Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/YV4O8sw9WBHUOisaqwAWKczpOgk.roa
File:                     YV4O8sw9WBHUOisaqwAWKczpOgk.roa (raw, json)
Hash identifier:          odsIAU3q1YPMeYw5NzEb8bAHV14jUlboPCp6Y7jCrcU=
Subject key identifier:   61:5E:0E:F2:CC:3D:58:11:D4:3A:2B:1A:AB:00:16:29:CC:E9:3A:09
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       0188510A39C07A5C848129103EBFFB3F8F9F
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/YV4O8sw9WBHUOisaqwAWKczpOgk.roa
Signing time:             Thu 25 May 2023 03:53:24 +0000
ROA not before:           Thu 25 May 2023 03:53:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25229
IP address blocks:        77.121.17.0/24 maxlen: 24
                          77.121.16.0/24 maxlen: 24
                          77.121.15.0/24 maxlen: 24
                          77.121.13.0/24 maxlen: 24
                          77.121.12.0/24 maxlen: 24
                          77.121.19.0/24 maxlen: 24
                          77.121.18.0/24 maxlen: 24
                          77.121.24.0/24 maxlen: 24
                          77.121.23.0/24 maxlen: 24
                          77.121.22.0/24 maxlen: 24
                          77.121.21.0/24 maxlen: 24
                          77.121.20.0/24 maxlen: 24
                          77.121.30.0/24 maxlen: 24
                          77.121.29.0/24 maxlen: 24
                          77.121.28.0/24 maxlen: 24
                          77.121.26.0/24 maxlen: 24
                          77.121.25.0/24 maxlen: 24
                          93.74.0.0/17 maxlen: 18
                          93.74.0.0/16 maxlen: 17
                          77.120.4.0/24 maxlen: 24
                          93.73.0.0/16 maxlen: 17
                          93.72.0.0/16 maxlen: 17
                          93.72.0.0/15 maxlen: 16
                          95.69.240.0/21 maxlen: 22
                          95.69.250.0/23 maxlen: 24
                          95.69.248.0/22 maxlen: 23
                          77.123.64.0/19 maxlen: 20
                          77.123.0.0/18 maxlen: 19
                          77.123.32.0/19 maxlen: 20
                          77.123.160.0/19 maxlen: 20
                          141.170.226.0/24 maxlen: 24
                          45.15.234.0/23 maxlen: 23
                          141.170.229.0/24 maxlen: 24
                          141.170.227.0/24 maxlen: 24
                          141.170.233.0/24 maxlen: 24
                          141.170.232.0/24 maxlen: 24
                          141.170.231.0/24 maxlen: 24
                          141.170.230.0/24 maxlen: 24
                          141.170.238.0/24 maxlen: 24
                          95.69.224.0/21 maxlen: 22
                          141.170.236.0/24 maxlen: 24
                          77.123.96.0/21 maxlen: 22
                          77.123.104.0/21 maxlen: 22
                          95.69.128.0/20 maxlen: 21
                          95.69.144.0/21 maxlen: 22
                          77.123.112.0/21 maxlen: 22
                          95.69.152.0/22 maxlen: 23
                          77.123.120.0/21 maxlen: 22
                          77.123.128.0/19 maxlen: 20
                          95.69.156.0/22 maxlen: 23
                          95.69.160.0/19 maxlen: 20
                          77.123.144.0/22 maxlen: 22
                          188.230.28.0/22 maxlen: 23
                          188.230.26.0/23 maxlen: 24
                          188.230.32.0/21 maxlen: 22
                          188.230.40.0/21 maxlen: 22
                          188.230.48.0/21 maxlen: 22
                          188.230.56.0/21 maxlen: 22
                          188.230.64.0/21 maxlen: 22
                          188.230.78.0/23 maxlen: 24
                          77.122.128.0/17 maxlen: 18
                          188.230.74.0/23 maxlen: 24
                          188.230.0.0/21 maxlen: 22
