Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/f78cRtOCgkaTnzKtjh0sfN_KUOk.roa
File:                     f78cRtOCgkaTnzKtjh0sfN_KUOk.roa (raw, json)
Hash identifier:          LCNDXUJFyAtH+IJFSOjNuocwecDC222T6sug8WLPytU=
Subject key identifier:   7F:BF:1C:46:D3:82:82:46:93:9F:32:AD:8E:1D:2C:7C:DF:CA:50:E9
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       16B09287
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/f78cRtOCgkaTnzKtjh0sfN_KUOk.roa
Signing time:             Fri 25 Mar 2022 17:36:18 +0000
ROA not before:           Fri 25 Mar 2022 17:36:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25229
IP address blocks:        77.121.17.0/24 maxlen: 24
                          77.121.16.0/24 maxlen: 24
                          77.121.15.0/24 maxlen: 24
                          77.121.13.0/24 maxlen: 24
                          77.121.12.0/24 maxlen: 24
                          77.121.19.0/24 maxlen: 24
                          77.121.18.0/24 maxlen: 24
                          77.121.24.0/24 maxlen: 24
                          77.121.23.0/24 maxlen: 24
                          77.121.22.0/24 maxlen: 24
                          77.121.21.0/24 maxlen: 24
                          77.121.20.0/24 maxlen: 24
                          77.121.30.0/24 maxlen: 24
                          77.121.29.0/24 maxlen: 24
                          77.121.28.0/24 maxlen: 24
                          77.121.26.0/24 maxlen: 24
                          77.121.25.0/24 maxlen: 24
                          93.74.0.0/17 maxlen: 18
                          93.74.0.0/16 maxlen: 17
                          77.120.4.0/24 maxlen: 24
                          93.73.0.0/16 maxlen: 17
                          93.72.0.0/16 maxlen: 17
                          93.72.0.0/15 maxlen: 16
                          95.69.240.0/21 maxlen: 22
                          95.69.250.0/23 maxlen: 24
                          95.69.248.0/22 maxlen: 23
                          77.123.64.0/19 maxlen: 20
                          77.123.0.0/18 maxlen: 19
                          77.123.32.0/19 maxlen: 20
                          77.123.160.0/19 maxlen: 20
                          141.170.226.0/24 maxlen: 24
                          141.170.229.0/24 maxlen: 24
                          141.170.227.0/24 maxlen: 24
                          141.170.233.0/24 maxlen: 24
                          141.170.232.0/24 maxlen: 24
                          141.170.231.0/24 maxlen: 24
                          141.170.230.0/24 maxlen: 24
                          141.170.238.0/24 maxlen: 24
                          141.170.236.0/24 maxlen: 24
                          77.123.96.0/21 maxlen: 22
                          77.123.104.0/21 maxlen: 22
                          95.69.128.0/20 maxlen: 21
                          95.69.144.0/21 maxlen: 22
                          77.123.112.0/21 maxlen: 22
                          95.69.152.0/22 maxlen: 23
                          77.123.120.0/21 maxlen: 22
                          77.123.128.0/19 maxlen: 20
                          95.69.156.0/22 maxlen: 23
                          95.69.160.0/21 maxlen: 22
                          188.230.28.0/22 maxlen: 23
                          188.230.26.0/23 maxlen: 24
                          188.230.32.0/21 maxlen: 22
                          188.230.40.0/21 maxlen: 22
                          188.230.48.0/21 maxlen: 22
                          188.230.56.0/21 maxlen: 22
                          188.230.64.0/21 maxlen: 22
                          188.230.78.0/23 maxlen: 24
                          77.122.128.0/17 maxlen: 18
                          188.230.74.0/23 maxlen: 24
                          188.230.0.0/21 maxlen: 22
                          188.230.0.0/22 maxlen: 23
                          188.230.4.0/23 maxlen: 24
