Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/TL3riem-cqI14462JA7nTLfh0eA.roa
File:                     TL3riem-cqI14462JA7nTLfh0eA.roa (raw, json)
Hash identifier:          +L5XDLXaev2Qn5qHW6itTT36DOKmtxNE66+0SqHJaSM=
Subject key identifier:   4C:BD:EB:89:E9:BE:72:A2:35:E3:8E:B6:24:0E:E7:4C:B7:E1:D1:E0
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       0182FEB4DEF38196F5A8A9F47C1E955F4547
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/TL3riem-cqI14462JA7nTLfh0eA.roa
Signing time:             Fri 02 Sep 2022 14:57:22 +0000
ROA not before:           Fri 02 Sep 2022 14:57:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25229
IP address blocks:        77.121.17.0/24 maxlen: 24
                          77.121.16.0/24 maxlen: 24
                          77.121.15.0/24 maxlen: 24
                          77.121.13.0/24 maxlen: 24
                          77.121.12.0/24 maxlen: 24
                          77.121.19.0/24 maxlen: 24
                          77.121.18.0/24 maxlen: 24
                          77.121.24.0/24 maxlen: 24
                          77.121.23.0/24 maxlen: 24
                          77.121.22.0/24 maxlen: 24
                          77.121.21.0/24 maxlen: 24
                          77.121.20.0/24 maxlen: 24
                          77.121.30.0/24 maxlen: 24
                          77.121.29.0/24 maxlen: 24
                          77.121.28.0/24 maxlen: 24
                          77.121.26.0/24 maxlen: 24
                          77.121.25.0/24 maxlen: 24
                          93.74.0.0/17 maxlen: 18
                          93.74.0.0/16 maxlen: 17
                          77.120.4.0/24 maxlen: 24
                          93.73.0.0/16 maxlen: 17
                          93.72.0.0/16 maxlen: 17
                          93.72.0.0/15 maxlen: 16
                          95.69.240.0/21 maxlen: 22
                          95.69.250.0/23 maxlen: 24
                          95.69.248.0/22 maxlen: 23
                          77.123.64.0/19 maxlen: 20
                          77.123.0.0/18 maxlen: 19
                          77.123.32.0/19 maxlen: 20
                          77.123.160.0/19 maxlen: 20
                          141.170.226.0/24 maxlen: 24
                          141.170.229.0/24 maxlen: 24
                          141.170.227.0/24 maxlen: 24
                          141.170.233.0/24 maxlen: 24
                          141.170.232.0/24 maxlen: 24
                          141.170.231.0/24 maxlen: 24
                          141.170.230.0/24 maxlen: 24
                          141.170.238.0/24 maxlen: 24
                          141.170.236.0/24 maxlen: 24
                          77.123.96.0/21 maxlen: 22
                          77.123.104.0/21 maxlen: 22
                          95.69.128.0/20 maxlen: 21
                          95.69.144.0/21 maxlen: 22
                          77.123.112.0/21 maxlen: 22
                          95.69.152.0/22 maxlen: 23
                          77.123.120.0/21 maxlen: 22
                          77.123.128.0/19 maxlen: 20
                          95.69.156.0/22 maxlen: 23
                          95.69.160.0/21 maxlen: 22
                          77.123.144.0/22 maxlen: 22
                          188.230.28.0/22 maxlen: 23
                          188.230.26.0/23 maxlen: 24
                          188.230.32.0/21 maxlen: 22
                          188.230.40.0/21 maxlen: 22
                          188.230.48.0/21 maxlen: 22
                          188.230.56.0/21 maxlen: 22
                          188.230.64.0/21 maxlen: 22
                          188.230.78.0/23 maxlen: 24
                          77.122.128.0/17 maxlen: 18
                          188.230.74.0/23 maxlen: 24
                          188.230.0.0/21 maxlen: 22
                          188.230.0.0/22 maxlen: 23
