Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/CLC7IkCyn0bK-lfxsoQ-BrjGnqQ.roa
File:                     CLC7IkCyn0bK-lfxsoQ-BrjGnqQ.roa (raw, json)
Hash identifier:          tgqF4/m7hiW1ENS9w9wCWzfgjhnMUqbqi7pHW892fG0=
Subject key identifier:   08:B0:BB:22:40:B2:9F:46:CA:FA:57:F1:B2:84:3E:06:B8:C6:9E:A4
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       01896DCEFB0F3EC0E4C7F9CE470C15DA5609
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/CLC7IkCyn0bK-lfxsoQ-BrjGnqQ.roa
Signing time:             Wed 19 Jul 2023 11:00:28 +0000
ROA not before:           Wed 19 Jul 2023 11:00:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25229
IP address blocks:        77.121.17.0/24 maxlen: 24
                          77.121.16.0/24 maxlen: 24
                          77.121.15.0/24 maxlen: 24
                          77.121.13.0/24 maxlen: 24
                          109.201.227.0/24 maxlen: 24
                          77.121.12.0/24 maxlen: 24
                          77.121.18.0/24 maxlen: 24
                          77.121.19.0/24 maxlen: 24
                          77.121.24.0/24 maxlen: 24
                          77.121.23.0/24 maxlen: 24
                          77.121.22.0/24 maxlen: 24
                          77.121.21.0/24 maxlen: 24
                          77.121.20.0/24 maxlen: 24
                          77.121.30.0/24 maxlen: 24
                          77.121.29.0/24 maxlen: 24
                          77.121.28.0/24 maxlen: 24
                          77.121.26.0/24 maxlen: 24
                          77.121.25.0/24 maxlen: 24
                          93.74.0.0/17 maxlen: 18
                          93.74.0.0/16 maxlen: 17
                          109.201.226.0/24 maxlen: 24
                          109.201.225.0/24 maxlen: 24
                          109.201.224.0/24 maxlen: 24
                          77.120.4.0/24 maxlen: 24
                          77.120.6.0/24 maxlen: 24
                          93.73.0.0/16 maxlen: 17
                          93.72.0.0/16 maxlen: 17
                          93.72.0.0/15 maxlen: 16
                          95.69.240.0/21 maxlen: 22
                          77.123.64.0/19 maxlen: 20
                          77.123.0.0/18 maxlen: 19
                          77.123.32.0/19 maxlen: 20
                          77.123.160.0/19 maxlen: 20
                          95.69.192.0/19 maxlen: 20
                          141.170.226.0/24 maxlen: 24
                          141.170.229.0/24 maxlen: 24
                          141.170.227.0/24 maxlen: 24
                          141.170.233.0/24 maxlen: 24
                          141.170.232.0/24 maxlen: 24
                          141.170.231.0/24 maxlen: 24
                          141.170.230.0/24 maxlen: 24
                          141.170.238.0/24 maxlen: 24
                          95.69.224.0/21 maxlen: 22
                          141.170.236.0/24 maxlen: 24
                          77.123.96.0/21 maxlen: 22
                          77.123.104.0/21 maxlen: 22
                          95.69.128.0/20 maxlen: 21
                          95.69.144.0/21 maxlen: 22
                          77.123.112.0/21 maxlen: 22
                          95.69.152.0/22 maxlen: 23
                          77.123.120.0/21 maxlen: 22
                          77.123.128.0/19 maxlen: 20
                          95.69.156.0/22 maxlen: 23
                          95.69.160.0/19 maxlen: 20
                          77.123.144.0/22 maxlen: 22
                          188.230.28.0/22 maxlen: 23
                          188.230.26.0/23 maxlen: 24
                          188.230.32.0/21 maxlen: 22
                          188.230.40.0/21 maxlen: 22