                          188.230.8.0/21 maxlen: 22
                          188.230.16.0/21 maxlen: 22
                          188.230.24.0/23 maxlen: 24
                          77.244.32.0/20 maxlen: 21
                          188.230.80.0/21 maxlen: 22
                          188.230.88.0/22 maxlen: 23
                          188.230.96.0/23 maxlen: 24
                          188.230.118.0/23 maxlen: 24
                          188.230.116.0/23 maxlen: 24
                          188.230.120.0/22 maxlen: 23
                          188.230.126.0/23 maxlen: 24
                          77.121.128.0/20 maxlen: 21
                          77.121.144.0/20 maxlen: 21
                          77.121.160.0/19 maxlen: 20
                          77.121.72.0/21 maxlen: 22
                          77.121.80.0/20 maxlen: 21
                          77.121.96.0/20 maxlen: 21
                          77.121.96.0/19 maxlen: 20
                          77.121.112.0/20 maxlen: 21
                          77.122.0.0/17 maxlen: 18
                          193.189.96.0/23 maxlen: 24
                          77.122.0.0/16 maxlen: 17
                          77.121.192.0/20 maxlen: 21
                          77.121.208.0/21 maxlen: 22
                          77.121.216.0/21 maxlen: 22
                          77.121.224.0/19 maxlen: 20
                          77.120.200.0/21 maxlen: 22
                          77.120.208.0/21 maxlen: 22
                          77.120.128.0/18 maxlen: 19
                          77.121.64.0/21 maxlen: 22
                          77.120.216.0/22 maxlen: 23
                          77.120.224.0/20 maxlen: 21
                          77.120.224.0/22 maxlen: 23
                          77.120.220.0/22 maxlen: 23
                          77.120.232.0/22 maxlen: 23
                          77.120.228.0/22 maxlen: 23
                          77.120.236.0/22 maxlen: 23
                          77.120.240.0/20 maxlen: 21
                          77.121.0.0/21 maxlen: 22
                          77.121.8.0/22 maxlen: 23
                          93.79.96.0/21 maxlen: 22
                          93.79.104.0/21 maxlen: 22
                          93.79.112.0/23 maxlen: 24
                          93.79.114.0/23 maxlen: 24
                          93.79.112.0/21 maxlen: 22
                          93.79.120.0/21 maxlen: 22
                          93.79.128.0/17 maxlen: 17
                          93.79.128.0/18 maxlen: 19
                          93.79.64.0/19 maxlen: 20
                          77.120.52.0/22 maxlen: 23
                          77.120.64.0/21 maxlen: 22
                          77.120.60.0/22 maxlen: 23
                          77.120.72.0/21 maxlen: 22
                          77.120.80.0/22 maxlen: 23
                          77.120.80.0/20 maxlen: 21
                          77.120.84.0/22 maxlen: 23
                          77.120.88.0/22 maxlen: 23
                          77.120.92.0/22 maxlen: 23
                          77.120.96.0/19 maxlen: 20
                          77.120.0.0/20 maxlen: 21
                          77.120.16.0/20 maxlen: 21
                          77.120.32.0/20 maxlen: 21
                          93.79.192.0/18 maxlen: 19
                          93.78.96.0/19 maxlen: 20
                          93.78.128.0/17 maxlen: 18
                          93.78.128.0/18 maxlen: 19
                          93.79.0.0/18 maxlen: 19
                          93.79.0.0/19 maxlen: 20
                          93.79.32.0/19 maxlen: 20
                          93.78.192.0/18 maxlen: 19
                          93.77.192.0/19 maxlen: 20
                          93.77.224.0/19 maxlen: 20
                          93.77.128.0/19 maxlen: 20