                          188.230.0.0/22 maxlen: 23
                          188.230.4.0/23 maxlen: 24
                          188.230.8.0/21 maxlen: 22
                          188.230.16.0/21 maxlen: 22
                          188.230.24.0/23 maxlen: 24
                          77.244.32.0/20 maxlen: 21
                          188.230.80.0/21 maxlen: 22
                          188.230.88.0/22 maxlen: 23
                          188.230.96.0/23 maxlen: 24
                          188.230.118.0/23 maxlen: 24
                          188.230.116.0/23 maxlen: 24
                          188.230.120.0/22 maxlen: 23
                          188.230.126.0/23 maxlen: 24
                          77.121.128.0/20 maxlen: 21
                          77.121.144.0/20 maxlen: 21
                          77.121.160.0/19 maxlen: 20
                          77.121.72.0/21 maxlen: 22
                          77.121.80.0/20 maxlen: 21
                          77.121.96.0/20 maxlen: 21
                          77.121.96.0/19 maxlen: 20
                          77.121.112.0/20 maxlen: 21
                          77.122.0.0/17 maxlen: 18
                          193.189.96.0/23 maxlen: 24
                          77.122.0.0/16 maxlen: 17
                          77.121.192.0/20 maxlen: 21
                          77.121.192.0/19 maxlen: 20
                          77.121.208.0/21 maxlen: 22
                          77.121.216.0/21 maxlen: 22
                          77.121.224.0/19 maxlen: 20
                          77.120.200.0/21 maxlen: 22
                          77.120.208.0/21 maxlen: 22
                          77.120.112.0/22 maxlen: 22
                          77.120.128.0/18 maxlen: 19
                          77.121.64.0/21 maxlen: 22
                          77.120.216.0/22 maxlen: 23
                          77.120.224.0/22 maxlen: 23
                          77.120.224.0/20 maxlen: 21
                          77.120.220.0/22 maxlen: 23
                          77.120.232.0/22 maxlen: 23
                          77.120.228.0/22 maxlen: 23
                          77.120.236.0/22 maxlen: 23
                          77.120.240.0/20 maxlen: 21
                          77.121.0.0/21 maxlen: 22
                          77.121.8.0/22 maxlen: 23
                          93.79.96.0/21 maxlen: 22
                          93.79.104.0/21 maxlen: 22
                          93.79.112.0/23 maxlen: 24
                          93.79.114.0/23 maxlen: 24
                          93.79.112.0/21 maxlen: 22
                          93.79.120.0/21 maxlen: 22
                          93.79.128.0/17 maxlen: 17
                          93.79.128.0/18 maxlen: 19
                          93.79.64.0/19 maxlen: 20
                          77.120.52.0/22 maxlen: 23
                          77.120.64.0/21 maxlen: 22
                          77.120.60.0/22 maxlen: 23
                          77.120.72.0/21 maxlen: 22
                          77.120.80.0/22 maxlen: 23
                          77.120.80.0/20 maxlen: 21
                          77.120.84.0/22 maxlen: 23
                          77.120.88.0/22 maxlen: 23
                          77.120.92.0/22 maxlen: 23
                          77.120.96.0/19 maxlen: 20
                          77.120.0.0/20 maxlen: 21
                          77.120.16.0/20 maxlen: 21
                          77.120.32.0/20 maxlen: 21
                          93.79.192.0/18 maxlen: 19
                          93.78.96.0/19 maxlen: 20
                          93.78.128.0/17 maxlen: 18
                          93.78.128.0/18 maxlen: 19
                          93.79.0.0/18 maxlen: 19
                          93.79.0.0/19 maxlen: 20
                          93.79.32.0/19 maxlen: 20
                          93.78.192.0/18 maxlen: 19
                          93.77.192.0/19 maxlen: 20
                          93.77.224.0/19 maxlen: 20
