Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/fr-ySinj4c0cDVxO9LWQMWQd-OM.roa
File:                     fr-ySinj4c0cDVxO9LWQMWQd-OM.roa (raw, json)
Hash identifier:          t235diZapXrBo6kpqWpJOrK5COVeAijth4CSxpL4nr0=
Subject key identifier:   7E:BF:B2:4A:29:E3:E1:CD:1C:0D:5C:4E:F4:B5:90:31:64:1D:F8:E3
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       0189730EF34EB37D94CE525546458F772942
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/fr-ySinj4c0cDVxO9LWQMWQd-OM.roa
Signing time:             Thu 20 Jul 2023 11:28:26 +0000
ROA not before:           Thu 20 Jul 2023 11:28:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25229
IP address blocks:        77.121.17.0/24 maxlen: 24
                          77.121.16.0/24 maxlen: 24
                          77.121.15.0/24 maxlen: 24
                          77.121.13.0/24 maxlen: 24
                          109.201.227.0/24 maxlen: 24
                          77.121.12.0/24 maxlen: 24
                          77.121.18.0/24 maxlen: 24
                          77.121.19.0/24 maxlen: 24
                          77.121.24.0/24 maxlen: 24
                          77.121.23.0/24 maxlen: 24
                          77.121.22.0/24 maxlen: 24
                          77.121.21.0/24 maxlen: 24
                          77.121.20.0/24 maxlen: 24
                          77.121.30.0/24 maxlen: 24
                          77.121.29.0/24 maxlen: 24
                          77.121.28.0/24 maxlen: 24
                          77.121.26.0/24 maxlen: 24
                          77.121.25.0/24 maxlen: 24
                          93.74.0.0/17 maxlen: 18
                          93.74.0.0/16 maxlen: 17
                          109.201.226.0/24 maxlen: 24
                          109.201.225.0/24 maxlen: 24
                          109.201.224.0/24 maxlen: 24
                          77.120.4.0/24 maxlen: 24
                          77.120.6.0/24 maxlen: 24
                          93.73.0.0/16 maxlen: 17
                          93.72.0.0/16 maxlen: 17
                          93.72.0.0/15 maxlen: 16
                          95.69.240.0/21 maxlen: 22
                          77.123.64.0/19 maxlen: 20
                          77.123.0.0/18 maxlen: 19
                          77.123.32.0/19 maxlen: 20
                          77.123.160.0/19 maxlen: 20
                          95.69.192.0/19 maxlen: 20
                          141.170.226.0/24 maxlen: 24
                          141.170.229.0/24 maxlen: 24
                          141.170.227.0/24 maxlen: 24
                          141.170.233.0/24 maxlen: 24
                          141.170.232.0/24 maxlen: 24
                          141.170.231.0/24 maxlen: 24
                          141.170.230.0/24 maxlen: 24
                          141.170.238.0/24 maxlen: 24
                          95.69.224.0/21 maxlen: 22
                          141.170.236.0/24 maxlen: 24
                          77.123.96.0/21 maxlen: 22
                          77.123.104.0/21 maxlen: 22
                          95.69.128.0/20 maxlen: 21
                          95.69.144.0/21 maxlen: 22
                          77.123.112.0/21 maxlen: 22
                          95.69.152.0/22 maxlen: 23
                          77.123.120.0/21 maxlen: 22
                          77.123.128.0/19 maxlen: 20
                          95.69.156.0/22 maxlen: 23
                          95.69.160.0/19 maxlen: 20
                          77.123.144.0/22 maxlen: 22
                          188.230.28.0/22 maxlen: 23
                          188.230.26.0/23 maxlen: 24
                          188.230.32.0/21 maxlen: 22
                          188.230.40.0/21 maxlen: 22