                          93.78.32.0/20 maxlen: 21
                          93.78.48.0/21 maxlen: 22
                          93.78.56.0/21 maxlen: 22
                          93.78.0.0/19 maxlen: 20
                          93.77.0.0/19 maxlen: 20
                          93.76.160.0/19 maxlen: 20
                          95.69.232.0/24 maxlen: 24
                          141.170.250.0/23 maxlen: 24
                          141.170.248.0/23 maxlen: 24
                          95.69.253.0/24 maxlen: 24
                          95.69.252.0/24 maxlen: 24
                          95.69.255.0/24 maxlen: 24
                          95.69.254.0/24 maxlen: 24
                          93.76.192.0/18 maxlen: 19
                          93.77.64.0/18 maxlen: 19
                          82.144.192.0/19 maxlen: 20
                          93.77.32.0/20 maxlen: 21
                          93.77.48.0/21 maxlen: 22
                          93.77.56.0/21 maxlen: 22
                          93.76.0.0/19 maxlen: 20
                          93.76.32.0/20 maxlen: 21
                          93.76.48.0/20 maxlen: 21
                          93.75.224.0/19 maxlen: 20
                          93.76.112.0/20 maxlen: 21
                          93.76.128.0/19 maxlen: 20
                          141.170.226.0/23 maxlen: 24
                          141.170.224.0/23 maxlen: 24
                          141.170.234.0/23 maxlen: 24
                          141.170.240.0/22 maxlen: 23
                          93.76.64.0/20 maxlen: 21
                          93.76.80.0/21 maxlen: 22
                          93.76.88.0/21 maxlen: 22
                          93.76.96.0/21 maxlen: 22
                          93.76.104.0/21 maxlen: 22
                          93.75.64.0/21 maxlen: 22
                          93.75.72.0/21 maxlen: 22
                          93.75.80.0/21 maxlen: 22
                          188.230.71.0/24 maxlen: 24
                          188.230.77.0/24 maxlen: 24
                          93.75.88.0/21 maxlen: 22
                          188.230.76.0/24 maxlen: 24
                          188.230.73.0/24 maxlen: 24
                          188.230.72.0/24 maxlen: 24
                          93.75.0.0/19 maxlen: 20
                          188.230.7.0/24 maxlen: 24
                          93.75.32.0/19 maxlen: 20
                          93.75.160.0/21 maxlen: 22
                          93.75.168.0/21 maxlen: 22
                          93.75.176.0/21 maxlen: 22
                          93.75.184.0/21 maxlen: 22
                          93.75.192.0/19 maxlen: 20
                          93.75.192.0/18 maxlen: 19
                          93.75.96.0/19 maxlen: 20
                          188.230.98.0/24 maxlen: 24
                          188.230.95.0/24 maxlen: 24
                          188.230.94.0/24 maxlen: 24
                          188.230.105.0/24 maxlen: 24
                          188.230.104.0/24 maxlen: 24
                          188.230.103.0/24 maxlen: 24
                          188.230.102.0/24 maxlen: 24
                          93.75.112.0/20 maxlen: 21
                          188.230.100.0/24 maxlen: 24
                          188.230.99.0/24 maxlen: 24
                          188.230.112.0/24 maxlen: 24
                          188.230.111.0/24 maxlen: 24
                          188.230.109.0/24 maxlen: 24
                          188.230.108.0/24 maxlen: 24
                          188.230.107.0/24 maxlen: 24
                          188.230.106.0/24 maxlen: 24
                          93.75.128.0/20 maxlen: 21
                          93.75.128.0/19 maxlen: 20
                          188.230.115.0/24 maxlen: 24
                          188.230.113.0/24 maxlen: 24
                          188.230.124.0/24 maxlen: 24