                          93.77.128.0/19 maxlen: 20
                          93.78.32.0/20 maxlen: 21
                          93.78.48.0/21 maxlen: 22
                          93.78.56.0/21 maxlen: 22
                          93.78.0.0/19 maxlen: 20
                          93.77.0.0/19 maxlen: 20
                          93.76.160.0/19 maxlen: 20
                          95.69.232.0/24 maxlen: 24
                          141.170.250.0/23 maxlen: 24
                          141.170.248.0/23 maxlen: 24
                          95.69.253.0/24 maxlen: 24
                          95.69.252.0/24 maxlen: 24
                          95.69.255.0/24 maxlen: 24
                          95.69.254.0/24 maxlen: 24
                          93.76.192.0/18 maxlen: 19
                          93.77.64.0/18 maxlen: 19
                          82.144.192.0/19 maxlen: 20
                          93.77.32.0/20 maxlen: 21
                          93.77.48.0/21 maxlen: 22
                          93.77.56.0/21 maxlen: 22
                          93.76.0.0/19 maxlen: 20
                          93.76.32.0/20 maxlen: 21
                          93.76.48.0/20 maxlen: 21
                          93.75.224.0/19 maxlen: 20
                          93.76.112.0/20 maxlen: 21
                          93.76.128.0/19 maxlen: 20
                          141.170.226.0/23 maxlen: 24
                          141.170.224.0/23 maxlen: 24
                          45.15.234.0/24 maxlen: 24
                          141.170.234.0/23 maxlen: 24
                          141.170.240.0/22 maxlen: 23
                          93.76.64.0/20 maxlen: 21
                          93.76.80.0/21 maxlen: 22
                          93.76.88.0/21 maxlen: 22
                          93.76.96.0/21 maxlen: 22
                          93.76.104.0/21 maxlen: 22
                          93.75.64.0/21 maxlen: 22
                          93.75.72.0/21 maxlen: 22
                          93.75.80.0/21 maxlen: 22
                          188.230.71.0/24 maxlen: 24
                          188.230.77.0/24 maxlen: 24
                          188.230.76.0/24 maxlen: 24
                          93.75.88.0/21 maxlen: 22
                          188.230.73.0/24 maxlen: 24
                          188.230.72.0/24 maxlen: 24
                          93.75.0.0/19 maxlen: 20
                          188.230.7.0/24 maxlen: 24
                          93.75.32.0/19 maxlen: 20
                          93.75.160.0/21 maxlen: 22
                          93.75.168.0/21 maxlen: 22
                          93.75.176.0/21 maxlen: 22
                          93.75.184.0/21 maxlen: 22
                          93.75.192.0/19 maxlen: 20
                          93.75.192.0/18 maxlen: 19
                          93.75.96.0/19 maxlen: 20
                          188.230.98.0/24 maxlen: 24
                          188.230.95.0/24 maxlen: 24
                          188.230.94.0/24 maxlen: 24
                          188.230.105.0/24 maxlen: 24
                          188.230.104.0/24 maxlen: 24
                          188.230.103.0/24 maxlen: 24
                          188.230.102.0/24 maxlen: 24
                          93.75.112.0/20 maxlen: 21
                          188.230.100.0/24 maxlen: 24
                          188.230.99.0/24 maxlen: 24
                          188.230.112.0/24 maxlen: 24
                          188.230.111.0/24 maxlen: 24
                          188.230.109.0/24 maxlen: 24
                          188.230.108.0/24 maxlen: 24
                          188.230.107.0/24 maxlen: 24
                          188.230.106.0/24 maxlen: 24
                          93.75.128.0/20 maxlen: 21
                          93.75.128.0/19 maxlen: 20
                          188.230.115.0/24 maxlen: 24
                          188.230.113.0/24 maxlen: 24