                          188.230.48.0/21 maxlen: 22
                          188.230.56.0/21 maxlen: 22
                          188.230.64.0/21 maxlen: 22
                          188.230.78.0/23 maxlen: 24
                          77.122.128.0/17 maxlen: 18
                          188.230.74.0/23 maxlen: 24
                          188.230.0.0/21 maxlen: 22
                          188.230.0.0/22 maxlen: 23
                          188.230.4.0/23 maxlen: 24
                          188.230.8.0/21 maxlen: 22
                          188.230.16.0/21 maxlen: 22
                          188.230.24.0/23 maxlen: 24
                          77.244.32.0/20 maxlen: 21
                          188.230.80.0/21 maxlen: 22
                          188.230.88.0/22 maxlen: 23
                          188.230.96.0/23 maxlen: 24
                          188.230.116.0/23 maxlen: 24
                          77.121.128.0/20 maxlen: 21
                          77.121.144.0/20 maxlen: 21
                          77.121.160.0/19 maxlen: 20
                          77.121.72.0/21 maxlen: 22
                          77.121.80.0/20 maxlen: 21
                          77.121.96.0/20 maxlen: 21
                          77.121.96.0/19 maxlen: 20
                          77.121.112.0/20 maxlen: 21
                          77.122.0.0/17 maxlen: 18
                          77.122.0.0/16 maxlen: 17
                          77.121.192.0/20 maxlen: 21
                          77.121.192.0/19 maxlen: 20
                          77.121.208.0/21 maxlen: 22
                          77.121.216.0/21 maxlen: 22
                          77.121.224.0/19 maxlen: 20
                          77.120.200.0/21 maxlen: 22
                          77.120.208.0/21 maxlen: 22
                          77.120.112.0/22 maxlen: 22
                          77.120.128.0/18 maxlen: 24
                          109.201.232.0/22 maxlen: 23
                          109.201.228.0/22 maxlen: 23
                          109.201.238.0/23 maxlen: 24
                          109.201.236.0/23 maxlen: 24
                          109.201.240.0/20 maxlen: 21
                          77.121.64.0/21 maxlen: 22
                          77.120.216.0/22 maxlen: 23
                          77.120.224.0/20 maxlen: 21
                          77.120.220.0/22 maxlen: 23
                          77.120.240.0/20 maxlen: 21
                          77.121.0.0/21 maxlen: 22
                          77.121.8.0/22 maxlen: 23
                          93.79.96.0/21 maxlen: 22
                          93.79.104.0/21 maxlen: 22
                          93.79.112.0/21 maxlen: 22
                          93.79.120.0/21 maxlen: 22
                          93.79.64.0/19 maxlen: 20
                          77.120.52.0/22 maxlen: 23
                          77.120.64.0/21 maxlen: 22
                          77.120.60.0/22 maxlen: 23
                          77.120.72.0/21 maxlen: 22
                          77.120.80.0/20 maxlen: 21
                          77.120.96.0/19 maxlen: 20
                          77.120.0.0/20 maxlen: 21
                          77.120.16.0/20 maxlen: 21
                          77.120.32.0/20 maxlen: 21
                          93.78.128.0/17 maxlen: 18
                          93.78.128.0/18 maxlen: 19
                          93.79.0.0/18 maxlen: 19
                          93.79.0.0/19 maxlen: 20
                          93.79.32.0/19 maxlen: 20
                          93.78.192.0/18 maxlen: 19
                          93.77.192.0/19 maxlen: 20
                          93.77.224.0/19 maxlen: 20
                          93.77.128.0/19 maxlen: 20
                          93.78.32.0/20 maxlen: 21
