen: 23
                          91.243.51.0/24 maxlen: 24
                          91.243.50.0/24 maxlen: 24
                          91.243.48.0/24 maxlen: 24
                          91.243.49.0/24 maxlen: 24
                          91.243.56.0/22 maxlen: 22
                          91.243.52.0/22 maxlen: 22
                          91.243.62.0/23 maxlen: 23
                          91.243.60.0/24 maxlen: 24
                          91.243.61.0/24 maxlen: 24
                          91.243.91.0/24 maxlen: 24
                          91.243.90.0/24 maxlen: 24
                          91.243.32.0/22 maxlen: 22
                          2a00:1d78:100:1c0::/58 maxlen: 58

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ac:29:56:a2:af:c9:5f:5f:b8:b5:7f:f8:1f:9a:51:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Oct  6 07:18:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fc551d3cf5b571c31ab0d99a3f4ca0c873d23e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:16:ec:12:f7:f3:91:7d:93:fd:44:e5:46:
                    54:91:aa:a3:0d:6c:03:0d:6c:5b:02:4c:53:ea:eb:
                    e5:7c:95:d7:5a:0a:f2:63:07:6b:73:d8:4b:93:ef:
                    9b:81:db:df:85:1b:01:a0:86:53:76:88:41:09:77:
                    7b:b5:5a:d1:73:a7:46:17:71:2c:70:49:fe:2c:c0:
                    d1:84:97:5d:31:3a:15:40:3e:52:ac:da:38:9f:74:
                    02:a3:33:a6:bc:d1:7c:3f:c8:51:b5:f9:d8:6c:4f:
                    71:fe:db:7f:45:89:d8:90:56:12:ce:43:5a:50:f9:
                    5b:25:ab:6f:0c:4f:5e:84:40:47:69:3a:3f:35:c7:
                    aa:a0:cb:cc:a5:fe:da:c5:5e:b7:08:0d:40:2c:1c:
                    7d:ec:8f:16:58:35:2d:9c:51:05:50:5f:b6:bd:e9:
                    48:52:73:32:a0:da:bb:e0:ae:c5:25:55:71:77:90:
                    cd:0f:fd:21:be:06:0e:5d:e2:92:b8:1c:c8:f9:16:
                    ce:5f:01:a8:a5:7b:c2:b6:9f:07:36:5c:0e:88:bb:
                    00:79:08:6a:61:1b:7d:1a:ee:9c:f7:86:f8:a9:c0:
                    27:c8:41:0f:20:34:52:74:25:00:5f:ba:cd:70:db:
                    5b:93:17:3e:53:a6:f3:11:07:ff:f2:24:fc:30:16:
                    cc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:55:1D:3C:F5:B5:71:C3:1A:B0:D9:9A:3F:4C:A0:C8:73:D2:3E:9D
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_FUdPPW1ccMasNmaP0ygyHPSPp0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.8.0/21
                  5.8.20.0/22
                  5.8.48.0-5.8.57.255
                  5.8.59.0-5.8.62.255
                  5.8.65.0/24
                  5.101.0.0/21
                  5.101.32.0/21
                  5.101.64.0/21
                  5.101.80.0/21
                  5.101.90.0/23
                  5.188.9.0-5.188.11.255
                  5.188.44.0-5.188.49.255
                  5.188.60.0-5.188.62.255
                  5.188.165.0-5.188.166.255
                  5.188.176.0/22
                  5.188.204.0/23
                  5.188.207.0-5.188.211.255
                  5.188.220.0/22
                  5.188.233.0-5.188.235.255
                  5.189.248.0/22
                  31.44.184.0/23
                  31.44.188.0/22
                  31.184.192.0-31.184.203.255
                  31.184.228.0/23
                  31.184.231.0-31.184.235.255
                  31.184.238.0/23
                  31.184.243.0/24
                  37.9.36.0/22
                  37.9.48.0/24
                  37.9.50.0/24
                  37.9.52.0/22
                  37.139.49.0/24
                  37.139.51.0/24
                  37.139.53.0-37.139.59.255
                  46.161.2.0/23
                  46.161.8.0/24
                  46.161.10.0/23