                          188.230.124.0/24 maxlen: 24
                          93.75.144.0/20 maxlen: 21
                          93.74.128.0/17 maxlen: 18

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:51:0a:39:c0:7a:5c:84:81:29:10:3e:bf:fb:3f:8f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: May 25 03:53:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=615e0ef2cc3d5811d43a2b1aab001629cce93a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:90:90:b9:fe:cd:e5:04:85:97:48:f8:6d:cd:
                    60:de:87:b2:0d:ea:d7:5a:08:4f:0a:2e:fe:ac:58:
                    63:30:ca:9c:68:17:67:5b:0f:f6:24:05:99:6b:33:
                    be:69:6b:6f:04:e8:44:e1:41:2e:dc:ab:e3:71:7f:
                    80:fb:7b:27:46:05:54:7b:4a:67:4a:16:ae:b2:8c:
                    a6:c5:60:90:81:a5:00:94:91:ce:fc:83:cf:ed:b1:
                    06:86:31:bb:5d:18:6c:47:a3:b2:71:00:7d:e8:47:
                    fe:cd:7f:e9:66:b0:dc:1e:48:be:f2:b8:2e:0a:1f:
                    97:b8:8b:c4:5f:22:ee:fa:89:69:1e:b5:97:87:32:
                    0f:37:de:14:f8:d9:6c:4d:f3:dd:f1:9e:43:03:2d:
                    72:f5:88:02:f7:7d:a3:c2:96:b3:5d:42:65:25:37:
                    c2:ad:8b:6b:d6:76:91:c3:6a:0d:97:fb:cd:9a:86:
                    d5:1b:48:9b:35:74:3f:e4:25:cf:63:10:d8:95:a5:
                    59:84:59:92:fb:91:af:02:47:72:05:d8:79:61:60:
                    90:fd:3f:3c:32:cc:a4:f2:02:23:18:5c:76:82:b5:
                    08:5e:4d:0d:b3:54:44:74:22:af:02:6a:15:4c:64:
                    43:10:7f:5c:92:81:f3:06:bd:0c:d8:96:10:a3:5d:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5E:0E:F2:CC:3D:58:11:D4:3A:2B:1A:AB:00:16:29:CC:E9:3A:09
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/YV4O8sw9WBHUOisaqwAWKczpOgk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.15.234.0/23
                  77.120.0.0-77.120.47.255
                  77.120.52.0/22
                  77.120.60.0-77.120.191.255
                  77.120.200.0-77.121.13.255
                  77.121.15.0-77.121.26.255
                  77.121.28.0-77.121.30.255
                  77.121.64.0-77.123.191.255
                  77.244.32.0/20
                  82.144.192.0/19
                  93.72.0.0-93.77.159.255
                  93.77.192.0-93.78.63.255
                  93.78.96.0-93.79.255.255
                  95.69.128.0/18
                  95.69.224.0-95.69.232.255
                  95.69.240.0/20
                  141.170.224.0/22
                  141.170.229.0-141.170.236.255
                  141.170.238.0/24
                  141.170.240.0/22
                  141.170.248.0/22
                  188.230.0.0-188.230.91.255
                  188.230.94.0-188.230.100.255
                  188.230.102.0-188.230.109.255
                  188.230.111.0-188.230.113.255
                  188.230.115.0-188.230.124.255
                  188.230.126.0/23
                  193.189.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:3d:8a:4d:54:ca:e0:ed:1b:63:6d:47:e1:21:05:c6:54:fb:
         a1:29:40:79:26:80:27:21:da:c0:68:b3:2a:90:1c:c2:23:05:
         f3:ec:b1:6e:e2:6d:ca:5c:c3:83:f4:b5:16:4a:c7:22:6b:91:
         5d:0e:2f:a8:5e:de:e4:59:6d:bd:41:01:d1:68:e5:1d:78:74:
         58:0a:3e:0d:ad:4d:51:60:8d:de:9b:44:9e:8a:b2:99:9a:20:
         98:67:08:9a:72:5a:b3:7e:a3:e2:a1:44:72:d3:1f:6c:8b:2e:
         3e:96:50:7f:0b:41:25:f3:e5:fe:ba:49:26:e3:94:43:eb:2e:
         85:ed:40:70:d5:05:45:17:03:1c:28:25:22:ce:cf:eb:5c:53:
         d7:92:af:85:ce:bb:06:a6:78:40:e3:d1:38:dd:9a:f1:61:01:
         34:e1:4b:4d:2f:7a:04:12:d1:04:4b:cf:7d:65:fa:29:be:a9:
         ef:44:a5:53:30:5b:cd:d4:84:31:1b:4d:cd:e3:09:13:7b:db:
         91:47:89:85:60:83:6a:ef:33:8f:a1:09:64:7e:50:5a:86:09:
         55:24:36:79:3c:1e:da:a3:fd:a2:55:b6:40:84:89:e7:a0:f0:
         27:21:30:80:38:d8:04:67:53:97:ac:75:17:b2:64:59:d5:c1:
         a3:53:a0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:17 2024 by rpki-client on console-ams.rpki-client.org