                          188.230.48.0/21 maxlen: 22
                          188.230.56.0/21 maxlen: 22
                          188.230.64.0/21 maxlen: 22
                          188.230.78.0/23 maxlen: 24
                          77.122.128.0/17 maxlen: 18
                          188.230.74.0/23 maxlen: 24
                          188.230.0.0/21 maxlen: 22
                          188.230.0.0/22 maxlen: 23
                          188.230.4.0/23 maxlen: 24
                          188.230.8.0/21 maxlen: 22
                          188.230.16.0/21 maxlen: 22
                          188.230.24.0/23 maxlen: 24
                          77.244.32.0/20 maxlen: 21
                          188.230.80.0/21 maxlen: 22
                          188.230.88.0/22 maxlen: 23
                          188.230.96.0/23 maxlen: 24
                          188.230.116.0/23 maxlen: 24
                          77.121.128.0/20 maxlen: 21
                          77.121.144.0/20 maxlen: 21
                          77.121.160.0/19 maxlen: 20
                          77.121.72.0/21 maxlen: 22
                          77.121.80.0/20 maxlen: 21
                          77.121.96.0/20 maxlen: 21
                          77.121.96.0/19 maxlen: 20
                          77.121.112.0/20 maxlen: 21
                          77.122.0.0/17 maxlen: 18
                          77.122.0.0/16 maxlen: 17
                          77.121.192.0/20 maxlen: 21
                          77.121.192.0/19 maxlen: 20
                          77.121.208.0/21 maxlen: 22
                          77.121.216.0/21 maxlen: 22
                          77.121.224.0/19 maxlen: 20
                          77.120.200.0/21 maxlen: 22
                          77.120.208.0/21 maxlen: 22
                          77.120.112.0/22 maxlen: 22
                          77.120.128.0/18 maxlen: 19
                          109.201.232.0/22 maxlen: 23
                          109.201.228.0/22 maxlen: 23
                          109.201.238.0/23 maxlen: 24
                          109.201.236.0/23 maxlen: 24
                          109.201.240.0/20 maxlen: 21
                          77.121.64.0/21 maxlen: 22
                          77.120.216.0/22 maxlen: 23
                          77.120.224.0/20 maxlen: 21
                          77.120.220.0/22 maxlen: 23
                          77.120.240.0/20 maxlen: 21
                          77.121.0.0/21 maxlen: 22
                          77.121.8.0/22 maxlen: 23
                          93.79.96.0/21 maxlen: 22
                          93.79.104.0/21 maxlen: 22
                          93.79.112.0/21 maxlen: 22
                          93.79.120.0/21 maxlen: 22
                          93.79.64.0/19 maxlen: 20
                          77.120.52.0/22 maxlen: 23
                          77.120.64.0/21 maxlen: 22
                          77.120.60.0/22 maxlen: 23
                          77.120.72.0/21 maxlen: 22
                          77.120.80.0/20 maxlen: 21
                          77.120.96.0/19 maxlen: 20
                          77.120.0.0/20 maxlen: 21
                          77.120.16.0/20 maxlen: 21
                          77.120.32.0/20 maxlen: 21
                          93.78.128.0/17 maxlen: 18
                          93.78.128.0/18 maxlen: 19
                          93.79.0.0/18 maxlen: 19
                          93.79.0.0/19 maxlen: 20
                          93.79.32.0/19 maxlen: 20
                          93.78.192.0/18 maxlen: 19
                          93.77.192.0/19 maxlen: 20
                          93.77.224.0/19 maxlen: 20
                          93.77.128.0/19 maxlen: 20
                          93.78.32.0/20 maxlen: 21