                          188.230.4.0/23 maxlen: 24
                          188.230.8.0/21 maxlen: 22
                          188.230.16.0/21 maxlen: 22
                          188.230.24.0/23 maxlen: 24
                          77.244.32.0/20 maxlen: 21
                          188.230.80.0/21 maxlen: 22
                          188.230.88.0/22 maxlen: 23
                          188.230.96.0/23 maxlen: 24
                          188.230.118.0/23 maxlen: 24
                          188.230.116.0/23 maxlen: 24
                          188.230.120.0/22 maxlen: 23
                          188.230.126.0/23 maxlen: 24
                          77.121.128.0/20 maxlen: 21
                          77.121.144.0/20 maxlen: 21
                          77.121.160.0/19 maxlen: 20
                          77.121.72.0/21 maxlen: 22
                          77.121.80.0/20 maxlen: 21
                          77.121.96.0/20 maxlen: 21
                          77.121.96.0/19 maxlen: 20
                          77.121.112.0/20 maxlen: 21
                          77.122.0.0/17 maxlen: 18
                          193.189.96.0/23 maxlen: 24
                          77.122.0.0/16 maxlen: 17
                          77.121.192.0/20 maxlen: 21
                          77.121.192.0/19 maxlen: 20
                          77.121.208.0/21 maxlen: 22
                          77.121.216.0/21 maxlen: 22
                          77.121.224.0/19 maxlen: 20
                          77.120.200.0/21 maxlen: 22
                          77.120.208.0/21 maxlen: 22
                          77.120.112.0/22 maxlen: 22
                          77.120.128.0/18 maxlen: 19
                          77.121.64.0/21 maxlen: 22
                          77.120.216.0/22 maxlen: 23
                          77.120.224.0/22 maxlen: 23
                          77.120.224.0/20 maxlen: 21
                          77.120.220.0/22 maxlen: 23
                          77.120.232.0/22 maxlen: 23
                          77.120.228.0/22 maxlen: 23
                          77.120.236.0/22 maxlen: 23
                          77.120.240.0/20 maxlen: 21
                          77.121.0.0/21 maxlen: 22
                          77.121.8.0/22 maxlen: 23
                          93.79.96.0/21 maxlen: 22
                          93.79.104.0/21 maxlen: 22
                          93.79.112.0/23 maxlen: 24
                          93.79.114.0/23 maxlen: 24
                          93.79.112.0/21 maxlen: 22
                          93.79.120.0/21 maxlen: 22
                          93.79.128.0/17 maxlen: 17
                          93.79.128.0/18 maxlen: 19
                          93.79.64.0/19 maxlen: 20
                          77.120.52.0/22 maxlen: 23
                          77.120.64.0/21 maxlen: 22
                          77.120.60.0/22 maxlen: 23
                          77.120.72.0/21 maxlen: 22
                          77.120.80.0/22 maxlen: 23
                          77.120.80.0/20 maxlen: 21
                          77.120.84.0/22 maxlen: 23
                          77.120.88.0/22 maxlen: 23
                          77.120.92.0/22 maxlen: 23
                          77.120.96.0/19 maxlen: 20
                          77.120.0.0/20 maxlen: 21
                          77.120.16.0/20 maxlen: 21
                          77.120.32.0/20 maxlen: 21
                          93.79.192.0/18 maxlen: 19
                          93.78.96.0/19 maxlen: 20
                          93.78.128.0/17 maxlen: 18
                          93.78.128.0/18 maxlen: 19
                          93.79.0.0/18 maxlen: 19
                          93.79.0.0/19 maxlen: 20
                          93.79.32.0/19 maxlen: 20
                          93.78.192.0/18 maxlen: 19
                          93.77.192.0/19 maxlen: 20
                          93.77.224.0/19 maxlen: 20