                          93.78.48.0/21 maxlen: 22
                          93.78.56.0/21 maxlen: 22
                          93.78.0.0/19 maxlen: 20
                          93.77.0.0/19 maxlen: 20
                          93.76.160.0/19 maxlen: 20
                          95.69.232.0/24 maxlen: 24
                          141.170.244.0/22 maxlen: 23
                          141.170.250.0/23 maxlen: 24
                          141.170.248.0/23 maxlen: 24
                          95.69.253.0/24 maxlen: 24
                          95.69.252.0/24 maxlen: 24
                          95.69.255.0/24 maxlen: 24
                          95.69.254.0/24 maxlen: 24
                          93.76.192.0/18 maxlen: 19
                          93.77.64.0/18 maxlen: 19
                          82.144.192.0/19 maxlen: 20
                          93.77.32.0/20 maxlen: 21
                          93.77.48.0/21 maxlen: 22
                          93.77.56.0/21 maxlen: 22
                          93.76.0.0/19 maxlen: 20
                          93.76.32.0/20 maxlen: 21
                          93.76.48.0/20 maxlen: 21
                          93.75.224.0/19 maxlen: 20
                          93.76.112.0/20 maxlen: 21
                          93.76.128.0/19 maxlen: 20
                          141.170.226.0/23 maxlen: 24
                          141.170.224.0/23 maxlen: 24
                          141.170.234.0/23 maxlen: 24
                          141.170.240.0/22 maxlen: 23
                          93.76.64.0/20 maxlen: 21
                          93.76.80.0/21 maxlen: 22
                          93.76.88.0/21 maxlen: 22
                          93.76.96.0/21 maxlen: 22
                          93.76.104.0/21 maxlen: 22
                          93.75.64.0/21 maxlen: 22
                          93.75.72.0/21 maxlen: 22
                          93.75.80.0/21 maxlen: 22
                          188.230.71.0/24 maxlen: 24
                          188.230.77.0/24 maxlen: 24
                          93.75.88.0/21 maxlen: 22
                          188.230.76.0/24 maxlen: 24
                          188.230.73.0/24 maxlen: 24
                          188.230.72.0/24 maxlen: 24
                          93.75.0.0/19 maxlen: 20
                          188.230.7.0/24 maxlen: 24
                          93.75.32.0/19 maxlen: 20
                          93.75.160.0/21 maxlen: 22
                          93.75.168.0/21 maxlen: 22
                          93.75.176.0/21 maxlen: 22
                          93.75.184.0/21 maxlen: 22
                          93.75.192.0/19 maxlen: 20
                          93.75.192.0/18 maxlen: 19
                          93.75.96.0/19 maxlen: 20
                          188.230.98.0/24 maxlen: 24
                          188.230.95.0/24 maxlen: 24
                          188.230.94.0/24 maxlen: 24
                          188.230.105.0/24 maxlen: 24
                          188.230.104.0/24 maxlen: 24
                          188.230.103.0/24 maxlen: 24
                          188.230.102.0/24 maxlen: 24
                          188.230.100.0/24 maxlen: 24
                          188.230.99.0/24 maxlen: 24
                          188.230.112.0/24 maxlen: 24
                          188.230.111.0/24 maxlen: 24
                          188.230.109.0/24 maxlen: 24
                          188.230.108.0/24 maxlen: 24
                          188.230.107.0/24 maxlen: 24
                          188.230.106.0/24 maxlen: 24
                          93.75.128.0/19 maxlen: 20
                          188.230.115.0/24 maxlen: 24
                          188.230.113.0/24 maxlen: 24
                          93.74.128.0/17 maxlen: 18