                          93.78.48.0/21 maxlen: 22
                          93.78.56.0/21 maxlen: 22
                          93.78.0.0/19 maxlen: 20
                          93.77.0.0/19 maxlen: 20
                          93.76.160.0/19 maxlen: 20
                          95.69.232.0/24 maxlen: 24
                          141.170.244.0/22 maxlen: 23
                          141.170.250.0/23 maxlen: 24
                          141.170.248.0/23 maxlen: 24
                          95.69.253.0/24 maxlen: 24
                          95.69.252.0/24 maxlen: 24
                          95.69.255.0/24 maxlen: 24
                          95.69.254.0/24 maxlen: 24
                          93.76.192.0/18 maxlen: 19
                          93.77.64.0/18 maxlen: 19
                          82.144.192.0/19 maxlen: 20
                          93.77.32.0/20 maxlen: 21
                          93.77.48.0/21 maxlen: 22
                          93.77.56.0/21 maxlen: 22
                          93.76.0.0/19 maxlen: 20
                          93.76.32.0/20 maxlen: 21
                          93.76.48.0/20 maxlen: 21
                          93.75.224.0/19 maxlen: 20
                          93.76.112.0/20 maxlen: 21
                          93.76.128.0/19 maxlen: 20
                          141.170.226.0/23 maxlen: 24
                          141.170.224.0/23 maxlen: 24
                          141.170.234.0/23 maxlen: 24
                          141.170.240.0/22 maxlen: 23
                          93.76.64.0/20 maxlen: 21
                          93.76.80.0/21 maxlen: 22
                          93.76.88.0/21 maxlen: 22
                          93.76.96.0/21 maxlen: 22
                          93.76.104.0/21 maxlen: 22
                          93.75.64.0/21 maxlen: 22
                          93.75.72.0/21 maxlen: 22
                          93.75.80.0/21 maxlen: 22
                          188.230.71.0/24 maxlen: 24
                          188.230.77.0/24 maxlen: 24
                          188.230.76.0/24 maxlen: 24
                          93.75.88.0/21 maxlen: 22
                          188.230.73.0/24 maxlen: 24
                          188.230.72.0/24 maxlen: 24
                          93.75.0.0/19 maxlen: 20
                          188.230.7.0/24 maxlen: 24
                          93.75.32.0/19 maxlen: 20
                          93.75.160.0/21 maxlen: 22
                          93.75.168.0/21 maxlen: 22
                          93.75.176.0/21 maxlen: 22
                          93.75.184.0/21 maxlen: 22
                          93.75.192.0/19 maxlen: 20
                          93.75.192.0/18 maxlen: 19
                          93.75.96.0/19 maxlen: 20
                          188.230.98.0/24 maxlen: 24
                          188.230.95.0/24 maxlen: 24
                          188.230.94.0/24 maxlen: 24
                          188.230.105.0/24 maxlen: 24
                          188.230.104.0/24 maxlen: 24
                          188.230.103.0/24 maxlen: 24
                          188.230.102.0/24 maxlen: 24
                          188.230.100.0/24 maxlen: 24
                          188.230.99.0/24 maxlen: 24
                          188.230.112.0/24 maxlen: 24
                          188.230.111.0/24 maxlen: 24
                          188.230.109.0/24 maxlen: 24
                          188.230.108.0/24 maxlen: 24
                          188.230.107.0/24 maxlen: 24
                          188.230.106.0/24 maxlen: 24
                          93.75.128.0/19 maxlen: 20
                          188.230.115.0/24 maxlen: 24
                          188.230.113.0/24 maxlen: 24
                          93.74.128.0/17 maxlen: 18