                          93.75.144.0/20 maxlen: 21
                          93.74.128.0/17 maxlen: 18

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380670599 (0x16b09287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Mar 25 17:36:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7fbf1c46d3828246939f32ad8e1d2c7cdfca50e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:14:5b:19:4e:99:62:79:17:3d:27:83:c3:
                    4c:62:ea:27:19:48:4c:ce:bd:af:30:5a:4f:59:82:
                    51:01:c0:06:07:2c:ba:a8:05:3f:e7:90:3a:dc:01:
                    63:31:64:91:73:ea:12:3d:f3:a4:7d:59:ee:a8:96:
                    0a:f9:2d:01:79:93:62:1b:71:0f:c9:f5:bf:dd:99:
                    34:8b:84:37:b5:28:a6:dd:91:03:c4:36:66:ae:11:
                    58:3c:df:fd:63:43:4c:72:17:e6:18:52:25:35:62:
                    ed:c5:a2:06:75:f1:ec:cf:3c:04:0c:00:fe:b2:c1:
                    af:d0:66:6b:0d:72:e6:42:23:bb:25:de:57:1f:1c:
                    71:40:58:9e:bb:0b:e9:a6:42:28:d3:c3:1f:d8:63:
                    67:7b:1f:a8:86:f9:7c:a4:0b:25:75:15:ba:d0:ae:
                    65:55:99:90:6f:de:be:bb:aa:e4:d3:be:03:67:7d:
                    28:79:ab:7f:ee:49:08:88:57:2f:46:b6:5a:3f:05:
                    9b:3b:38:fd:e9:52:fc:2a:69:e9:84:97:63:b6:a1:
                    e8:ab:4d:b9:56:85:e6:e3:c9:e4:82:bb:02:38:94:
                    f8:09:39:27:23:c6:b0:78:61:50:16:3a:d8:ff:dd:
                    cd:70:d7:b3:fd:b5:bd:db:1d:05:be:bf:2f:ca:64:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BF:1C:46:D3:82:82:46:93:9F:32:AD:8E:1D:2C:7C:DF:CA:50:E9
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/f78cRtOCgkaTnzKtjh0sfN_KUOk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.120.0.0-77.120.47.255
                  77.120.52.0/22
                  77.120.60.0-77.120.191.255
                  77.120.200.0-77.121.13.255
                  77.121.15.0-77.121.26.255
                  77.121.28.0-77.121.30.255
                  77.121.64.0-77.123.191.255
                  77.244.32.0/20
                  82.144.192.0/19
                  93.72.0.0-93.77.159.255
                  93.77.192.0-93.78.63.255
                  93.78.96.0-93.79.255.255
                  95.69.128.0-95.69.167.255
                  95.69.232.0/24
                  95.69.240.0/20
                  141.170.224.0/22
                  141.170.229.0-141.170.236.255
                  141.170.238.0/24
                  141.170.240.0/22
                  141.170.248.0/22
                  188.230.0.0-188.230.91.255
                  188.230.94.0-188.230.100.255
                  188.230.102.0-188.230.109.255
                  188.230.111.0-188.230.113.255
                  188.230.115.0-188.230.124.255
                  188.230.126.0/23
                  193.189.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:ad:43:47:7d:28:ca:39:67:b6:57:8a:c8:66:7f:f0:d8:31:
         5f:12:38:c9:24:5f:4d:8d:b6:e2:b4:2f:fe:91:a6:97:7d:b9:
         38:f6:54:80:2b:23:4d:83:dc:32:9d:20:a5:57:ab:02:a1:48:
         50:12:5d:8f:56:e7:82:20:d7:3d:c5:de:2d:47:87:de:ef:99:
         72:57:e3:a7:18:14:d5:ee:e8:b6:c3:02:ad:a1:1e:c9:f5:bc:
         57:df:3a:b5:25:95:ff:05:11:9d:4b:99:94:52:21:00:bb:68:
         82:79:76:8c:d5:c3:af:47:7e:2f:f3:b9:f0:5c:9f:4e:a2:93:
         94:b6:dc:10:43:b9:5c:57:b5:8a:9f:5c:06:11:61:aa:2b:4b:
         61:fa:50:64:2b:8d:b1:90:7d:d1:93:df:ec:a7:f6:9b:8a:2c:
         9b:d1:ee:a0:a3:8c:0d:a5:a4:38:6f:4e:ee:2e:9b:d9:14:eb:
         6f:20:53:c2:6d:1e:9b:91:8d:2b:c9:81:b2:b9:18:c1:59:b1:
         b1:35:e8:4f:ef:e5:17:b9:e2:68:42:13:fa:d3:aa:5e:19:55:
         36:8f:65:27:54:7b:4b:5b:8f:dd:b5:93:88:2b:2d:bc:38:19:
         82:3d:b2:a1:2d:4a:84:5b:93:cc:79:0f:4f:a6:b9:9e:6b:c3:
         c5:06:d1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:35 2024 by rpki-client on console-fra.rpki-client.org