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:73:0e:f3:4e:b3:7d:94:ce:52:55:46:45:8f:77:29:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Jul 20 11:28:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ebfb24a29e3e1cd1c0d5c4ef4b59031641df8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:11:a2:3a:d2:a5:f4:c1:c6:5d:34:fa:89:40:
                    1f:02:52:e8:52:42:dd:8c:1b:dd:b3:9c:ef:bc:68:
                    f6:21:6e:e5:ed:5e:80:e9:91:d1:c4:7c:4b:22:e4:
                    c8:d9:11:ed:02:f0:10:f1:c3:f0:21:dc:c3:0f:eb:
                    a3:8d:e3:1f:f5:41:31:71:9c:b1:3b:6f:70:c8:8c:
                    75:58:6c:b3:4e:f6:eb:69:e5:ac:08:7b:d2:12:85:
                    15:f1:61:c9:39:b3:2c:34:0e:fc:11:7b:27:23:2e:
                    c3:fa:e5:a6:30:0f:1e:c2:94:4d:a6:7f:b7:24:5b:
                    c7:67:77:76:9b:82:11:a5:f5:62:96:d2:3b:f8:06:
                    7b:60:13:7b:5d:79:10:9c:58:17:26:0c:ec:c3:3e:
                    49:ee:ea:c7:a9:b0:44:48:3d:af:89:b4:7d:35:2c:
                    96:b3:b0:36:2a:db:d2:b1:1f:89:97:3b:14:b3:21:
                    9e:d8:cd:81:36:05:84:03:42:67:d6:b9:63:e0:20:
                    c9:2b:06:1a:c7:43:14:4a:da:f7:8c:59:d7:24:dc:
                    cf:70:8c:d4:e5:12:e7:74:33:25:11:bf:35:7c:d0:
                    52:03:f0:6d:98:77:1b:b7:57:67:09:13:b7:36:d1:
                    34:31:05:aa:44:ca:c9:ad:aa:52:f1:58:4c:71:b3:
                    e5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BF:B2:4A:29:E3:E1:CD:1C:0D:5C:4E:F4:B5:90:31:64:1D:F8:E3
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/fr-ySinj4c0cDVxO9LWQMWQd-OM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.120.0.0-77.120.47.255
                  77.120.52.0/22
                  77.120.60.0-77.120.191.255
                  77.120.200.0-77.121.13.255
                  77.121.15.0-77.121.26.255
                  77.121.28.0-77.121.30.255
                  77.121.64.0-77.123.191.255
                  77.244.32.0/20
                  82.144.192.0/19
                  93.72.0.0-93.77.159.255
                  93.77.192.0-93.78.63.255
                  93.78.128.0-93.79.127.255
                  95.69.128.0-95.69.232.255
                  95.69.240.0/21
                  95.69.252.0/22
                  109.201.224.0/19
                  141.170.224.0/22
                  141.170.229.0-141.170.236.255
                  141.170.238.0/24
                  141.170.240.0-141.170.251.255
                  188.230.0.0-188.230.91.255
                  188.230.94.0-188.230.100.255
                  188.230.102.0-188.230.109.255
                  188.230.111.0-188.230.113.255
                  188.230.115.0-188.230.117.255

    Signature Algorithm: sha256WithRSAEncryption
         10:51:02:e8:ce:1e:e7:84:0a:32:d8:08:8f:ea:da:de:92:48:
         3f:46:97:86:ef:8e:39:27:5d:39:e5:e5:8f:a7:5f:63:79:01:
         ff:d1:f1:2c:5c:00:f7:e9:77:d7:56:f4:01:a7:c7:60:17:0d:
         19:47:46:a6:33:94:ce:9e:54:ab:0a:b2:e1:db:50:3c:72:e5:
         71:4d:29:bd:17:f4:1b:89:3f:25:64:1e:de:5c:16:92:b9:1a:
         6a:cb:6e:dd:25:9d:2d:74:e5:d3:18:84:43:3f:7b:ba:10:f2:
         42:b3:0c:44:a5:05:1e:cb:99:8d:cc:95:70:8f:34:8b:0c:10:
         6e:34:2d:cd:41:7d:6d:94:87:e0:62:19:1a:1c:80:ab:fc:5a:
         e9:9d:3f:66:90:08:ed:21:b5:0d:de:02:04:1b:04:88:93:5d:
         55:54:81:00:3e:07:d3:9d:4c:20:d5:98:5d:8c:32:c1:aa:50:
         5e:51:64:8a:01:d4:d0:8b:c1:bc:7e:c8:ea:5b:29:b3:eb:40:
         42:18:e5:5c:8a:9c:ee:9e:c2:75:5e:4b:30:66:cb:a6:eb:b2:
         c1:3e:4b:4f:83:1f:89:71:01:2a:b6:cf:f7:26:81:a7:4c:1f:
         4e:07:a0:52:8e:01:c5:84:9d:7b:ba:50:0a:74:59:71:51:7e:
         6d:c3:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:35 2024 by rpki-client on console-fra.rpki-client.org