Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/5Vm2SGEvAtSG4wc8LqwMT6xkUmU.roa
File:                     5Vm2SGEvAtSG4wc8LqwMT6xkUmU.roa (raw, json)
Hash identifier:          zxKy4WKBclWZ40jIp7P8SL8s/7PLjc/9cIo/djojqLE=
Subject key identifier:   E5:59:B6:48:61:2F:02:D4:86:E3:07:3C:2E:AC:0C:4F:AC:64:52:65
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       174DB7CC
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/5Vm2SGEvAtSG4wc8LqwMT6xkUmU.roa
Signing time:             Mon 06 Jun 2022 09:49:21 +0000
ROA not before:           Mon 06 Jun 2022 09:49:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25229
IP address blocks:        77.121.17.0/24 maxlen: 24
                          77.121.16.0/24 maxlen: 24
                          77.121.15.0/24 maxlen: 24
                          77.121.13.0/24 maxlen: 24
                          77.121.12.0/24 maxlen: 24
                          77.121.19.0/24 maxlen: 24
                          77.121.18.0/24 maxlen: 24
                          77.121.24.0/24 maxlen: 24
                          77.121.23.0/24 maxlen: 24
                          77.121.22.0/24 maxlen: 24
                          77.121.21.0/24 maxlen: 24
                          77.121.20.0/24 maxlen: 24
                          77.121.30.0/24 maxlen: 24
                          77.121.29.0/24 maxlen: 24
                          77.121.28.0/24 maxlen: 24
                          77.121.26.0/24 maxlen: 24
                          77.121.25.0/24 maxlen: 24
                          93.74.0.0/17 maxlen: 18
                          93.74.0.0/16 maxlen: 17
                          77.120.4.0/24 maxlen: 24
                          93.73.0.0/16 maxlen: 17
                          93.72.0.0/16 maxlen: 17
                          93.72.0.0/15 maxlen: 16
                          95.69.240.0/21 maxlen: 22
                          95.69.250.0/23 maxlen: 24
                          95.69.248.0/22 maxlen: 23
                          77.123.64.0/19 maxlen: 20
                          77.123.0.0/18 maxlen: 19
                          77.123.32.0/19 maxlen: 20
                          77.123.160.0/19 maxlen: 20
                          141.170.226.0/24 maxlen: 24
                          141.170.229.0/24 maxlen: 24
                          141.170.227.0/24 maxlen: 24
                          141.170.233.0/24 maxlen: 24
                          141.170.232.0/24 maxlen: 24
                          141.170.231.0/24 maxlen: 24
                          141.170.230.0/24 maxlen: 24
                          141.170.238.0/24 maxlen: 24
                          141.170.236.0/24 maxlen: 24
                          77.123.96.0/21 maxlen: 22
                          77.123.104.0/21 maxlen: 22
                          95.69.128.0/20 maxlen: 21
                          95.69.144.0/21 maxlen: 22
                          77.123.112.0/21 maxlen: 22
                          95.69.152.0/22 maxlen: 23
                          77.123.120.0/21 maxlen: 22
                          77.123.128.0/19 maxlen: 20
                          95.69.156.0/22 maxlen: 23
                          95.69.160.0/21 maxlen: 22
                          188.230.28.0/22 maxlen: 23
                          188.230.26.0/23 maxlen: 24
                          188.230.32.0/21 maxlen: 22
                          188.230.40.0/21 maxlen: 22
                          188.230.48.0/21 maxlen: 22
                          188.230.56.0/21 maxlen: 22
                          188.230.64.0/21 maxlen: 22
                          188.230.78.0/23 maxlen: 24
                          77.122.128.0/17 maxlen: 18
                          188.230.74.0/23 maxlen: 24
                          188.230.0.0/21 maxlen: 22
                          188.230.0.0/22 maxlen: 23
                          188.230.4.0/23 maxlen: 24