                          93.77.128.0/19 maxlen: 20
                          93.78.32.0/20 maxlen: 21
                          93.78.48.0/21 maxlen: 22
                          93.78.56.0/21 maxlen: 22
                          93.78.0.0/19 maxlen: 20
                          93.77.0.0/19 maxlen: 20
                          93.76.160.0/19 maxlen: 20
                          95.69.232.0/24 maxlen: 24
                          141.170.250.0/23 maxlen: 24
                          141.170.248.0/23 maxlen: 24
                          95.69.253.0/24 maxlen: 24
                          95.69.252.0/24 maxlen: 24
                          95.69.255.0/24 maxlen: 24
                          95.69.254.0/24 maxlen: 24
                          93.76.192.0/18 maxlen: 19
                          93.77.64.0/18 maxlen: 19
                          82.144.192.0/19 maxlen: 20
                          93.77.32.0/20 maxlen: 21
                          93.77.48.0/21 maxlen: 22
                          93.77.56.0/21 maxlen: 22
                          93.76.0.0/19 maxlen: 20
                          93.76.32.0/20 maxlen: 21
                          93.76.48.0/20 maxlen: 21
                          93.75.224.0/19 maxlen: 20
                          93.76.112.0/20 maxlen: 21
                          93.76.128.0/19 maxlen: 20
                          141.170.226.0/23 maxlen: 24
                          141.170.224.0/23 maxlen: 24
                          141.170.234.0/23 maxlen: 24
                          141.170.240.0/22 maxlen: 23
                          93.76.64.0/20 maxlen: 21
                          93.76.80.0/21 maxlen: 22
                          93.76.88.0/21 maxlen: 22
                          93.76.96.0/21 maxlen: 22
                          93.76.104.0/21 maxlen: 22
                          93.75.64.0/21 maxlen: 22
                          93.75.72.0/21 maxlen: 22
                          93.75.80.0/21 maxlen: 22
                          188.230.71.0/24 maxlen: 24
                          188.230.77.0/24 maxlen: 24
                          188.230.76.0/24 maxlen: 24
                          93.75.88.0/21 maxlen: 22
                          188.230.73.0/24 maxlen: 24
                          188.230.72.0/24 maxlen: 24
                          93.75.0.0/19 maxlen: 20
                          188.230.7.0/24 maxlen: 24
                          93.75.32.0/19 maxlen: 20
                          93.75.160.0/21 maxlen: 22
                          93.75.168.0/21 maxlen: 22
                          93.75.176.0/21 maxlen: 22
                          93.75.184.0/21 maxlen: 22
                          93.75.192.0/19 maxlen: 20
                          93.75.192.0/18 maxlen: 19
                          93.75.96.0/19 maxlen: 20
                          188.230.98.0/24 maxlen: 24
                          188.230.95.0/24 maxlen: 24
                          188.230.94.0/24 maxlen: 24
                          188.230.105.0/24 maxlen: 24
                          188.230.104.0/24 maxlen: 24
                          188.230.103.0/24 maxlen: 24
                          188.230.102.0/24 maxlen: 24
                          93.75.112.0/20 maxlen: 21
                          188.230.100.0/24 maxlen: 24
                          188.230.99.0/24 maxlen: 24
                          188.230.112.0/24 maxlen: 24
                          188.230.111.0/24 maxlen: 24
                          188.230.109.0/24 maxlen: 24
                          188.230.108.0/24 maxlen: 24
                          188.230.107.0/24 maxlen: 24
                          188.230.106.0/24 maxlen: 24
                          93.75.128.0/20 maxlen: 21
                          93.75.128.0/19 maxlen: 20
                          188.230.115.0/24 maxlen: 24
                          188.230.113.0/24 maxlen: 24
                          188.230.124.0/24 maxlen: 24