                  46.161.14.0/23
                  46.161.20.0-46.161.26.255
                  46.161.28.0-46.161.30.255
                  46.161.32.0/22
                  46.161.42.0/24
                  46.161.44.0-46.161.51.255
                  91.243.32.0/22
                  91.243.44.0-91.243.63.255
                  91.243.90.0/23
                  91.243.93.0/24
                  95.215.0.0/22
                  146.185.196.0/22
                  146.185.223.0-146.185.231.255
                  146.185.244.0/23
                  185.238.152.0/22
                  188.143.232.0/22
                  195.2.240.0/23
                IPv6:
                  2a00:1d78:100:1c0::/58

    Signature Algorithm: sha256WithRSAEncryption
         79:71:2f:6a:fd:46:a9:2f:57:df:84:71:52:31:d0:89:21:09:
         97:93:df:5d:62:f9:24:a2:49:84:0e:3d:72:5c:13:47:16:5e:
         4d:3b:7b:b5:d1:98:8b:e3:96:94:bd:ad:4c:f4:ae:4f:77:ef:
         36:9a:42:59:d6:a2:55:37:54:16:c2:a1:ab:04:87:38:ee:b3:
         ce:94:cd:d2:c9:4d:43:03:8e:b4:d7:da:31:cc:72:0a:b1:1c:
         2d:41:cc:6f:84:0f:e2:d7:f6:75:af:4c:51:42:b3:eb:31:ba:
         d0:0a:15:59:7a:c2:14:ce:47:05:e6:3b:68:6d:0e:11:3a:5b:
         ae:5c:71:81:1b:f0:3b:b4:6f:e5:cf:6d:e9:cd:4b:7b:ce:60:
         98:82:75:82:c7:3b:22:76:85:9d:40:bb:8f:5b:8f:31:f0:3d:
         66:0d:46:52:4e:7d:cd:c5:d7:af:11:51:1e:ef:ac:04:04:6a:
         70:b0:43:98:af:22:6f:45:96:d6:de:72:11:8a:81:bd:c3:39:
         84:e4:0e:26:d9:1e:bd:87:4d:ef:90:a1:81:ee:4b:01:aa:e3:
         a8:7a:e4:54:03:7b:e3:87:05:3e:ea:03:e9:87:16:b5:7e:8a:
         b0:76:09:69:26:ce:ae:8e:39:71:ac:03:37:d0:85:df:d0:ad:
         fa:9a:a3:94
-----BEGIN CERTIFICATE-----
MIIG2DCCBcCgAwIBAgISAYOsKVair8lfX7i1f/gfmlGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjIxMDA2MDcxODUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzU1MWQzY2Y1YjU3MWMzMWFiMGQ5OWEzZjRjYTBjODczZDIzZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNIW7BL385F9k/1E5UZUkaqjDWwD
DWxbAkxT6uvlfJXXWgryYwdrc9hLk++bgdvfhRsBoIZTdohBCXd7tVrRc6dGF3Es
cEn+LMDRhJddMToVQD5SrNo4n3QCozOmvNF8P8hRtfnYbE9x/tt/RYnYkFYSzkNa
UPlbJatvDE9ehEBHaTo/NceqoMvMpf7axV63CA1ALBx97I8WWDUtnFEFUF+2velI
UnMyoNq74K7FJVVxd5DND/0hvgYOXeKSuBzI+RbOXwGopXvCtp8HNlwOiLsAeQhq
YRt9Gu6c94b4qcAnyEEPIDRSdCUAX7rNcNtbkxc+U6bzEQf/8iT8MBbM4wIDAQAB
o4ID5DCCA+AwHQYDVR0OBBYEFPxVHTz1tXHDGrDZmj9MoMhz0j6dMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvX0ZVZFBQVzFjY01hc05tYVAweWd5SFBTUHAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB+AYIKwYBBQUHAQcBAf8EggHnMIIB4zCCAcwEAgABMIIB
xAMEAwUICAMEAgUIFDAMAwQEBQgwAwQBBQg4MAwDBAAFCDsDBAAFCD4DBAAFCEED
BAMFZQADBAMFZSADBAMFZUADBAMFZVADBAEFZVowDAMEAAW8CQMEAgW8CDAMAwQC
BbwsAwQBBbwwMAwDBAIFvDwDBAAFvD4wDAMEAAW8pQMEAAW8pgMEAgW8sAMEAQW8
zDAMAwQABbzPAwQCBbzQAwQCBbzcMAwDBAAFvOkDBAIFvOgDBAIFvfgDBAEfLLgD
BAIfLLwwDAMEBh+4wAMEAh+4yAMEAR+45DAMAwQAH7jnAwQCH7joAwQBH7juAwQA
H7jzAwQCJQkkAwQAJQkwAwQAJQkyAwQCJQk0AwQAJYsxAwQAJYszMAwDBAAlizUD
BAIlizgDBAEuoQIDBAAuoQgDBAEuoQoDBAEuoQ4wDAMEAi6hFAMEAC6hGjAMAwQC
LqEcAwQALqEeAwQCLqEgAwQALqEqMAwDBAIuoSwDBAIuoTADBAJb8yAwDAMEAlvz
LAMEBlvzAAMEAVvzWgMEAFvzXQMEAl/XAAMEApK5xDAMAwQAkrnfAwQDkrngAwQB
krn0AwQCue6YAwQCvI/oAwQBwwLwMBEEAgACMAsDCQYqAB14AQABwDANBgkqhkiG
9w0BAQsFAAOCAQEAeXEvav1GqS9X34RxUjHQiSEJl5PfXWL5JKJJhA49clwTRxZe
TTt7tdGYi+OWlL2tTPSuT3fvNppCWdaiVTdUFsKhqwSHOO6zzpTN0slNQwOOtNfa
McxyCrEcLUHMb4QP4tf2da9MUUKz6zG60AoVWXrCFM5HBeY7aG0OETpbrlxxgRvw
O7Rv5c9t6c1Le85gmIJ1gsc7InaFnUC7j1uPMfA9Zg1GUk59zcXXrxFRHu+sBARq
cLBDmK8ib0WW1t5yEYqBvcM5hOQOJtkevYdN75Chge5LAarjqHrkVAN744cFPuoD
6YcWtX6KsHYJaSbOro45cawDN9CF39Ct+pqjlA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org