                          188.230.8.0/21 maxlen: 22
                          188.230.16.0/21 maxlen: 22
                          188.230.24.0/23 maxlen: 24
                          77.244.32.0/20 maxlen: 21
                          188.230.80.0/21 maxlen: 22
                          188.230.88.0/22 maxlen: 23
                          188.230.96.0/23 maxlen: 24
                          188.230.118.0/23 maxlen: 24
                          188.230.116.0/23 maxlen: 24
                          188.230.120.0/22 maxlen: 23
                          188.230.126.0/23 maxlen: 24
                          77.121.128.0/20 maxlen: 21
                          77.121.144.0/20 maxlen: 21
                          77.121.160.0/19 maxlen: 20
                          77.121.72.0/21 maxlen: 22
                          77.121.80.0/20 maxlen: 21
                          77.121.96.0/20 maxlen: 21
                          77.121.96.0/19 maxlen: 20
                          77.121.112.0/20 maxlen: 21
                          77.122.0.0/17 maxlen: 18
                          193.189.96.0/23 maxlen: 24
                          77.122.0.0/16 maxlen: 17
                          77.121.192.0/20 maxlen: 21
                          77.121.192.0/19 maxlen: 20
                          77.121.208.0/21 maxlen: 22
                          77.121.216.0/21 maxlen: 22
                          77.121.224.0/19 maxlen: 20
                          77.120.200.0/21 maxlen: 22
                          77.120.208.0/21 maxlen: 22
                          77.120.128.0/18 maxlen: 19
                          77.121.64.0/21 maxlen: 22
                          77.120.216.0/22 maxlen: 23
                          77.120.224.0/22 maxlen: 23
                          77.120.224.0/20 maxlen: 21
                          77.120.220.0/22 maxlen: 23
                          77.120.232.0/22 maxlen: 23
                          77.120.228.0/22 maxlen: 23
                          77.120.236.0/22 maxlen: 23
                          77.120.240.0/20 maxlen: 21
                          77.121.0.0/21 maxlen: 22
                          77.121.8.0/22 maxlen: 23
                          93.79.96.0/21 maxlen: 22
                          93.79.104.0/21 maxlen: 22
                          93.79.112.0/23 maxlen: 24
                          93.79.114.0/23 maxlen: 24
                          93.79.112.0/21 maxlen: 22
                          93.79.120.0/21 maxlen: 22
                          93.79.128.0/17 maxlen: 17
                          93.79.128.0/18 maxlen: 19
                          93.79.64.0/19 maxlen: 20
                          77.120.52.0/22 maxlen: 23
                          77.120.64.0/21 maxlen: 22
                          77.120.60.0/22 maxlen: 23
                          77.120.72.0/21 maxlen: 22
                          77.120.80.0/22 maxlen: 23
                          77.120.80.0/20 maxlen: 21
                          77.120.84.0/22 maxlen: 23
                          77.120.88.0/22 maxlen: 23
                          77.120.92.0/22 maxlen: 23
                          77.120.96.0/19 maxlen: 20
                          77.120.0.0/20 maxlen: 21
                          77.120.16.0/20 maxlen: 21
                          77.120.32.0/20 maxlen: 21
                          93.79.192.0/18 maxlen: 19
                          93.78.96.0/19 maxlen: 20
                          93.78.128.0/17 maxlen: 18
                          93.78.128.0/18 maxlen: 19
                          93.79.0.0/18 maxlen: 19
                          93.79.0.0/19 maxlen: 20
                          93.79.32.0/19 maxlen: 20
                          93.78.192.0/18 maxlen: 19
                          93.77.192.0/19 maxlen: 20
                          93.77.224.0/19 maxlen: 20
                          93.77.128.0/19 maxlen: 20