                          93.75.144.0/20 maxlen: 21
                          93.74.128.0/17 maxlen: 18

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:fe:b4:de:f3:81:96:f5:a8:a9:f4:7c:1e:95:5f:45:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Sep  2 14:57:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4cbdeb89e9be72a235e38eb6240ee74cb7e1d1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:2c:43:7c:59:0f:89:78:65:de:04:08:4c:
                    ec:b2:5f:5b:06:1f:7e:83:11:61:19:ca:47:2e:26:
                    2e:9f:fa:85:91:68:ac:65:71:27:a6:06:d3:bd:e1:
                    fe:46:96:8e:9d:fe:7d:f0:07:04:fa:f4:cc:52:48:
                    99:b2:d4:98:61:04:1f:8c:e4:f4:94:45:49:f3:97:
                    2d:15:e5:e5:dd:8a:b2:3c:a6:cf:de:e8:9e:5b:14:
                    3a:3a:9f:82:e2:bb:21:f8:91:78:63:1c:46:94:3a:
                    b9:fc:69:8f:ba:bf:b3:54:56:fb:93:07:2d:88:a8:
                    9f:12:f4:66:0d:3b:1c:16:cc:ae:e1:00:bf:f6:22:
                    78:83:be:31:4f:06:a3:39:30:7f:65:fa:c0:c2:70:
                    40:5d:10:ca:3a:62:bf:d8:ed:85:8c:fe:d8:81:6e:
                    f7:f4:e4:17:af:14:37:4f:aa:5b:88:0b:bb:aa:e0:
                    20:e5:17:bf:16:cf:ae:d9:6e:9a:36:4c:01:58:f8:
                    80:ac:31:94:4a:a4:67:80:6b:e0:0b:f0:6a:3d:cf:
                    e7:b4:f0:bf:6d:af:d1:dc:34:91:89:ac:82:17:ef:
                    14:78:23:7d:46:7a:c0:1c:86:c7:0d:e4:0f:70:97:
                    cc:0c:8f:4c:61:1d:bb:2e:d8:69:42:b5:1a:9f:3b:
                    f2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BD:EB:89:E9:BE:72:A2:35:E3:8E:B6:24:0E:E7:4C:B7:E1:D1:E0
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/TL3riem-cqI14462JA7nTLfh0eA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.120.0.0-77.120.47.255
                  77.120.52.0/22
                  77.120.60.0-77.120.191.255
                  77.120.200.0-77.121.13.255
                  77.121.15.0-77.121.26.255
                  77.121.28.0-77.121.30.255
                  77.121.64.0-77.123.191.255
                  77.244.32.0/20
                  82.144.192.0/19
                  93.72.0.0-93.77.159.255
                  93.77.192.0-93.78.63.255
                  93.78.96.0-93.79.255.255
                  95.69.128.0-95.69.167.255
                  95.69.232.0/24
                  95.69.240.0/20
                  141.170.224.0/22
                  141.170.229.0-141.170.236.255
                  141.170.238.0/24
                  141.170.240.0/22
                  141.170.248.0/22
                  188.230.0.0-188.230.91.255
                  188.230.94.0-188.230.100.255
                  188.230.102.0-188.230.109.255
                  188.230.111.0-188.230.113.255
                  188.230.115.0-188.230.124.255
                  188.230.126.0/23
                  193.189.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:5d:f4:c7:96:76:32:5e:91:f7:bb:13:21:b8:13:08:b6:af:
         7b:33:12:2f:a6:3d:68:f5:66:1e:72:75:60:6e:9d:f6:df:0d:
         9d:ba:77:b3:c5:0e:eb:9b:c6:80:68:68:bf:91:be:36:07:9d:
         e6:b8:c2:16:e7:8c:98:43:34:5f:05:86:7d:4d:f7:73:1c:91:
         17:89:de:47:ae:bb:05:02:03:5b:0c:d0:c4:33:78:c0:9b:fd:
         6d:78:5b:0e:44:d1:92:84:4a:47:1e:66:6f:ed:75:59:8e:8a:
         51:3e:e3:23:0a:6b:a1:64:aa:0f:d7:0b:53:53:60:f1:49:f4:
         70:a5:65:9e:f8:e3:e7:92:19:7c:2c:33:41:6e:3b:a0:aa:0f:
         da:e3:11:75:ce:75:ad:29:e4:b2:d0:0b:1a:99:6d:56:75:b1:
         97:df:4b:c4:67:f9:52:7b:92:82:fb:a7:9c:18:e3:a4:9b:48:
         c6:71:ec:f8:21:6a:a0:01:a1:28:3b:7f:9a:24:4b:02:1a:a0:
         6a:e8:b6:58:8c:39:95:1d:8a:99:de:73:f3:c9:3e:7f:5d:3d:
         a2:8a:69:6f:56:79:6c:27:70:03:26:1a:50:87:c9:ca:30:b0:
         f9:d7:e5:3d:64:d5:03:af:4f:4c:d5:b4:b5:e6:6a:60:54:c0:
         ac:32:33:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:35 2024 by rpki-client on console-fra.rpki-client.org