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:6d:ce:fb:0f:3e:c0:e4:c7:f9:ce:47:0c:15:da:56:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Jul 19 11:00:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=08b0bb2240b29f46cafa57f1b2843e06b8c69ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:be:d8:68:3c:ae:4e:99:f0:17:6c:54:9f:ad:
                    10:3d:7d:ca:ca:61:22:b4:60:78:84:01:92:5c:2e:
                    3c:c0:fa:d0:d3:f6:d9:2a:39:3a:37:bc:dc:15:f5:
                    63:35:a4:2d:7e:98:dc:16:a8:9e:a7:ca:30:77:dd:
                    35:a4:78:48:ff:a2:b4:24:50:44:c7:ff:4b:66:82:
                    06:7c:e9:21:f6:e9:7b:97:4e:3d:2c:10:d7:45:ba:
                    2d:ee:47:a3:f6:66:99:00:11:d9:c4:9f:8c:5e:6c:
                    c8:1f:d1:9a:f8:bd:58:01:95:e9:d3:71:a9:5c:49:
                    45:59:b2:87:db:9b:7c:a4:56:2c:8c:77:20:31:95:
                    4e:65:ee:16:a2:2f:6b:e3:a5:f2:15:a3:a2:04:13:
                    17:58:66:19:3d:62:c0:69:6a:3a:3f:84:21:a1:5d:
                    25:9d:2b:20:36:ca:4d:c4:ff:11:98:9d:36:89:cd:
                    ef:54:ab:05:05:05:f4:09:93:74:c8:c5:80:11:d3:
                    a8:db:83:4f:d3:3b:70:f0:27:c0:ec:c8:65:f5:a3:
                    8f:a3:2b:5f:0a:25:f0:4c:ac:9b:02:b5:c2:66:b7:
                    a2:76:9c:75:78:6e:e1:19:e9:36:27:d4:e4:16:e0:
                    eb:4e:e4:c1:7c:f4:d1:e3:0c:95:51:29:51:3b:60:
                    95:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B0:BB:22:40:B2:9F:46:CA:FA:57:F1:B2:84:3E:06:B8:C6:9E:A4
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/CLC7IkCyn0bK-lfxsoQ-BrjGnqQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.120.0.0-77.120.47.255
                  77.120.52.0/22
                  77.120.60.0-77.120.191.255
                  77.120.200.0-77.121.13.255
                  77.121.15.0-77.121.26.255
                  77.121.28.0-77.121.30.255
                  77.121.64.0-77.123.191.255
                  77.244.32.0/20
                  82.144.192.0/19
                  93.72.0.0-93.77.159.255
                  93.77.192.0-93.78.63.255
                  93.78.128.0-93.79.127.255
                  95.69.128.0-95.69.232.255
                  95.69.240.0/21
                  95.69.252.0/22
                  109.201.224.0/19
                  141.170.224.0/22
                  141.170.229.0-141.170.236.255
                  141.170.238.0/24
                  141.170.240.0-141.170.251.255
                  188.230.0.0-188.230.91.255
                  188.230.94.0-188.230.100.255
                  188.230.102.0-188.230.109.255
                  188.230.111.0-188.230.113.255
                  188.230.115.0-188.230.117.255

    Signature Algorithm: sha256WithRSAEncryption
         c7:0c:90:e9:ec:86:ac:0c:4a:12:64:69:c8:fd:cf:59:b1:11:
         b1:78:97:9c:7b:21:f2:3b:11:b4:2f:d3:8f:3f:41:ab:0c:d5:
         cc:39:39:8f:09:6e:d7:e3:4e:e5:f3:8c:eb:2e:49:51:2f:88:
         ad:b1:69:35:c6:4f:9f:54:3b:cc:54:4b:bc:5e:02:99:ec:1f:
         ee:e1:5c:cc:e9:71:94:42:f5:57:6b:9d:cf:41:75:8d:81:bd:
         c7:e6:77:01:76:0f:9b:36:71:91:f5:b0:6f:52:c9:9e:47:1a:
         36:1a:62:64:89:de:88:51:c0:7b:e8:b3:b5:2d:05:9c:cc:dd:
         89:a3:a9:2d:0b:32:64:a1:65:48:19:01:5e:0a:9d:f7:8e:68:
         55:48:e2:6c:ec:a8:72:af:18:bf:f8:d1:c5:47:ef:56:e0:da:
         6a:11:ff:dc:dd:64:ec:93:ef:01:e1:aa:86:7b:8a:fb:4b:db:
         57:fa:53:a2:97:6e:c1:1d:bf:aa:c6:11:df:89:32:6f:ee:97:
         70:76:10:d3:3f:97:fc:30:d1:89:9d:20:14:fb:aa:34:cd:d1:
         8e:8f:a7:23:1c:16:fc:90:4b:a6:d4:63:14:b0:9f:fc:d7:66:
         db:e8:a3:ad:52:62:22:f6:92:3d:25:88:a5:3f:41:69:d6:68:
         5f:fc:7a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:35 2024 by rpki-client on console-fra.rpki-client.org