                          93.78.32.0/20 maxlen: 21
                          93.78.48.0/21 maxlen: 22
                          93.78.56.0/21 maxlen: 22
                          93.78.0.0/19 maxlen: 20
                          93.77.0.0/19 maxlen: 20
                          93.76.160.0/19 maxlen: 20
                          95.69.232.0/24 maxlen: 24
                          141.170.250.0/23 maxlen: 24
                          141.170.248.0/23 maxlen: 24
                          95.69.253.0/24 maxlen: 24
                          95.69.252.0/24 maxlen: 24
                          95.69.255.0/24 maxlen: 24
                          95.69.254.0/24 maxlen: 24
                          93.76.192.0/18 maxlen: 19
                          93.77.64.0/18 maxlen: 19
                          82.144.192.0/19 maxlen: 20
                          93.77.32.0/20 maxlen: 21
                          93.77.48.0/21 maxlen: 22
                          93.77.56.0/21 maxlen: 22
                          93.76.0.0/19 maxlen: 20
                          93.76.32.0/20 maxlen: 21
                          93.76.48.0/20 maxlen: 21
                          93.75.224.0/19 maxlen: 20
                          93.76.112.0/20 maxlen: 21
                          93.76.128.0/19 maxlen: 20
                          141.170.226.0/23 maxlen: 24
                          141.170.224.0/23 maxlen: 24
                          141.170.234.0/23 maxlen: 24
                          141.170.240.0/22 maxlen: 23
                          93.76.64.0/20 maxlen: 21
                          93.76.80.0/21 maxlen: 22
                          93.76.88.0/21 maxlen: 22
                          93.76.96.0/21 maxlen: 22
                          93.76.104.0/21 maxlen: 22
                          93.75.64.0/21 maxlen: 22
                          93.75.72.0/21 maxlen: 22
                          93.75.80.0/21 maxlen: 22
                          188.230.71.0/24 maxlen: 24
                          188.230.77.0/24 maxlen: 24
                          188.230.76.0/24 maxlen: 24
                          93.75.88.0/21 maxlen: 22
                          188.230.73.0/24 maxlen: 24
                          188.230.72.0/24 maxlen: 24
                          93.75.0.0/19 maxlen: 20
                          188.230.7.0/24 maxlen: 24
                          93.75.32.0/19 maxlen: 20
                          93.75.160.0/21 maxlen: 22
                          93.75.168.0/21 maxlen: 22
                          93.75.176.0/21 maxlen: 22
                          93.75.184.0/21 maxlen: 22
                          93.75.192.0/19 maxlen: 20
                          93.75.192.0/18 maxlen: 19
                          93.75.96.0/19 maxlen: 20
                          188.230.98.0/24 maxlen: 24
                          188.230.95.0/24 maxlen: 24
                          188.230.94.0/24 maxlen: 24
                          188.230.105.0/24 maxlen: 24
                          188.230.104.0/24 maxlen: 24
                          188.230.103.0/24 maxlen: 24
                          188.230.102.0/24 maxlen: 24
                          93.75.112.0/20 maxlen: 21
                          188.230.100.0/24 maxlen: 24
                          188.230.99.0/24 maxlen: 24
                          188.230.112.0/24 maxlen: 24
                          188.230.111.0/24 maxlen: 24
                          188.230.109.0/24 maxlen: 24
                          188.230.108.0/24 maxlen: 24
                          188.230.107.0/24 maxlen: 24
                          188.230.106.0/24 maxlen: 24
                          93.75.128.0/20 maxlen: 21
                          93.75.128.0/19 maxlen: 20
                          188.230.115.0/24 maxlen: 24
                          188.230.113.0/24 maxlen: 24
                          188.230.124.0/24 maxlen: 24
                          93.75.144.0/20 maxlen: 21
                          93.74.128.0/17 maxlen: 18

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390969292 (0x174db7cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Jun  6 09:49:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e559b648612f02d486e3073c2eac0c4fac645265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:ae:1b:5e:88:33:f7:5a:e3:6f:68:e2:77:
                    47:a1:25:52:43:4b:e6:06:05:a1:b8:56:34:cf:18:
                    b0:bd:39:f4:1b:75:2f:77:91:97:20:2b:ca:c7:a4:
                    37:66:27:fa:ed:03:86:f2:a6:8d:45:9a:41:71:ed:
                    dc:43:f5:2a:3a:60:89:f4:c6:7f:c2:98:49:f8:70:
                    ec:43:28:86:e2:43:0a:5c:d6:60:c2:dd:ad:b4:90:
                    ce:f2:44:44:f7:e4:a8:4c:7c:ff:4e:0a:81:96:e6:
                    2a:39:15:93:2a:8a:85:a1:16:89:25:b0:a7:3c:76:
                    64:6b:62:fb:8c:03:1c:11:a5:4e:b3:89:b6:d0:ae:
                    e4:0e:19:b9:5f:d5:17:43:f0:99:4f:89:63:cc:18:
                    7a:cd:ed:b3:08:a0:f0:75:5a:00:59:4b:68:28:96:
                    de:11:c4:57:41:02:b4:99:35:36:3a:63:1a:0c:dd:
                    16:3e:d3:8b:25:2d:a5:35:41:c4:42:43:93:cd:4e:
                    46:29:e2:91:52:e2:f0:cb:c6:c5:52:26:ac:58:b0:
                    e2:52:d6:f9:f0:bd:9a:8d:45:08:c9:0f:4d:9a:d4:
                    be:b8:6a:16:29:a7:b6:4b:1a:ad:94:84:25:ae:1c:
                    eb:43:70:f1:3c:c9:8d:52:c5:df:57:bd:da:f2:3b:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:59:B6:48:61:2F:02:D4:86:E3:07:3C:2E:AC:0C:4F:AC:64:52:65
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/5Vm2SGEvAtSG4wc8LqwMT6xkUmU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.120.0.0-77.120.47.255
                  77.120.52.0/22
                  77.120.60.0-77.120.191.255
                  77.120.200.0-77.121.13.255
                  77.121.15.0-77.121.26.255
                  77.121.28.0-77.121.30.255
                  77.121.64.0-77.123.191.255
                  77.244.32.0/20
                  82.144.192.0/19
                  93.72.0.0-93.77.159.255
                  93.77.192.0-93.78.63.255
                  93.78.96.0-93.79.255.255
                  95.69.128.0-95.69.167.255
                  95.69.232.0/24
                  95.69.240.0/20
                  141.170.224.0/22
                  141.170.229.0-141.170.236.255
                  141.170.238.0/24
                  141.170.240.0/22
                  141.170.248.0/22
                  188.230.0.0-188.230.91.255
                  188.230.94.0-188.230.100.255
                  188.230.102.0-188.230.109.255
                  188.230.111.0-188.230.113.255
                  188.230.115.0-188.230.124.255
                  188.230.126.0/23
                  193.189.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:b0:6d:e5:bb:c3:77:63:e5:aa:35:4c:db:be:c2:e8:87:19:
         99:29:9f:4f:22:f3:3c:48:67:8c:99:c7:84:1f:1c:ff:d5:52:
         f5:94:13:25:14:01:51:df:2a:87:d7:07:49:6f:07:8f:dc:69:
         22:2b:01:dd:a4:e7:ac:f5:a1:4c:8e:5e:04:88:30:c1:44:2c:
         0c:44:13:48:90:d9:05:ac:f1:3d:2e:0c:d6:57:92:c6:88:ad:
         37:90:b6:30:c3:c9:77:1a:a0:63:96:89:e2:fe:d7:5c:4b:57:
         fc:95:02:c2:8f:7b:bf:23:52:22:69:de:98:f6:45:85:9f:d2:
         3c:60:cb:18:7b:49:99:ed:8b:a1:71:a2:d5:48:2b:75:f9:9b:
         09:5d:fc:02:85:fc:f2:00:f3:75:e0:6e:de:89:41:cb:09:ea:
         26:12:cd:1b:15:45:37:6a:b9:e2:46:d9:95:0d:d7:4c:f2:0d:
         ce:a5:15:20:5d:ec:64:25:1e:27:89:84:92:ea:0e:4a:46:24:
         47:67:e6:15:9e:b8:ff:6c:3c:9f:6a:a1:3c:82:3a:de:7e:e3:
         91:35:43:cc:c2:b5:d6:c5:79:f5:e5:7f:f5:4c:1d:02:ce:fa:
         65:e9:b3:f5:7c:26:f4:6a:ec:e6:fd:e6:89:30:65:57:47:9b:
         5b:0a:a9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:35 2024 by rpki-client on console-fra.rpki-client.org